Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/323830343a313033383a3a2f33322d3332203d3e20323633363235.roa
File:                     323830343a313033383a3a2f33322d3332203d3e20323633363235.roa (raw, json)
Hash identifier:          IFgzO9i31lHfXDr5jlBQj+pJbojvXQP4o6DIcFdQHXE=
Subject key identifier:   12:62:54:84:E8:5D:34:DF:7B:43:A5:37:B0:10:AA:5E:8C:AC:8B:B1
Certificate issuer:       /CN=FB88A3AE00102036C8EC91B22854F1DE410D59C2
Certificate serial:       0A7684FBE388A50451FFD07484ED62EF735E21B7
Authority key identifier: FB:88:A3:AE:00:10:20:36:C8:EC:91:B2:28:54:F1:DE:41:0D:59:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/323830343a313033383a3a2f33322d3332203d3e20323633363235.roa
Signing time:             Tue 05 Dec 2023 16:32:27 +0000
ROA not before:           Tue 05 Dec 2023 16:27:27 +0000
ROA not after:            Tue 03 Dec 2024 16:32:27 +0000
asID:                     263625
IP address blocks:        2804:1038::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:76:84:fb:e3:88:a5:04:51:ff:d0:74:84:ed:62:ef:73:5e:21:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB88A3AE00102036C8EC91B22854F1DE410D59C2
        Validity
            Not Before: Dec  5 16:27:27 2023 GMT
            Not After : Dec  3 16:32:27 2024 GMT
        Subject: CN=12625484E85D34DF7B43A537B010AA5E8CAC8BB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:0b:ce:ea:6f:be:32:9a:45:c9:47:1f:3b:d0:
                    62:5d:36:3b:c2:c8:cf:9c:3d:39:bc:88:da:77:aa:
                    ea:6e:d2:bf:fe:f9:25:2f:30:aa:2d:10:39:50:ee:
                    60:d3:3e:8c:e5:a5:06:2e:4c:7f:e4:f3:0d:42:8f:
                    a6:54:63:41:7f:81:ea:8b:5c:c1:aa:71:53:d9:ab:
                    28:ea:4d:8b:37:84:1d:74:6c:bb:56:c7:50:da:eb:
                    be:67:e5:14:a5:cb:bc:95:ab:1c:f1:33:23:11:9d:
                    20:3d:99:28:af:33:17:6b:39:29:14:12:81:87:a1:
                    15:dc:84:16:39:77:85:e1:4c:ea:20:8c:0b:49:ac:
                    fd:37:17:b7:62:a6:11:72:e2:13:00:2a:12:e0:90:
                    97:97:a4:6b:e3:90:04:0b:d8:dd:86:cd:26:e6:c4:
                    66:36:27:b6:18:25:53:30:f8:22:ba:8f:98:cf:fb:
                    39:48:a0:5b:7b:35:e9:b9:81:30:5d:c8:a7:67:4b:
                    d4:07:bc:8d:d6:87:c7:a1:30:35:0e:ce:ae:90:60:
                    f3:9f:1a:f7:19:38:98:61:83:20:d4:63:4e:24:29:
                    7f:52:c6:87:6c:2c:ca:59:2d:5d:08:55:5d:23:8f:
                    c1:09:e4:2b:a2:c3:ad:0f:d4:7b:69:24:76:51:34:
                    cc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:62:54:84:E8:5D:34:DF:7B:43:A5:37:B0:10:AA:5E:8C:AC:8B:B1
            X509v3 Authority Key Identifier:
                keyid:FB:88:A3:AE:00:10:20:36:C8:EC:91:B2:28:54:F1:DE:41:0D:59:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/323830343a313033383a3a2f33322d3332203d3e20323633363235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1038::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:67:f9:c9:49:f4:42:a0:1e:b0:5b:c2:ef:ab:f4:ee:cd:a4:
         68:ed:00:15:68:45:ee:87:ad:06:3a:a9:18:db:93:c4:4f:db:
         92:5d:6a:d8:1e:f1:76:27:44:b8:f5:29:48:5e:ff:5c:f4:cf:
         79:c5:1e:4a:32:cf:64:5b:25:f1:f2:6f:1f:a3:53:28:8b:f2:
         c5:8b:ee:67:e8:a4:be:4d:2c:8a:1e:dc:50:6c:15:51:f4:a2:
         aa:df:62:52:4f:3e:76:25:e9:ff:0f:1c:b1:48:d0:96:29:f7:
         bd:1c:e2:91:4c:34:3a:1f:3d:04:5f:af:fe:26:eb:05:11:57:
         0b:a0:50:d1:42:95:94:1b:3a:c0:de:ab:1c:8e:bc:a4:fc:35:
         89:60:67:18:b5:8b:8a:61:e8:22:a6:9b:33:58:3f:6d:19:6c:
         64:2c:12:27:b1:6c:7c:d9:37:26:6e:1e:fb:9d:25:41:00:56:
         d5:90:14:d1:99:63:2c:91:19:74:67:1d:06:5d:11:fe:a8:5c:
         c3:2c:9f:3c:0e:1c:8f:05:39:f5:91:d9:ab:25:ef:d1:28:29:
         8c:de:e0:cb:2b:98:6f:e4:9b:45:5e:e8:16:c1:1d:45:9e:e0:
         ff:38:33:40:3c:8d:e2:4a:e0:a6:42:cd:52:97:66:80:4d:98:
         37:50:79:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org