Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/323830343a313033383a633030303a3a2f33342d3334203d3e20323633363235.roa
File:                     323830343a313033383a633030303a3a2f33342d3334203d3e20323633363235.roa (raw, json)
Hash identifier:          /+T192JCGN7MMfIcZVCY6LiDWxVZHwj9UXHXgF9QG8I=
Subject key identifier:   2C:D5:86:97:13:93:D2:2F:2B:76:89:D2:C0:54:7C:6E:A5:8C:D8:E1
Certificate issuer:       /CN=FB88A3AE00102036C8EC91B22854F1DE410D59C2
Certificate serial:       7EF213A1409EB4668AF465FE9DF9256DA28B04B5
Authority key identifier: FB:88:A3:AE:00:10:20:36:C8:EC:91:B2:28:54:F1:DE:41:0D:59:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/323830343a313033383a633030303a3a2f33342d3334203d3e20323633363235.roa
Signing time:             Tue 05 Dec 2023 16:32:29 +0000
ROA not before:           Tue 05 Dec 2023 16:27:29 +0000
ROA not after:            Tue 03 Dec 2024 16:32:29 +0000
asID:                     263625
IP address blocks:        2804:1038:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f2:13:a1:40:9e:b4:66:8a:f4:65:fe:9d:f9:25:6d:a2:8b:04:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB88A3AE00102036C8EC91B22854F1DE410D59C2
        Validity
            Not Before: Dec  5 16:27:29 2023 GMT
            Not After : Dec  3 16:32:29 2024 GMT
        Subject: CN=2CD586971393D22F2B7689D2C0547C6EA58CD8E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:45:92:b1:36:89:6a:ad:2d:79:e5:8a:5f:cf:
                    dc:79:8a:6e:e9:ca:ec:70:64:d1:8d:ff:df:2d:0f:
                    98:56:03:cf:f4:3a:e5:d7:3c:0d:81:ff:d3:03:a2:
                    a1:b2:98:99:f4:bb:92:51:f6:07:9b:2f:53:b8:16:
                    a3:f5:ba:d1:b0:ca:00:41:40:27:01:e1:35:7b:3f:
                    43:73:9c:7c:74:1f:b9:28:0e:b7:ae:6b:16:00:39:
                    a7:fa:14:bd:48:db:f8:38:8a:43:fe:ea:ef:3e:3a:
                    d9:e7:2e:bd:5a:55:5e:b9:e1:85:b4:3f:ff:60:e4:
                    e8:6f:fa:3f:37:b1:e3:a4:7d:01:77:25:ea:7b:3b:
                    c4:31:3e:80:95:93:f6:0d:7f:27:32:f8:0c:f6:9d:
                    18:ff:a3:7d:c2:36:ca:21:a0:41:ea:33:07:84:32:
                    59:6d:70:1e:bd:7a:da:8c:89:35:8c:e1:2b:07:c8:
                    68:4c:21:7c:50:37:64:20:ab:8f:ca:5c:2a:18:ac:
                    97:3f:60:bf:cd:9f:1c:6b:8b:cc:79:ac:a6:97:cc:
                    a0:35:c6:f7:8a:e1:8c:e5:d1:15:c0:4b:08:a0:c8:
                    fc:dc:f5:72:15:3e:0d:43:f4:5c:c2:ea:e7:b8:7f:
                    da:1a:95:2a:01:d7:e2:7d:4b:3b:fd:b4:d7:37:96:
                    ea:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D5:86:97:13:93:D2:2F:2B:76:89:D2:C0:54:7C:6E:A5:8C:D8:E1
            X509v3 Authority Key Identifier:
                keyid:FB:88:A3:AE:00:10:20:36:C8:EC:91:B2:28:54:F1:DE:41:0D:59:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/323830343a313033383a633030303a3a2f33342d3334203d3e20323633363235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1038:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         69:79:80:ff:64:4e:8a:74:d6:f0:61:f5:30:9e:81:96:0d:de:
         15:b5:10:81:cd:a6:76:a5:2d:67:c0:c6:d8:57:f8:bf:a7:6b:
         80:ec:d3:9b:b4:1d:cf:59:3e:ee:eb:af:67:84:43:10:c0:fc:
         cf:ef:29:c2:12:8b:8d:57:ad:eb:bd:41:4b:8f:01:cc:45:da:
         70:e1:4e:4c:df:59:0c:d3:09:a4:f7:f3:05:55:0e:9b:18:ce:
         bd:3a:61:75:d3:4f:6c:36:75:14:cf:1f:0b:17:15:a1:9e:25:
         e7:cb:9e:94:fb:34:71:38:63:34:32:de:4c:cd:84:96:db:57:
         4d:2e:06:57:3b:41:de:c9:e1:78:e8:35:b8:c1:2e:6b:0d:b5:
         08:16:8f:65:30:b2:6a:43:25:25:ae:7a:a9:98:20:97:dc:e9:
         6e:4e:98:cb:d5:94:4c:6c:2b:b9:f7:f7:7f:8d:e8:16:fd:1e:
         51:7e:75:63:52:54:73:9d:fb:5d:4e:cc:c7:43:9c:0e:d0:bd:
         cc:e4:0e:14:05:fb:47:8e:f7:d9:e0:76:32:4a:cd:b0:c9:44:
         b2:df:ee:1f:1e:c0:09:be:91:81:41:0a:41:44:75:30:e2:98:
         db:25:fa:86:25:e8:5c:56:b6:43:83:19:5c:14:63:34:35:c0:
         98:6e:37:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org