Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/323030313a313261343a3a2f33322d3438203d3e203238333436.roa
File:                     323030313a313261343a3a2f33322d3438203d3e203238333436.roa (raw, json)
Hash identifier:          PY2jBg7DMw+meCC8M7Q3tXYxCqB7LfD4EWog6TDaPIE=
Subject key identifier:   64:76:04:F0:4D:8F:C6:F9:88:64:F1:FB:82:E2:62:D4:8D:0D:1D:A6
Certificate issuer:       /CN=FFE926797ED6B4B77254E574E1E76238A7293520
Certificate serial:       3F4C219D172E2E564274FAF208AF8FD9EACF0780
Authority key identifier: FF:E9:26:79:7E:D6:B4:B7:72:54:E5:74:E1:E7:62:38:A7:29:35:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFE926797ED6B4B77254E574E1E76238A7293520.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/323030313a313261343a3a2f33322d3438203d3e203238333436.roa
Signing time:             Thu 23 Sep 2021 15:03:59 +0000
ROA not before:           Thu 23 Sep 2021 14:58:59 +0000
ROA not after:            Thu 22 Sep 2022 15:03:59 +0000
asID:                     28346
IP address blocks:        2001:12a4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:4c:21:9d:17:2e:2e:56:42:74:fa:f2:08:af:8f:d9:ea:cf:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFE926797ED6B4B77254E574E1E76238A7293520
        Validity
            Not Before: Sep 23 14:58:59 2021 GMT
            Not After : Sep 22 15:03:59 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e5:6c:24:0a:5b:9f:12:13:19:10:1a:41:93:
                    53:36:05:2d:e4:96:11:c5:ed:15:0e:9d:73:e2:67:
                    bf:ff:a1:41:ad:3b:e7:27:b0:6a:b5:86:37:47:69:
                    1a:1e:6b:9d:60:03:77:36:88:af:b7:44:6f:e4:6a:
                    3e:7b:cf:4e:75:0e:43:ef:b5:04:0e:fc:b8:84:6f:
                    ef:55:6d:a7:bf:53:37:9b:48:b0:e8:b9:c5:29:97:
                    22:7d:28:40:cb:23:6c:0e:81:08:96:9e:74:d3:21:
                    22:21:d0:a2:c1:1a:24:22:4b:fd:bf:b1:9a:6e:b0:
                    0c:88:62:e4:d9:52:ee:e0:70:b5:28:83:9a:b7:ac:
                    c8:3f:6d:fb:f4:28:31:dc:3b:18:6a:ed:06:b1:40:
                    cc:90:dc:ba:64:14:f0:69:99:34:66:ff:b3:53:dd:
                    a2:7b:82:ae:e4:1d:d2:cd:b5:65:15:08:12:3d:9d:
                    14:03:a5:a6:70:56:a4:a0:ce:48:63:54:16:16:2b:
                    86:16:e4:19:61:17:4b:3f:5d:82:32:2f:e8:57:38:
                    61:df:ab:53:39:05:27:92:73:c5:52:da:8e:ea:4e:
                    39:06:8d:94:19:24:9c:62:71:ca:ae:67:c4:c7:0b:
                    84:43:7b:1e:39:3a:27:cc:82:0a:28:6d:36:d4:d2:
                    41:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:76:04:F0:4D:8F:C6:F9:88:64:F1:FB:82:E2:62:D4:8D:0D:1D:A6
            X509v3 Authority Key Identifier:
                keyid:FF:E9:26:79:7E:D6:B4:B7:72:54:E5:74:E1:E7:62:38:A7:29:35:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/FFE926797ED6B4B77254E574E1E76238A7293520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFE926797ED6B4B77254E574E1E76238A7293520.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/323030313a313261343a3a2f33322d3438203d3e203238333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:30:05:99:2a:98:fb:b0:74:6d:0e:8e:fd:93:22:cc:bc:a9:
         63:97:ca:31:98:f4:d1:db:9e:0e:dd:e0:4b:24:3f:d4:95:b9:
         01:80:2e:11:f4:9f:9b:41:a0:f2:b0:57:d8:b0:1a:14:33:74:
         b3:2e:43:a3:9d:4f:2a:13:7c:6e:a5:d3:1a:cc:ab:1a:e1:53:
         f9:50:e7:62:69:1f:e1:ed:29:d7:6d:6f:77:51:29:4a:da:f8:
         42:1f:d1:2f:56:be:39:43:56:4b:49:04:83:58:c7:a1:6e:55:
         ca:f0:92:53:fa:07:35:e1:26:f5:49:3e:ed:a3:3c:5f:91:a4:
         79:e0:be:f1:22:cc:18:e2:0b:24:79:6a:62:ef:46:4a:90:60:
         ae:5f:39:9a:d0:18:d2:95:95:1a:fe:4a:30:7a:87:2e:44:be:
         56:a2:85:a2:aa:5c:44:54:61:57:6e:e9:50:7c:f7:aa:c0:ad:
         bc:f7:ed:7a:a1:2d:9e:9b:ad:82:0f:d9:f7:1d:22:36:c3:21:
         c2:54:d9:17:62:af:65:fd:ac:1c:f4:00:c9:82:52:a0:6c:b0:
         c0:3d:89:2a:fc:71:9a:08:62:20:6d:83:86:ad:b9:fa:af:c7:
         19:5b:4c:91:69:6b:47:e6:23:ac:a4:a8:4b:60:29:68:92:ff:
         fd:40:e7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org