Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/0/323830343a373165633a3a2f33322d3334203d3e20323730383230.roa
File:                     323830343a373165633a3a2f33322d3334203d3e20323730383230.roa (raw, json)
Hash identifier:          KNTqMz25nongsDGbdE+aEIFCG4xpg/mltTexsahA9yI=
Subject key identifier:   5C:10:F2:29:61:3D:72:10:88:F3:85:EF:4A:25:07:C4:AD:A0:29:10
Certificate issuer:       /CN=FA8E3E41A8FE475AE0CCDDDAA80FD2FC7D8387AE
Certificate serial:       43D44D88FD799B8B62FD8B9EAE732A293B8C37E9
Authority key identifier: FA:8E:3E:41:A8:FE:47:5A:E0:CC:DD:DA:A8:0F:D2:FC:7D:83:87:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA8E3E41A8FE475AE0CCDDDAA80FD2FC7D8387AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/0/323830343a373165633a3a2f33322d3334203d3e20323730383230.roa
Signing time:             Tue 10 Oct 2023 21:00:04 +0000
ROA not before:           Tue 10 Oct 2023 20:55:04 +0000
ROA not after:            Tue 08 Oct 2024 21:00:04 +0000
asID:                     270820
IP address blocks:        2804:71ec::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d4:4d:88:fd:79:9b:8b:62:fd:8b:9e:ae:73:2a:29:3b:8c:37:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA8E3E41A8FE475AE0CCDDDAA80FD2FC7D8387AE
        Validity
            Not Before: Oct 10 20:55:04 2023 GMT
            Not After : Oct  8 21:00:04 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:51:ab:6a:44:59:e2:e9:0d:74:57:20:81:77:
                    d0:e3:69:0b:dd:64:f8:51:9a:41:87:42:fd:b0:a1:
                    6f:63:3d:24:ed:77:c0:eb:ca:d6:c3:bb:9b:98:4a:
                    6a:ef:5b:9a:c9:7d:0a:9e:48:85:e6:45:89:51:3b:
                    6b:71:ec:87:9f:43:ad:b3:e3:1e:38:2b:7f:7c:d0:
                    f8:f6:7f:1b:ee:92:e3:18:c0:c2:70:f5:80:27:93:
                    3b:40:4a:dd:ac:43:15:fe:85:8f:2b:e9:1d:6f:27:
                    1b:4a:09:60:c8:7d:52:35:6e:7d:14:d5:37:21:4f:
                    2f:37:1a:32:fe:21:f2:60:01:5c:61:23:da:98:48:
                    5a:95:49:53:62:4b:99:91:c7:6d:4e:d8:10:95:8f:
                    b6:c2:27:07:7b:6e:0c:9c:4e:44:44:0f:f1:cc:c1:
                    d2:a4:ed:61:31:2a:3b:4f:de:7c:6c:4a:ba:84:25:
                    1a:ca:15:49:df:f1:aa:e8:20:95:1b:39:d0:72:a5:
                    e2:36:08:71:6c:7d:90:58:05:59:78:eb:8a:ec:25:
                    cd:0e:69:b9:85:39:7e:ef:06:13:87:75:a0:65:4e:
                    16:8c:68:16:79:55:ed:17:f3:30:08:31:e0:d0:2f:
                    23:a1:27:58:7f:de:8c:3f:20:3f:f7:97:ad:d6:26:
                    89:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:10:F2:29:61:3D:72:10:88:F3:85:EF:4A:25:07:C4:AD:A0:29:10
            X509v3 Authority Key Identifier:
                keyid:FA:8E:3E:41:A8:FE:47:5A:E0:CC:DD:DA:A8:0F:D2:FC:7D:83:87:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/0/FA8E3E41A8FE475AE0CCDDDAA80FD2FC7D8387AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA8E3E41A8FE475AE0CCDDDAA80FD2FC7D8387AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/0/323830343a373165633a3a2f33322d3334203d3e20323730383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:71ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:65:16:51:1a:5c:3c:82:e5:0f:d0:19:dd:23:fd:bb:ae:31:
         22:43:bb:b7:fb:3f:15:3f:d7:1b:8e:d3:b0:a4:c0:9f:0e:e4:
         87:1f:c6:34:3b:13:d1:85:80:d0:36:07:ac:d4:35:45:1b:24:
         75:96:98:9d:3c:17:12:39:7c:03:7b:4e:72:fa:54:ba:b4:38:
         d8:ec:95:0a:7c:6c:f3:39:50:27:8a:c2:b5:a0:bd:fa:91:e3:
         aa:04:56:43:00:55:7b:23:16:cd:a7:91:8d:f2:cb:4b:6c:0c:
         9a:4d:63:55:56:4c:f8:75:cb:d9:8a:fe:1d:13:9e:90:a2:ec:
         67:6e:23:63:2c:d2:7b:6a:de:07:5c:e5:f7:d3:61:bc:99:14:
         10:90:4d:1e:b9:10:3c:7e:9b:a6:5a:da:fd:6c:56:2c:02:b2:
         e2:51:b9:4d:32:80:93:2b:bf:b8:9d:c1:90:ee:f7:83:33:31:
         c5:d3:7c:b6:e1:05:a8:37:c8:c5:e4:6d:d3:d7:a9:0d:0b:1c:
         35:c9:66:6d:41:63:27:a1:a4:2f:11:b0:22:2c:9e:8c:51:7f:
         ee:0b:80:12:43:ab:b7:82:45:04:24:be:56:f0:f2:4c:12:73:
         c3:63:67:84:01:4c:16:f0:2c:bb:5e:01:ca:2a:72:d8:71:38:
         4d:27:64:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org