Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6CaMq8vDJP4u5DTRNPKFqvNRnvhjDD8Djs5ZmiABnEk/0/323830343a313862343a3a2f33322d3438203d3e203631393438.roa
File:                     323830343a313862343a3a2f33322d3438203d3e203631393438.roa (raw, json)
Hash identifier:          QTcniVUMp4vMfr9E5vfSb1SeKsABlHvZpWp3sev0r1o=
Subject key identifier:   30:5A:96:3E:56:7F:67:AF:DD:97:2C:3C:07:8D:96:46:E4:75:2D:F2
Certificate issuer:       /CN=F34FF7B3E81F1E395562D0D772890DC9D4690410
Certificate serial:       0A3E4026BD826B72A7CB0129D526E227E46C07CC
Authority key identifier: F3:4F:F7:B3:E8:1F:1E:39:55:62:D0:D7:72:89:0D:C9:D4:69:04:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F34FF7B3E81F1E395562D0D772890DC9D4690410.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6CaMq8vDJP4u5DTRNPKFqvNRnvhjDD8Djs5ZmiABnEk/0/323830343a313862343a3a2f33322d3438203d3e203631393438.roa
Signing time:             Wed 20 Mar 2024 13:56:00 +0000
ROA not before:           Wed 20 Mar 2024 13:51:00 +0000
ROA not after:            Wed 19 Mar 2025 13:56:00 +0000
asID:                     61948
IP address blocks:        2804:18b4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:3e:40:26:bd:82:6b:72:a7:cb:01:29:d5:26:e2:27:e4:6c:07:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F34FF7B3E81F1E395562D0D772890DC9D4690410
        Validity
            Not Before: Mar 20 13:51:00 2024 GMT
            Not After : Mar 19 13:56:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ad:bf:bb:c2:46:5b:ef:b4:4c:64:bd:fc:19:
                    50:c5:2e:85:30:ea:68:7d:c8:82:c1:41:38:2f:3b:
                    f7:73:9f:fc:58:4e:93:de:90:43:46:13:55:c9:dd:
                    26:97:dd:5d:fd:7d:d6:be:6b:53:fd:37:9e:9c:19:
                    b1:35:20:f4:02:f1:fa:ab:e1:ad:ec:c7:20:ef:07:
                    bf:1a:ee:6c:78:cb:6c:cc:67:66:34:bb:f9:44:b5:
                    47:65:80:83:78:d7:9c:13:8b:9e:45:dc:86:da:26:
                    58:2e:73:fd:56:b9:07:ba:02:fc:af:da:91:44:d1:
                    0a:26:07:a3:de:dd:ca:50:c2:e3:82:ed:34:0f:41:
                    78:0d:d4:85:28:b1:98:cd:58:b1:38:0b:00:fa:86:
                    6e:35:8e:b2:47:dc:84:6b:ee:18:b3:84:1d:4a:66:
                    2e:af:d2:c3:e1:1c:09:ff:2a:05:ef:17:e6:7c:78:
                    d0:db:52:ab:1a:f6:db:f8:24:b4:5c:87:48:2a:91:
                    55:d6:d3:f9:2b:be:b5:31:a9:9c:db:f8:55:70:91:
                    4d:48:13:33:ed:66:6c:7e:b6:9d:20:b4:65:ed:e2:
                    7b:88:97:52:be:41:e5:2f:1f:78:79:72:a0:9d:29:
                    5a:1f:11:39:01:de:7b:f2:fe:6a:34:33:a6:4e:89:
                    fb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5A:96:3E:56:7F:67:AF:DD:97:2C:3C:07:8D:96:46:E4:75:2D:F2
            X509v3 Authority Key Identifier:
                keyid:F3:4F:F7:B3:E8:1F:1E:39:55:62:D0:D7:72:89:0D:C9:D4:69:04:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6CaMq8vDJP4u5DTRNPKFqvNRnvhjDD8Djs5ZmiABnEk/0/F34FF7B3E81F1E395562D0D772890DC9D4690410.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F34FF7B3E81F1E395562D0D772890DC9D4690410.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6CaMq8vDJP4u5DTRNPKFqvNRnvhjDD8Djs5ZmiABnEk/0/323830343a313862343a3a2f33322d3438203d3e203631393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:53:52:25:0c:da:ff:3f:4f:5e:c9:5c:ba:25:db:0d:b2:30:
         54:f4:15:b9:d7:34:ae:c4:ce:e9:f7:15:74:00:51:3c:f3:0b:
         7f:48:ea:a7:d7:eb:b5:c5:3d:2c:66:a8:94:1c:f8:81:a6:ec:
         59:d4:fc:86:66:4e:67:9f:8a:c3:4d:9b:58:f9:81:b8:8c:87:
         a6:40:bb:33:16:9b:f4:e2:67:5e:1e:f8:99:d9:97:46:f3:45:
         37:f4:7c:b7:c2:6b:9d:e9:51:83:90:6c:f3:4a:39:e7:3b:ad:
         18:a6:17:1a:e8:dc:e9:af:19:76:86:ad:41:28:81:da:94:29:
         9e:b5:a8:84:84:2e:93:b5:01:89:63:78:eb:de:fc:1e:3c:4b:
         83:32:5a:c5:3a:a6:43:e9:36:e9:70:95:34:d2:35:92:be:32:
         db:19:99:2c:5c:7b:ef:50:ec:e9:d5:15:79:07:eb:0f:66:5b:
         10:b0:b3:9a:64:e4:c3:72:34:21:56:a3:55:28:37:5b:09:72:
         77:0a:cb:09:c9:ec:95:b5:24:ec:5b:79:ea:88:95:1b:00:a4:
         10:63:ed:d8:a5:bf:ac:aa:b4:2e:c9:b5:aa:5e:5b:a5:71:5a:
         3d:b7:91:79:6b:a5:e2:68:81:1b:22:14:8a:d9:0c:6a:84:77:
         97:18:36:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:42 2024 by rpki-client on console-ams.rpki-client.org