Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/323830343a326362343a3a2f33322d3332203d3e20323635323338.roa
File:                     323830343a326362343a3a2f33322d3332203d3e20323635323338.roa (raw, json)
Hash identifier:          I8mMvWaORSGUPw6pyl7ODe5z8nMgKrEYE97zOMqyJgw=
Subject key identifier:   97:9E:58:66:16:CB:BC:57:29:2B:DA:57:05:D6:49:54:A0:19:DC:C3
Certificate issuer:       /CN=F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5
Certificate serial:       285DA7A297F38911762DCB0FCFB1E46F610758E4
Authority key identifier: F2:C7:98:CC:A8:39:52:3F:B3:C7:E4:C6:A3:65:E6:A6:5E:11:C9:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/323830343a326362343a3a2f33322d3332203d3e20323635323338.roa
Signing time:             Fri 20 Oct 2023 20:35:32 +0000
ROA not before:           Fri 20 Oct 2023 20:30:32 +0000
ROA not after:            Fri 18 Oct 2024 20:35:32 +0000
asID:                     265238
IP address blocks:        2804:2cb4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:5d:a7:a2:97:f3:89:11:76:2d:cb:0f:cf:b1:e4:6f:61:07:58:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5
        Validity
            Not Before: Oct 20 20:30:32 2023 GMT
            Not After : Oct 18 20:35:32 2024 GMT
        Subject: CN=979E586616CBBC57292BDA5705D64954A019DCC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:93:e4:fc:0e:27:a6:2b:1f:a9:8e:cb:4a:ec:
                    67:3a:65:71:08:6c:d5:0e:d3:6e:6d:db:81:ac:54:
                    ad:22:89:b0:89:18:53:c3:da:3f:92:c5:00:4f:d0:
                    10:0a:0e:75:21:5e:c4:74:1c:5e:1a:44:44:88:e8:
                    00:fa:60:77:bb:29:fb:08:d1:40:74:db:44:bd:2e:
                    92:48:a4:16:31:0b:c2:d7:13:00:62:a8:22:42:ff:
                    ac:0c:a8:a2:0c:af:9f:32:ad:8d:cf:8b:e8:f5:83:
                    e3:e4:c0:79:41:28:50:5e:34:68:f4:a3:46:e5:ed:
                    54:fb:57:66:ef:02:d6:7d:28:b3:ec:6e:af:ce:12:
                    ec:71:18:4b:ff:c4:81:ec:d2:9e:1d:fe:2f:04:da:
                    c8:02:7a:17:97:ed:c5:5a:1b:62:59:81:87:a0:c9:
                    bf:c8:52:32:3d:70:5f:90:a1:e8:34:cf:0e:07:5b:
                    46:c6:ce:c3:b3:79:45:79:03:36:e4:4f:ed:19:e1:
                    86:ff:89:38:a7:d2:4f:fb:f9:55:fd:19:f8:54:cc:
                    a7:12:ed:6b:f1:b9:aa:ce:c8:f6:29:ca:f8:61:e5:
                    da:d1:f3:b0:e2:78:68:5f:3e:2f:2b:ff:0d:69:1a:
                    6c:ca:09:27:91:7d:56:74:b1:be:78:69:d6:cc:9f:
                    bd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9E:58:66:16:CB:BC:57:29:2B:DA:57:05:D6:49:54:A0:19:DC:C3
            X509v3 Authority Key Identifier:
                keyid:F2:C7:98:CC:A8:39:52:3F:B3:C7:E4:C6:A3:65:E6:A6:5E:11:C9:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/323830343a326362343a3a2f33322d3332203d3e20323635323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cb4::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:85:f5:5b:26:97:95:4e:96:d2:a0:ab:d4:cd:00:b1:33:a1:
         5f:02:0f:4c:38:eb:8c:0b:37:39:9f:50:8a:20:7c:07:b6:b5:
         f1:9b:63:28:94:a9:9c:54:22:ad:78:4f:cc:a1:f8:3a:d1:47:
         97:06:28:98:7b:c0:97:38:d3:fb:63:16:c0:c0:7d:77:c3:71:
         03:a8:49:a0:8f:1f:fd:2c:c4:66:6e:11:0e:90:4a:43:97:42:
         e0:4a:13:35:40:03:34:e7:a8:c7:d9:35:01:60:ca:f6:b4:fb:
         bd:df:62:a8:6d:09:75:97:06:85:a1:ec:68:28:2b:7d:6c:e2:
         f0:46:0a:63:2c:5b:f5:cc:ed:14:39:b8:0d:b0:18:d6:71:d3:
         d8:c1:44:7e:48:17:46:d5:41:97:cb:13:20:ce:47:db:f6:bd:
         35:ef:82:b3:5e:c3:44:1f:d4:4d:32:95:1f:8f:ea:70:6e:d4:
         70:0b:b2:38:c8:c2:47:f3:2b:52:68:3a:b3:0a:7b:74:a0:55:
         61:5f:56:2b:e3:2a:b6:07:12:76:27:6f:14:64:d2:c6:19:29:
         d8:58:3b:e9:ce:7c:41:fd:ef:ed:e6:53:ab:a4:eb:f3:b8:0e:
         c9:c3:c0:89:61:fa:71:dc:27:ed:2f:80:0b:fd:b5:e5:be:18:
         9f:97:1b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org