Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/323830343a373762303a3a2f33322d3634203d3e2033333536.roa
File:                     323830343a373762303a3a2f33322d3634203d3e2033333536.roa (raw, json)
Hash identifier:          QuwvXnkQQLASV+ouFYEAShtj+7xiAWqEz1DrBc7cCRI=
Subject key identifier:   A5:45:4D:B9:30:D1:EB:19:38:51:BE:FC:89:9B:39:24:57:84:28:48
Certificate issuer:       /CN=F21FFE74423AD60B71B14CBC9CD2B803E926BB0F
Certificate serial:       2C1BA766E091053506EB68304285B872B4DB6BA0
Authority key identifier: F2:1F:FE:74:42:3A:D6:0B:71:B1:4C:BC:9C:D2:B8:03:E9:26:BB:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/323830343a373762303a3a2f33322d3634203d3e2033333536.roa
Signing time:             Thu 23 Nov 2023 18:10:17 +0000
ROA not before:           Thu 23 Nov 2023 18:05:17 +0000
ROA not after:            Thu 21 Nov 2024 18:10:17 +0000
asID:                     3356
IP address blocks:        2804:77b0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:1b:a7:66:e0:91:05:35:06:eb:68:30:42:85:b8:72:b4:db:6b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F21FFE74423AD60B71B14CBC9CD2B803E926BB0F
        Validity
            Not Before: Nov 23 18:05:17 2023 GMT
            Not After : Nov 21 18:10:17 2024 GMT
        Subject: CN=A5454DB930D1EB193851BEFC899B392457842848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5e:a7:02:d7:77:2e:32:d0:18:66:30:f2:f5:
                    38:c5:ee:5b:90:eb:1b:97:e9:bc:67:a2:5d:24:ec:
                    a7:1f:9e:49:63:60:ce:ab:4e:db:bf:87:3a:df:f9:
                    11:0f:b2:7e:73:a7:5c:b5:d4:65:00:a5:f5:ff:34:
                    7e:6c:b5:48:7d:e2:99:16:aa:2c:bb:22:df:22:ab:
                    47:ea:b8:56:e7:8f:c2:ce:59:41:74:e9:50:ae:72:
                    50:e8:31:63:f4:b3:ad:7a:22:65:e3:40:5f:ef:a6:
                    66:d4:e7:e9:e8:21:58:18:b4:25:75:3d:fb:7d:6f:
                    94:36:92:2b:d9:79:5d:73:9a:8a:34:a4:fc:bf:e4:
                    56:8f:7f:4b:97:85:36:84:56:5e:df:ec:f9:24:62:
                    2d:24:9a:47:85:44:bc:ea:d5:a7:79:1b:de:83:c5:
                    81:f6:b0:cd:c1:5c:5f:83:76:e2:ac:3e:26:7a:42:
                    7d:10:ef:ce:66:28:1d:f7:23:6f:2b:8c:7a:b4:75:
                    67:9c:fe:a6:84:52:7f:41:2b:5b:77:b0:37:b4:3e:
                    0b:14:3a:b6:32:3b:44:4c:41:d7:47:1c:0a:e3:be:
                    f1:47:25:a6:f7:2b:c2:8f:6e:3b:86:e8:40:1e:6c:
                    99:ea:8b:c9:4c:d8:0c:30:a3:db:81:68:39:27:a1:
                    b5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:45:4D:B9:30:D1:EB:19:38:51:BE:FC:89:9B:39:24:57:84:28:48
            X509v3 Authority Key Identifier:
                keyid:F2:1F:FE:74:42:3A:D6:0B:71:B1:4C:BC:9C:D2:B8:03:E9:26:BB:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/323830343a373762303a3a2f33322d3634203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:77b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:25:4a:a6:05:ab:e1:6b:1f:d8:e2:f3:50:be:f8:3e:d1:b9:
         ac:30:ff:e0:e6:e1:fc:67:e9:9d:c2:ad:fb:1f:2e:f8:79:16:
         d1:cc:30:42:a4:ff:53:e3:55:6a:b7:94:fa:65:4e:89:c4:97:
         ff:64:cb:7a:fb:21:8b:8d:2f:96:19:0f:91:f5:76:33:07:54:
         41:cb:57:d2:12:91:eb:53:e9:a9:c5:d2:d0:3d:e9:39:ae:54:
         0b:11:53:70:74:70:30:ca:56:a7:fd:d3:b3:b3:c1:e6:52:e5:
         b2:1a:d2:70:57:56:8e:df:44:ec:8e:5c:f7:c2:bb:dc:05:db:
         96:fb:28:2f:12:ae:25:f2:ac:3f:80:8f:51:9f:af:dc:4b:c5:
         78:7e:ce:d1:a2:61:27:b8:47:80:af:d0:64:51:8f:aa:05:47:
         b8:fd:3d:9a:fa:a9:77:52:d3:e7:2c:a9:06:8d:b9:22:d6:92:
         24:bb:ca:1c:63:05:ed:fd:dc:e8:58:db:33:91:4e:53:0d:3b:
         6b:d4:b0:59:d2:cb:2c:6d:8d:72:44:39:1a:61:4e:ae:b1:29:
         56:43:89:c8:24:5d:b6:6e:de:7b:3f:04:18:52:4e:c1:8b:13:
         7e:4c:12:7c:e5:85:51:82:67:df:65:55:ae:29:33:c4:ac:53:
         dc:27:c0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org