Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F3YNLY6pr9HEMZgFR1FagVNhNJzDBbEFuT14S3sZZ9aT/0/323830343a376234383a3a2f33322d3438203d3e20323731343232.roa
File:                     323830343a376234383a3a2f33322d3438203d3e20323731343232.roa (raw, json)
Hash identifier:          t5kb8GPqzgTYauEG/8VAF0U9mbGTMUiciLtrIN1PVMI=
Subject key identifier:   BD:5B:70:8F:42:88:6F:AE:D8:ED:B0:C9:70:E9:C6:45:78:63:66:5A
Certificate issuer:       /CN=AF989BC34E39408F11829121DDD4BE12E79A7C16
Certificate serial:       31AEE6E8610D814976816F1EBA3E071E422E12CE
Authority key identifier: AF:98:9B:C3:4E:39:40:8F:11:82:91:21:DD:D4:BE:12:E7:9A:7C:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF989BC34E39408F11829121DDD4BE12E79A7C16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F3YNLY6pr9HEMZgFR1FagVNhNJzDBbEFuT14S3sZZ9aT/0/323830343a376234383a3a2f33322d3438203d3e20323731343232.roa
Signing time:             Sun 02 Jul 2023 14:20:42 +0000
ROA not before:           Sun 02 Jul 2023 14:15:42 +0000
ROA not after:            Sun 30 Jun 2024 14:20:42 +0000
asID:                     271422
IP address blocks:        2804:7b48::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ae:e6:e8:61:0d:81:49:76:81:6f:1e:ba:3e:07:1e:42:2e:12:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF989BC34E39408F11829121DDD4BE12E79A7C16
        Validity
            Not Before: Jul  2 14:15:42 2023 GMT
            Not After : Jun 30 14:20:42 2024 GMT
        Subject: CN=BD5B708F42886FAED8EDB0C970E9C6457863665A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b1:db:e5:17:76:37:8c:d2:c1:38:1e:2d:aa:
                    b5:a6:52:78:66:59:6b:7d:87:29:32:39:ed:53:1b:
                    c9:3b:f5:89:90:e8:4a:c0:c8:b6:ef:a0:98:8b:6a:
                    10:99:38:7c:02:36:ea:c3:e5:a0:da:96:a7:d2:54:
                    9a:7b:86:df:c3:e1:e1:25:d2:ad:55:06:d4:1f:fe:
                    b9:a8:51:fa:ef:3a:57:a6:22:cd:f1:c5:5a:c1:39:
                    e1:ed:be:e2:fe:a2:bf:1e:4e:25:b2:53:b7:b1:d6:
                    75:0e:97:40:74:90:4d:76:fa:51:6c:87:47:bc:b3:
                    a4:a4:bd:d4:db:61:40:15:80:6b:40:8e:5b:45:8d:
                    c8:1e:2e:a7:b5:6c:c8:58:78:35:5a:f1:d8:98:b7:
                    da:31:be:88:f2:6a:6d:21:b8:37:85:86:c6:bb:f7:
                    62:ed:de:87:34:27:4d:6e:b4:24:e7:99:e2:46:90:
                    08:45:a8:06:0e:27:a9:29:00:1f:d1:de:32:03:55:
                    d0:98:60:c9:2f:1f:2a:7d:f2:92:5b:ed:89:48:fb:
                    f0:6c:bd:26:f4:f8:28:35:97:4d:02:27:13:e0:64:
                    03:f2:50:28:6e:d3:2a:ca:ff:d1:00:a6:b6:cb:33:
                    2b:ed:32:c0:0b:e7:fb:ee:38:4c:2b:f0:ef:80:46:
                    49:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:5B:70:8F:42:88:6F:AE:D8:ED:B0:C9:70:E9:C6:45:78:63:66:5A
            X509v3 Authority Key Identifier:
                keyid:AF:98:9B:C3:4E:39:40:8F:11:82:91:21:DD:D4:BE:12:E7:9A:7C:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F3YNLY6pr9HEMZgFR1FagVNhNJzDBbEFuT14S3sZZ9aT/0/AF989BC34E39408F11829121DDD4BE12E79A7C16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF989BC34E39408F11829121DDD4BE12E79A7C16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F3YNLY6pr9HEMZgFR1FagVNhNJzDBbEFuT14S3sZZ9aT/0/323830343a376234383a3a2f33322d3438203d3e20323731343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b48::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:4e:4b:8b:cf:9c:22:ae:f8:70:62:c5:1a:2e:98:7b:be:71:
         6f:3f:5e:9c:5e:5c:28:7f:02:8a:ff:2d:a6:29:34:08:71:13:
         7b:0b:e4:e6:e8:3f:c2:02:01:4e:32:68:f5:2c:4c:00:f3:2a:
         43:08:12:a5:1f:88:2d:e0:68:79:a6:ab:e8:5c:cc:91:a8:06:
         81:ca:5b:e5:98:2e:e2:c8:25:e5:ae:ae:d9:e9:ec:b9:0f:14:
         39:26:68:1e:c3:57:dc:be:4f:45:ab:dc:c0:1d:01:1d:e5:7d:
         fb:4a:30:af:c0:2f:c0:70:86:da:1e:88:f8:97:16:09:6d:19:
         37:5f:d2:6b:0f:91:33:e2:e8:d0:5a:64:1c:65:17:f5:e4:8b:
         a0:5c:f6:7e:ab:9b:cc:70:df:32:89:5d:de:c9:c0:8d:84:c9:
         7c:45:bb:c8:29:9a:1c:5e:f1:2c:07:6b:b9:29:6d:c2:d1:c0:
         90:4e:b3:bc:6c:52:9e:9c:53:d7:ce:31:93:28:0d:5e:c5:04:
         c9:42:f0:51:12:b6:54:1b:a4:e3:17:77:56:2c:b5:3f:fc:86:
         52:8c:30:e5:34:04:7c:b2:59:80:49:d6:e3:e1:a7:c5:83:33:
         ca:e6:30:a7:5e:29:1b:bb:ad:35:59:13:8b:2e:d9:b6:dc:40:
         24:73:84:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org