Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/323830343a316134383a3a2f33322d3634203d3e203631383530.roa
File:                     323830343a316134383a3a2f33322d3634203d3e203631383530.roa (raw, json)
Hash identifier:          uHbHx5skfDMpAVftqmKTyYeDQIeGL5yIqZR24f7AftY=
Subject key identifier:   8C:8A:D0:75:2A:7D:E5:4B:BE:FF:7D:C2:C3:6D:FC:91:CE:67:BA:F2
Certificate issuer:       /CN=F5B3F4E6F7D5F97435F2461441A052903A7FAF2A
Certificate serial:       0DB51FA7A1EA959322D9F87BA25F7B3CB28F6923
Authority key identifier: F5:B3:F4:E6:F7:D5:F9:74:35:F2:46:14:41:A0:52:90:3A:7F:AF:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5B3F4E6F7D5F97435F2461441A052903A7FAF2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/323830343a316134383a3a2f33322d3634203d3e203631383530.roa
Signing time:             Tue 03 Oct 2023 20:59:30 +0000
ROA not before:           Tue 03 Oct 2023 20:54:30 +0000
ROA not after:            Tue 01 Oct 2024 20:59:30 +0000
asID:                     61850
IP address blocks:        2804:1a48::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b5:1f:a7:a1:ea:95:93:22:d9:f8:7b:a2:5f:7b:3c:b2:8f:69:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5B3F4E6F7D5F97435F2461441A052903A7FAF2A
        Validity
            Not Before: Oct  3 20:54:30 2023 GMT
            Not After : Oct  1 20:59:30 2024 GMT
        Subject: CN=8C8AD0752A7DE54BBEFF7DC2C36DFC91CE67BAF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:71:7a:eb:67:60:99:db:1d:22:c6:b8:ff:dd:
                    f5:d2:7b:fa:9b:24:1e:c4:df:a1:71:a3:39:01:52:
                    5e:07:76:7f:b8:eb:e7:06:5f:13:52:00:72:82:a0:
                    69:03:2c:3c:b3:28:fa:2c:ee:18:2a:ca:71:6c:60:
                    68:be:72:2f:20:6d:30:10:da:f3:f6:30:19:3d:ca:
                    ea:92:28:d0:5c:f0:d1:f6:a6:1b:8a:aa:0c:46:7c:
                    29:6d:ca:ef:5f:3e:b6:38:2d:10:8e:4f:8e:8f:b2:
                    04:a7:17:9f:e0:2f:df:66:57:03:cf:33:c1:68:49:
                    21:d5:64:46:23:d6:42:3c:28:f2:bb:67:70:21:1f:
                    a1:ee:40:1b:a7:dc:f6:2c:d9:2e:e7:af:76:2d:48:
                    ae:9e:d2:87:be:52:95:53:70:c1:8c:ae:d8:90:55:
                    34:10:4c:5b:5d:f1:2e:de:d2:6a:e9:76:e5:6b:d9:
                    76:4b:4d:9c:31:08:8f:62:1e:51:9e:a1:73:d4:6f:
                    03:67:4d:ac:88:ce:c3:5b:75:36:d1:c2:eb:2e:6b:
                    93:f3:d2:b8:35:04:3a:03:8f:b8:e6:d5:d6:05:95:
                    e5:10:24:c8:fc:d8:da:74:63:45:ce:08:c9:10:91:
                    37:c0:83:e3:ef:55:35:7d:a0:71:a7:3b:73:7b:45:
                    e7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8A:D0:75:2A:7D:E5:4B:BE:FF:7D:C2:C3:6D:FC:91:CE:67:BA:F2
            X509v3 Authority Key Identifier:
                keyid:F5:B3:F4:E6:F7:D5:F9:74:35:F2:46:14:41:A0:52:90:3A:7F:AF:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/F5B3F4E6F7D5F97435F2461441A052903A7FAF2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5B3F4E6F7D5F97435F2461441A052903A7FAF2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/323830343a316134383a3a2f33322d3634203d3e203631383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a48::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:da:11:ac:2e:15:18:30:57:d0:09:d0:90:12:b4:e1:15:fa:
         94:20:47:b7:db:a1:7c:c3:b6:8b:58:7e:f8:bd:33:ba:b4:7a:
         c2:28:55:09:bd:59:4d:67:aa:d0:e6:81:da:de:fa:01:a0:3d:
         8b:a0:46:6a:aa:f3:0b:96:49:30:64:92:42:f2:fe:51:1b:8a:
         79:b7:f8:23:51:86:b0:8a:79:ba:04:65:ed:0e:8e:82:d5:8c:
         36:37:ac:6d:19:55:f0:4f:df:22:7a:22:46:b8:80:c3:02:4c:
         43:df:62:2b:fd:13:5e:82:da:ae:2b:87:94:3a:41:a6:ee:d7:
         77:d4:f9:73:d4:24:9b:d5:b3:62:c8:2b:3c:80:51:72:1d:58:
         e0:a0:6c:32:3a:3e:1b:cd:6f:63:53:b0:e1:73:5d:73:4a:a1:
         b5:40:e0:b8:68:ed:4d:06:b2:c0:9b:43:57:58:c5:61:2b:d1:
         8a:f7:d4:87:11:fb:d8:a1:7b:3a:fb:50:7a:79:c1:cd:a0:92:
         34:7e:7d:0f:d8:d4:79:68:0c:6c:f1:4d:18:04:58:cc:62:d1:
         b8:e3:0a:b5:f9:30:84:95:74:25:3a:8b:e1:29:89:82:31:1c:
         47:4c:d5:cb:1d:52:c9:07:b5:ff:fa:ef:c0:d7:64:76:22:a7:
         4d:1a:be:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:36 2024 by rpki-client on console-ams.rpki-client.org