Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/323830343a3635383a613030303a3a2f33352d3335203d3e20323632353738.roa
File:                     323830343a3635383a613030303a3a2f33352d3335203d3e20323632353738.roa (raw, json)
Hash identifier:          K22gwU0U4ZQ8r7NwDUI1tlxvzjR2OYCh6KTkmDstBQU=
Subject key identifier:   98:F2:A9:63:18:FB:9A:18:5E:3E:06:7D:62:7A:90:D1:FF:DE:25:64
Certificate issuer:       /CN=FFF3CD0C3D025669552813E8E441EAA710DE43B2
Certificate serial:       66361B0C0AC59540BFE0C4B64EFB1E0FBBE6EE37
Authority key identifier: FF:F3:CD:0C:3D:02:56:69:55:28:13:E8:E4:41:EA:A7:10:DE:43:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/323830343a3635383a613030303a3a2f33352d3335203d3e20323632353738.roa
Signing time:             Thu 04 Apr 2024 22:49:22 +0000
ROA not before:           Thu 04 Apr 2024 22:44:22 +0000
ROA not after:            Thu 03 Apr 2025 22:49:22 +0000
asID:                     262578
IP address blocks:        2804:658:a000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:36:1b:0c:0a:c5:95:40:bf:e0:c4:b6:4e:fb:1e:0f:bb:e6:ee:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF3CD0C3D025669552813E8E441EAA710DE43B2
        Validity
            Not Before: Apr  4 22:44:22 2024 GMT
            Not After : Apr  3 22:49:22 2025 GMT
        Subject: CN=98F2A96318FB9A185E3E067D627A90D1FFDE2564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:75:cb:d2:c2:d5:c9:74:71:42:4e:65:b7:4c:
                    1f:e2:fb:a1:e7:09:d8:00:50:45:26:d4:5e:2b:3c:
                    c7:bc:10:64:46:c7:d7:27:b2:54:e3:71:f5:1d:ff:
                    8e:86:32:1b:9c:ec:1f:5c:65:fa:43:c7:cc:c4:d7:
                    f4:3c:7b:c0:a9:74:37:18:31:6d:d7:04:84:43:45:
                    02:d0:63:15:1d:07:6d:a3:fa:0a:4b:41:14:c0:45:
                    4d:a8:ff:5c:29:d7:19:99:e0:02:77:18:48:ef:7a:
                    38:a1:4c:0f:eb:44:97:bb:7d:cd:55:41:48:d4:3f:
                    18:24:72:ed:b3:14:2a:eb:13:9d:6e:91:16:0f:c6:
                    b0:b4:cd:2a:9a:be:dc:9b:a5:6b:ea:5a:7a:6a:bf:
                    9d:9b:2c:3a:8c:1a:8f:53:a5:1a:47:3d:7e:15:5f:
                    38:87:8b:f8:b3:0f:36:74:9e:ec:cf:d6:c0:d1:fc:
                    84:72:0e:c9:c2:78:88:1e:7d:db:60:4b:c4:7f:48:
                    d5:65:44:6e:57:9a:43:e9:b6:5e:80:8b:b8:b7:89:
                    f3:ca:45:b2:e0:d7:e0:6b:93:4f:ae:f7:26:6a:fa:
                    9a:37:63:f5:a2:17:a8:05:57:74:6c:26:33:28:9b:
                    8e:17:d5:e9:b9:2d:35:5e:08:f6:5f:29:fb:99:6f:
                    be:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F2:A9:63:18:FB:9A:18:5E:3E:06:7D:62:7A:90:D1:FF:DE:25:64
            X509v3 Authority Key Identifier:
                keyid:FF:F3:CD:0C:3D:02:56:69:55:28:13:E8:E4:41:EA:A7:10:DE:43:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/323830343a3635383a613030303a3a2f33352d3335203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:658:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         b8:2b:8d:fb:c9:47:a7:3f:a9:16:41:bf:42:18:5f:4c:eb:92:
         0f:e1:07:96:ac:94:d9:3b:0c:e6:15:39:40:9c:0b:f9:40:b0:
         66:35:45:c6:d8:80:6a:ba:73:c8:ec:06:31:2c:f0:ab:a1:0c:
         10:23:3f:88:d4:35:74:8f:2e:be:8a:9a:94:24:65:9b:c6:f9:
         0b:80:87:0d:5b:e5:50:38:c8:d7:cc:c4:49:73:be:ae:d4:b7:
         96:92:36:fb:96:5f:c0:59:f7:07:dc:d4:c0:ca:bb:73:57:63:
         a0:ba:ea:83:b6:ca:6d:11:22:f7:d4:6f:2f:d0:b5:2e:9a:78:
         08:21:31:2a:91:eb:d2:5c:f8:42:7d:7e:f5:f7:0e:21:12:b0:
         d0:3a:f4:2b:f7:c2:b3:39:41:b6:a7:06:80:1a:cd:3a:e1:eb:
         cb:09:10:d4:c5:8e:16:5e:c1:e8:8b:1c:7a:a5:e9:e5:ce:5a:
         42:63:1b:d9:34:58:34:cc:0b:0a:c0:56:69:aa:c3:89:90:4d:
         bf:b5:28:f0:15:6d:b4:d7:9c:f5:5f:f9:63:6d:6c:61:ea:5f:
         5d:07:d5:9d:31:b2:e2:fe:45:67:c5:74:4d:e7:4a:eb:83:79:
         f3:ce:bb:4f:d8:f4:44:44:e9:dd:fd:36:e9:24:17:7b:82:3a:
         a0:b9:90:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:42:11 2024 by rpki-client on console-fra.rpki-client.org