Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/0/323830343a323637383a3a2f33322d3335203d3e20323634333432.roa
File:                     323830343a323637383a3a2f33322d3335203d3e20323634333432.roa (raw, json)
Hash identifier:          dmmxBLZNd8zXngT6RZg9VA+1a3JjfSG2JxEwQ8p8VP4=
Subject key identifier:   92:90:1C:D3:55:2A:9D:6A:21:D3:8B:EB:EF:C5:8C:12:53:7C:F4:43
Certificate issuer:       /CN=FC43B2BCCAC255474D6E14420AD8458F1319AC96
Certificate serial:       1B2461B4023C43134613C21060BECD562839697A
Authority key identifier: FC:43:B2:BC:CA:C2:55:47:4D:6E:14:42:0A:D8:45:8F:13:19:AC:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC43B2BCCAC255474D6E14420AD8458F1319AC96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/0/323830343a323637383a3a2f33322d3335203d3e20323634333432.roa
Signing time:             Mon 16 Oct 2023 17:00:01 +0000
ROA not before:           Mon 16 Oct 2023 16:55:01 +0000
ROA not after:            Mon 14 Oct 2024 17:00:01 +0000
asID:                     264342
IP address blocks:        2804:2678::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:24:61:b4:02:3c:43:13:46:13:c2:10:60:be:cd:56:28:39:69:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC43B2BCCAC255474D6E14420AD8458F1319AC96
        Validity
            Not Before: Oct 16 16:55:01 2023 GMT
            Not After : Oct 14 17:00:01 2024 GMT
        Subject: CN=3082010A0282010100EAD55C19DB5AA68CF9983DEF359FBA81D7530819F90AD038CA85BE3F8496FCE89EF0AB2E7EDD3724C3E3E11805C7A37E779B6D3304589EF34FF5C9C27EE58A00FC242AEAD91C36F9772FD6DD30AFC40C615E47CF8C611AB2ECFCEE54A183DF4B8902D776AFF955D1627A82F4F7594485F56B9BE930B5B792FC447B7EF7BBCBA0C4F857D22B05CCE9814209D7F4EB25D3303CDA43169649FC181817B4AA48F7066D7F27F1E8468C789EDB226FF5C499076F544E564055DF43A881429EB92780C1C292E12CB0988B306385ACC124E51744977EE318ACB140766607BE4FF4991AD74BFD2619E8F77F768FE359A32D3A18FCCD1EDA89D69FC79DD54D51EE0B98EC770203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d5:5c:19:db:5a:a6:8c:f9:98:3d:ef:35:9f:
                    ba:81:d7:53:08:19:f9:0a:d0:38:ca:85:be:3f:84:
                    96:fc:e8:9e:f0:ab:2e:7e:dd:37:24:c3:e3:e1:18:
                    05:c7:a3:7e:77:9b:6d:33:04:58:9e:f3:4f:f5:c9:
                    c2:7e:e5:8a:00:fc:24:2a:ea:d9:1c:36:f9:77:2f:
                    d6:dd:30:af:c4:0c:61:5e:47:cf:8c:61:1a:b2:ec:
                    fc:ee:54:a1:83:df:4b:89:02:d7:76:af:f9:55:d1:
                    62:7a:82:f4:f7:59:44:85:f5:6b:9b:e9:30:b5:b7:
                    92:fc:44:7b:7e:f7:bb:cb:a0:c4:f8:57:d2:2b:05:
                    cc:e9:81:42:09:d7:f4:eb:25:d3:30:3c:da:43:16:
                    96:49:fc:18:18:17:b4:aa:48:f7:06:6d:7f:27:f1:
                    e8:46:8c:78:9e:db:22:6f:f5:c4:99:07:6f:54:4e:
                    56:40:55:df:43:a8:81:42:9e:b9:27:80:c1:c2:92:
                    e1:2c:b0:98:8b:30:63:85:ac:c1:24:e5:17:44:97:
                    7e:e3:18:ac:b1:40:76:66:07:be:4f:f4:99:1a:d7:
                    4b:fd:26:19:e8:f7:7f:76:8f:e3:59:a3:2d:3a:18:
                    fc:cd:1e:da:89:d6:9f:c7:9d:d5:4d:51:ee:0b:98:
                    ec:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:90:1C:D3:55:2A:9D:6A:21:D3:8B:EB:EF:C5:8C:12:53:7C:F4:43
            X509v3 Authority Key Identifier:
                keyid:FC:43:B2:BC:CA:C2:55:47:4D:6E:14:42:0A:D8:45:8F:13:19:AC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/0/FC43B2BCCAC255474D6E14420AD8458F1319AC96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC43B2BCCAC255474D6E14420AD8458F1319AC96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/0/323830343a323637383a3a2f33322d3335203d3e20323634333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2678::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:51:11:53:fc:c2:2d:e3:f0:e3:28:d6:4e:df:54:6b:90:28:
         23:50:ed:ff:84:da:14:93:9c:82:fb:d2:b8:85:3e:49:8c:f0:
         b4:1f:4b:fc:7b:c8:8f:ee:b6:f1:29:21:01:63:08:e4:02:ed:
         33:f4:79:86:28:ed:1d:2c:b0:70:95:58:bd:82:b9:06:d3:74:
         9f:93:46:0e:3a:bc:79:d2:27:91:ff:0c:dd:7a:1d:83:91:d6:
         e7:60:86:3f:49:c6:61:e0:da:6d:c0:19:61:f8:9a:b1:f8:81:
         36:f3:43:0a:d5:66:0d:7a:e7:cd:a0:73:b3:43:71:fe:cf:35:
         07:3c:24:f7:88:4d:9e:34:61:ee:6a:6b:83:17:c4:8c:66:7a:
         c8:0c:43:6f:27:a2:c8:82:6a:ac:4e:71:af:98:2c:68:7c:83:
         4e:98:49:7b:28:78:cf:ec:ed:8d:f7:b4:e8:e5:1b:b0:c7:ab:
         58:26:b9:36:84:da:7a:97:9e:98:62:25:87:0d:46:6a:8f:8f:
         ed:ac:0a:2f:8e:f5:93:5b:1b:37:39:2c:1b:ed:a7:f7:49:54:
         42:cc:91:7f:5d:6e:df:ff:44:9e:42:12:c3:f3:54:70:f1:29:
         70:d7:40:95:a8:e6:2a:d7:b4:f7:05:f2:41:7b:06:ad:3d:ba:
         01:5f:25:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org