Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/323830343a373762303a3a2f33322d3334203d3e20323032.roa
File:                     323830343a373762303a3a2f33322d3334203d3e20323032.roa (raw, json)
Hash identifier:          +RdnVxCg2M74UhhqudYFlZwdkjaHB2hvpeB0xmJ0lZE=
Subject key identifier:   1B:68:F1:77:1B:8C:DB:33:F6:5F:15:5C:77:1F:AA:FC:5D:9F:E1:E0
Certificate issuer:       /CN=F21FFE74423AD60B71B14CBC9CD2B803E926BB0F
Certificate serial:       4467FD27ED1C01EAD60652F39E206484C0831443
Authority key identifier: F2:1F:FE:74:42:3A:D6:0B:71:B1:4C:BC:9C:D2:B8:03:E9:26:BB:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/323830343a373762303a3a2f33322d3334203d3e20323032.roa
Signing time:             Mon 19 Dec 2022 19:06:22 +0000
ROA not before:           Mon 19 Dec 2022 19:01:22 +0000
ROA not after:            Mon 18 Dec 2023 19:06:22 +0000
asID:                     202
IP address blocks:        2804:77b0::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:67:fd:27:ed:1c:01:ea:d6:06:52:f3:9e:20:64:84:c0:83:14:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F21FFE74423AD60B71B14CBC9CD2B803E926BB0F
        Validity
            Not Before: Dec 19 19:01:22 2022 GMT
            Not After : Dec 18 19:06:22 2023 GMT
        Subject: CN=1B68F1771B8CDB33F65F155C771FAAFC5D9FE1E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e7:ac:48:3d:61:76:d9:3d:6c:fd:cd:64:0d:
                    9b:88:8b:60:0b:13:58:b5:ef:29:37:e6:8a:59:33:
                    0d:17:f8:a3:b9:03:e9:1b:12:08:79:f2:c6:a7:b0:
                    31:66:b6:7d:83:70:f1:41:32:1b:28:65:ee:46:8e:
                    15:3b:63:b4:2f:25:28:f9:95:f6:52:2f:45:4a:05:
                    9c:06:b7:54:75:2c:b7:f3:93:ae:6d:22:a3:3b:bf:
                    3f:36:69:92:fe:01:44:9d:bd:4f:25:01:6a:f7:38:
                    9a:cf:17:1f:b0:4d:ec:99:a8:51:ae:ae:a7:e5:dd:
                    ea:8f:62:6d:b2:da:7d:1d:0e:60:31:7b:77:4a:5e:
                    c3:59:37:40:6e:e9:ba:93:b0:e0:5e:f7:72:16:ee:
                    ac:54:d6:60:60:87:5b:fe:e0:25:25:6d:72:2e:ef:
                    62:f0:5c:a0:13:2a:1e:b6:36:01:9b:85:b0:32:db:
                    09:8d:65:18:9c:4d:ad:9e:97:5b:8f:5b:22:de:cd:
                    88:53:c0:43:e2:30:b3:7a:45:8a:14:de:62:78:5e:
                    8b:1b:09:c0:8b:ce:ec:ab:c4:5e:65:0e:61:a0:a9:
                    e6:62:83:4b:65:94:bc:b2:68:a5:c7:52:38:a0:58:
                    36:10:07:5d:eb:2e:93:be:71:e6:df:f7:c9:d4:12:
                    55:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:68:F1:77:1B:8C:DB:33:F6:5F:15:5C:77:1F:AA:FC:5D:9F:E1:E0
            X509v3 Authority Key Identifier:
                keyid:F2:1F:FE:74:42:3A:D6:0B:71:B1:4C:BC:9C:D2:B8:03:E9:26:BB:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/323830343a373762303a3a2f33322d3334203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:77b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:58:83:c3:94:8f:1d:5c:15:3f:eb:7f:7a:8a:83:d4:bd:8e:
         a0:61:5e:25:03:e3:90:cb:d9:b5:f5:d4:2c:2d:0f:c4:02:08:
         03:d8:84:17:ce:51:d0:93:40:28:45:f9:1a:ab:1e:1f:c8:6f:
         bc:4a:2d:ff:7f:01:a6:97:b5:4c:86:4f:1b:30:39:ee:5d:1b:
         51:69:67:84:fd:1c:b8:33:f2:2e:d2:58:40:2c:cd:ab:d6:03:
         e4:4f:a0:38:b3:23:e6:5e:35:c9:a6:33:2a:e0:f2:3c:74:a4:
         d6:19:a1:f8:76:b5:3f:f9:10:2a:51:a4:c6:5a:c5:91:61:5f:
         df:60:21:f8:60:9b:7f:7d:21:2c:38:82:5a:b5:9e:cd:08:0a:
         19:69:c3:27:d0:40:1e:e2:1a:a3:c5:3c:de:c3:8e:85:47:2d:
         93:76:32:87:10:09:36:92:e0:54:d8:1a:e9:3a:cc:0b:f9:d5:
         e2:d4:60:c7:26:16:e1:90:28:3a:b1:90:64:79:82:93:5f:0a:
         73:51:c3:b7:b8:c8:09:71:27:51:fa:9d:91:11:f6:3d:fb:c9:
         7d:a6:fb:dc:f0:da:8c:5e:6f:15:73:b4:d4:06:34:69:c6:0f:
         8c:e6:fe:ac:f2:a6:9a:13:43:db:ab:c8:27:6d:ba:ec:76:36:
         86:b6:82:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org