Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/0/323830343a356430383a3a2f33322d3335203d3e20323633313031.roa
File:                     323830343a356430383a3a2f33322d3335203d3e20323633313031.roa (raw, json)
Hash identifier:          AoSzWQUkKhpnBmzrQ7mIBXt2uNG/17sziCAGvFqirUo=
Subject key identifier:   48:E3:5E:79:9F:84:B4:75:B3:43:DA:25:E4:4B:D9:D1:BE:ED:FD:4F
Certificate issuer:       /CN=FAD67BBEB430705889FDEAC161CDFF6BB3562972
Certificate serial:       0CBB7201C61CDCFF8B8D567E6308DA2CF2828972
Authority key identifier: FA:D6:7B:BE:B4:30:70:58:89:FD:EA:C1:61:CD:FF:6B:B3:56:29:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAD67BBEB430705889FDEAC161CDFF6BB3562972.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/0/323830343a356430383a3a2f33322d3335203d3e20323633313031.roa
Signing time:             Wed 06 Jul 2022 03:00:00 +0000
ROA not before:           Wed 06 Jul 2022 02:55:00 +0000
ROA not after:            Wed 05 Jul 2023 03:00:00 +0000
asID:                     263101
IP address blocks:        2804:5d08::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:bb:72:01:c6:1c:dc:ff:8b:8d:56:7e:63:08:da:2c:f2:82:89:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAD67BBEB430705889FDEAC161CDFF6BB3562972
        Validity
            Not Before: Jul  6 02:55:00 2022 GMT
            Not After : Jul  5 03:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:40:42:a7:71:73:15:4e:58:c8:29:df:00:d3:
                    c5:1d:ba:9c:02:6b:c4:5b:b8:d1:4c:54:56:77:99:
                    d8:34:f3:df:f7:93:f4:d8:f0:bb:ae:22:fc:6c:be:
                    98:0b:65:c0:a6:3f:bf:cc:db:e6:a8:7d:53:cb:49:
                    45:fe:42:9f:74:ad:17:4c:ca:29:2b:ad:da:1c:69:
                    09:19:e3:96:13:99:af:ee:40:c5:40:01:bf:57:bb:
                    36:0a:c2:a3:d6:0e:10:5c:fa:ae:fd:09:8e:d3:af:
                    72:a7:b0:5c:ae:9d:54:9a:07:f3:3e:60:6b:82:ad:
                    11:b2:b1:1c:40:55:e4:6b:b0:72:b4:6b:33:69:dc:
                    bb:85:b0:df:7f:c6:be:dc:80:8d:70:b7:df:a1:3f:
                    30:a7:d8:de:50:15:90:00:8f:f5:d8:b4:6a:65:46:
                    ec:c6:df:34:ea:7f:c7:b3:56:95:3d:e1:9c:94:e7:
                    09:c6:7e:c4:17:d9:6c:bb:35:c0:14:7e:78:c4:1e:
                    be:3f:fa:a5:d3:92:fa:17:fd:98:22:b1:01:fc:bb:
                    79:8a:83:25:bf:88:8f:0e:d8:44:41:d3:9b:c8:55:
                    8d:0f:eb:94:74:d2:a9:92:f7:26:37:49:06:06:f3:
                    cc:b3:30:bb:4d:4b:89:ff:4a:f6:8f:91:eb:03:e6:
                    2c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E3:5E:79:9F:84:B4:75:B3:43:DA:25:E4:4B:D9:D1:BE:ED:FD:4F
            X509v3 Authority Key Identifier:
                keyid:FA:D6:7B:BE:B4:30:70:58:89:FD:EA:C1:61:CD:FF:6B:B3:56:29:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/0/FAD67BBEB430705889FDEAC161CDFF6BB3562972.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAD67BBEB430705889FDEAC161CDFF6BB3562972.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/0/323830343a356430383a3a2f33322d3335203d3e20323633313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d08::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:b6:9a:80:00:2d:b6:ce:c7:32:98:05:38:d7:1c:be:6c:2e:
         87:87:2b:16:11:20:b9:2a:11:e8:3e:12:35:94:c7:12:91:ab:
         b8:67:41:9d:31:75:5e:44:e4:7d:e0:4e:ab:82:92:3e:8e:df:
         9a:eb:f1:a9:b9:14:6d:6e:32:bb:2f:42:60:f6:40:41:a3:85:
         50:41:a9:74:cd:24:f1:18:59:30:cd:7d:f2:19:68:4c:61:5c:
         1a:74:39:e3:09:ca:15:ed:cc:dd:cd:45:7a:68:a9:34:46:6e:
         75:db:93:84:0d:37:d9:e8:a2:1c:70:fd:ab:c4:9e:c6:ea:b8:
         2c:2f:af:76:24:dc:ed:60:db:48:59:aa:ac:80:09:f3:47:e3:
         5a:9a:53:76:b3:ae:a9:1d:e6:1c:41:73:e1:c6:50:11:ec:ce:
         9d:4b:da:64:ac:45:04:7d:8b:09:3e:16:6d:ed:ad:f5:ca:db:
         2a:c1:5b:e5:e9:76:b6:97:8e:22:ff:a9:5e:76:33:40:20:32:
         e6:8c:04:3c:81:37:2f:07:51:1b:12:55:16:1b:7f:98:fc:19:
         ce:e4:8e:28:9f:f1:3c:79:3d:f0:4a:26:3f:91:a4:bc:34:0f:
         0b:04:4e:be:8c:7f:3a:ea:6a:c2:54:cf:b5:c2:d0:81:d1:77:
         55:41:cb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:36 2024 by rpki-client on console-ams.rpki-client.org