Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/323830343a313033383a3a2f33342d3334203d3e20323633363235.roa
File:                     323830343a313033383a3a2f33342d3334203d3e20323633363235.roa (raw, json)
Hash identifier:          +a84+q7Yn9uMFwvHBld0ijwgpPlFeYOb48SxnXFsiP0=
Subject key identifier:   36:83:E6:EC:E8:85:24:CB:77:0C:41:14:C2:A1:26:97:95:E3:8D:31
Certificate issuer:       /CN=FB88A3AE00102036C8EC91B22854F1DE410D59C2
Certificate serial:       1FCF5F7B53336CCEEA9FA11E7EFC82A02F7F850A
Authority key identifier: FB:88:A3:AE:00:10:20:36:C8:EC:91:B2:28:54:F1:DE:41:0D:59:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/323830343a313033383a3a2f33342d3334203d3e20323633363235.roa
Signing time:             Tue 05 Dec 2023 16:32:27 +0000
ROA not before:           Tue 05 Dec 2023 16:27:27 +0000
ROA not after:            Tue 03 Dec 2024 16:32:27 +0000
asID:                     263625
IP address blocks:        2804:1038::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:cf:5f:7b:53:33:6c:ce:ea:9f:a1:1e:7e:fc:82:a0:2f:7f:85:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB88A3AE00102036C8EC91B22854F1DE410D59C2
        Validity
            Not Before: Dec  5 16:27:27 2023 GMT
            Not After : Dec  3 16:32:27 2024 GMT
        Subject: CN=3683E6ECE88524CB770C4114C2A1269795E38D31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9d:1d:aa:48:5b:5a:ed:50:ec:76:2d:c7:64:
                    85:ca:6c:c3:3e:74:ed:a7:bd:6b:a6:43:a8:9f:46:
                    ee:8a:e0:b1:a4:fb:9d:78:6c:e1:68:20:cd:2e:a6:
                    02:bb:d6:04:47:ca:18:aa:89:a9:eb:90:19:31:7a:
                    5b:e9:5f:f7:10:29:00:12:43:c6:cc:c7:78:18:9c:
                    1e:85:65:86:30:86:fc:db:f5:c0:b7:1a:c8:20:f8:
                    fa:b7:39:1f:90:3d:a4:ba:b1:11:79:be:99:6c:59:
                    0b:9b:56:65:dd:cf:c4:e6:5c:4f:41:80:7a:59:9b:
                    f0:da:03:fc:77:35:6f:2b:a5:b1:17:fc:2c:e0:d9:
                    65:6c:f3:e2:a0:78:52:36:80:16:4e:35:f6:20:3a:
                    d3:6b:23:fc:59:4c:9e:65:9b:0d:6c:cb:ad:53:0d:
                    0a:bd:13:bc:15:25:bc:12:b3:10:d2:8c:07:3c:5d:
                    24:16:2d:2c:0b:14:71:2a:7d:8a:b3:40:92:5c:21:
                    4d:c7:5e:d1:08:6e:1e:92:24:cb:f5:da:8e:02:28:
                    27:57:c7:2a:b0:61:46:07:f0:f1:ea:c3:3e:c5:77:
                    27:cc:13:eb:4c:90:33:d0:61:06:52:db:b8:3e:84:
                    bb:76:69:5d:99:58:26:c0:b4:be:70:71:2c:db:39:
                    af:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:83:E6:EC:E8:85:24:CB:77:0C:41:14:C2:A1:26:97:95:E3:8D:31
            X509v3 Authority Key Identifier:
                keyid:FB:88:A3:AE:00:10:20:36:C8:EC:91:B2:28:54:F1:DE:41:0D:59:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/323830343a313033383a3a2f33342d3334203d3e20323633363235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1038::/34

    Signature Algorithm: sha256WithRSAEncryption
         75:21:a5:5c:a0:c2:86:72:b6:9c:dd:c0:19:b4:7d:f6:67:5d:
         9e:7d:fd:39:d7:88:53:f6:0c:78:fc:85:be:a2:68:1f:af:3d:
         4d:2a:d7:96:18:0a:38:fc:a2:b3:b2:20:8c:a2:33:7e:11:2b:
         9e:e6:de:f7:64:77:47:6f:77:e4:21:42:7f:e4:c4:3e:df:a2:
         e7:0b:c7:88:f0:01:52:86:b3:c1:c1:e9:54:11:a4:e0:ce:34:
         0e:b8:8f:b6:9e:76:02:51:78:01:92:b0:1c:a1:4a:70:ef:66:
         22:78:50:e3:b1:82:86:a8:b3:04:b0:45:50:ea:8c:e4:5b:cf:
         41:31:e2:2c:27:73:2d:5e:ad:c4:b1:88:1d:c8:ab:b7:4e:65:
         95:e9:cb:78:ce:f3:ee:57:0d:6a:a6:81:c8:dc:39:43:d7:2f:
         ef:0c:ee:4b:35:20:ff:44:64:2e:32:7e:53:d1:9f:36:3d:ee:
         8a:bc:6a:28:68:bc:65:d5:70:fb:62:cb:2f:e8:7f:27:64:39:
         bb:ea:fe:51:aa:a0:9c:6e:b9:34:bb:40:d0:60:32:ae:47:d3:
         3c:fd:bc:f7:56:84:b8:45:ec:b7:d5:e3:65:a9:e7:77:d0:4e:
         61:1a:fa:e1:35:9d:ef:d3:01:33:92:c7:d6:07:f3:f2:d9:f3:
         ef:c2:72:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org