Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/323830343a346364343a383030303a3a2f33332d3333203d3e20323637333935.roa
File:                     323830343a346364343a383030303a3a2f33332d3333203d3e20323637333935.roa (raw, json)
Hash identifier:          vovL9pR7NaRmga73OVMRVICwlqj/1TDH5Mcz3L8ef5E=
Subject key identifier:   84:7D:FC:83:21:53:72:2A:3D:05:29:00:A1:3C:FA:77:E4:BD:39:2F
Certificate issuer:       /CN=FCC7A10CD64B84116220258C164688796EE17437
Certificate serial:       4D9A6E20114044378A433C67B0E743BFCF3E22BE
Authority key identifier: FC:C7:A1:0C:D6:4B:84:11:62:20:25:8C:16:46:88:79:6E:E1:74:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCC7A10CD64B84116220258C164688796EE17437.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/323830343a346364343a383030303a3a2f33332d3333203d3e20323637333935.roa
Signing time:             Thu 15 Feb 2024 13:48:02 +0000
ROA not before:           Thu 15 Feb 2024 13:43:02 +0000
ROA not after:            Thu 13 Feb 2025 13:48:02 +0000
asID:                     267395
IP address blocks:        2804:4cd4:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:9a:6e:20:11:40:44:37:8a:43:3c:67:b0:e7:43:bf:cf:3e:22:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCC7A10CD64B84116220258C164688796EE17437
        Validity
            Not Before: Feb 15 13:43:02 2024 GMT
            Not After : Feb 13 13:48:02 2025 GMT
        Subject: CN=847DFC832153722A3D052900A13CFA77E4BD392F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2a:b9:a0:6e:dc:3a:45:4e:6b:c4:03:99:8d:
                    3f:ef:67:b0:4d:b7:b0:d6:30:e4:09:11:fc:69:a6:
                    25:ba:b3:c6:d0:b1:f0:35:6d:b1:18:8b:ee:8b:7c:
                    88:a5:1b:eb:7b:bf:15:28:7c:2a:fe:f0:85:66:89:
                    78:cc:c9:f9:33:3f:a0:4c:22:aa:b0:00:75:d7:3e:
                    b8:31:9b:38:e4:0f:6d:5f:d1:ef:5d:ca:69:5f:aa:
                    ad:6d:0c:0a:b1:3b:a7:5a:e5:03:9a:7f:95:b0:f7:
                    38:43:fe:21:9f:12:b6:c6:d1:99:d4:1b:3d:8c:ee:
                    8a:75:ed:45:68:df:b4:e5:d5:7c:bc:9f:c7:b4:04:
                    5d:75:7e:8a:c4:e8:a4:62:42:a9:c1:d1:49:5e:7a:
                    66:58:9f:32:d0:b6:4e:eb:63:33:f5:f0:0b:56:74:
                    f1:1b:d0:a3:17:b3:54:38:07:2f:52:47:20:68:d4:
                    46:c6:0a:c8:59:48:01:24:80:38:25:68:e4:96:a0:
                    0a:4f:d5:53:c4:4e:04:85:8b:dd:71:4f:2e:5f:4f:
                    34:59:d3:dc:38:bb:e6:5c:d8:09:c1:10:b5:25:e8:
                    50:c6:9a:cd:90:de:88:79:5c:ab:ee:09:d5:18:26:
                    ff:5c:60:bf:7d:ee:d1:e5:57:66:f0:ae:29:39:26:
                    1c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7D:FC:83:21:53:72:2A:3D:05:29:00:A1:3C:FA:77:E4:BD:39:2F
            X509v3 Authority Key Identifier:
                keyid:FC:C7:A1:0C:D6:4B:84:11:62:20:25:8C:16:46:88:79:6E:E1:74:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/FCC7A10CD64B84116220258C164688796EE17437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCC7A10CD64B84116220258C164688796EE17437.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/323830343a346364343a383030303a3a2f33332d3333203d3e20323637333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cd4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         bd:d7:0a:42:1f:5e:30:ee:65:02:9b:82:56:17:25:cc:05:b0:
         24:b2:e1:a6:29:79:fe:48:0e:74:f0:6d:78:e9:5d:52:2f:c2:
         6e:3c:0b:e5:36:8f:a9:fa:83:e0:27:bc:53:66:87:4c:c5:64:
         4d:04:61:3a:a9:4a:55:12:ee:07:74:68:b1:02:e5:da:61:68:
         b4:45:90:3d:a8:24:06:bf:2d:16:83:8b:6b:e7:3d:16:b9:e6:
         64:1a:24:1c:bf:75:0a:e8:5a:84:b4:df:11:8c:34:a0:51:ac:
         f6:7f:17:ef:5c:e9:77:18:cf:11:fe:5d:95:2f:b8:38:95:af:
         f7:a9:03:c9:1c:b3:b7:ff:58:04:a8:10:d0:02:1e:9e:68:0b:
         29:9d:86:7e:31:2a:86:3f:bc:ee:43:6a:3c:18:d2:54:8d:5b:
         18:bd:d1:c6:70:c8:da:93:55:64:5c:61:de:d0:30:5c:1e:b5:
         b0:53:97:09:4c:fd:bc:85:5b:8c:82:02:18:59:81:e4:b6:5a:
         1c:0a:02:31:08:3b:f9:3b:cd:13:35:9f:6f:a0:2f:de:05:c6:
         c9:69:03:74:01:44:56:3f:ad:d6:ac:9e:65:cb:7f:8d:24:7d:
         44:a5:70:bf:b2:1e:87:1a:87:ac:f0:5b:15:d1:78:07:d0:98:
         05:a4:0d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org