Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/323830343a6335383a3a2f33322d3332203d3e203532363934.roa
File:                     323830343a6335383a3a2f33322d3332203d3e203532363934.roa (raw, json)
Hash identifier:          1DoMxeamH+QfE5cYUCNK8hpVmMp7qPhktr8KQFjYkHY=
Subject key identifier:   9C:89:0D:E5:03:7E:41:9E:BE:40:A0:CE:47:5E:9C:EB:66:C2:F2:11
Certificate issuer:       /CN=64894956869A94FA3EF45CC10A7E5C1449C5BCD3
Certificate serial:       132C8DDDC222EBC50FE01F683343CC417D86CD1C
Authority key identifier: 64:89:49:56:86:9A:94:FA:3E:F4:5C:C1:0A:7E:5C:14:49:C5:BC:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64894956869A94FA3EF45CC10A7E5C1449C5BCD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/323830343a6335383a3a2f33322d3332203d3e203532363934.roa
Signing time:             Sun 21 Aug 2022 01:00:00 +0000
ROA not before:           Sun 21 Aug 2022 00:55:00 +0000
ROA not after:            Sun 20 Aug 2023 01:00:00 +0000
asID:                     52694
IP address blocks:        2804:c58::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2c:8d:dd:c2:22:eb:c5:0f:e0:1f:68:33:43:cc:41:7d:86:cd:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64894956869A94FA3EF45CC10A7E5C1449C5BCD3
        Validity
            Not Before: Aug 21 00:55:00 2022 GMT
            Not After : Aug 20 01:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:48:44:bd:f5:72:e9:ef:a2:50:c4:9a:4e:ee:
                    27:f4:80:08:a7:90:9c:3c:a1:0b:57:5f:90:f7:ed:
                    8a:b0:e7:a3:71:a8:20:b3:1d:40:d9:77:d0:21:c8:
                    8c:06:d2:ff:b1:5a:aa:0d:3c:35:09:cd:9d:d2:31:
                    d3:7e:24:44:b8:71:cf:76:fc:64:cd:4f:7d:8b:b6:
                    ee:48:b0:be:78:97:f0:0a:24:29:f3:de:a4:36:cc:
                    7d:01:c0:d8:3e:7f:54:09:bb:fc:00:cb:cf:c4:68:
                    1b:f5:39:ec:10:78:8f:52:1b:7f:b8:f0:ad:ac:42:
                    de:00:93:43:a5:12:eb:7e:2c:40:9b:4c:da:a2:02:
                    19:ed:ff:60:48:79:22:29:90:36:17:a8:d1:77:3f:
                    3a:0e:5f:1c:18:4b:2a:cf:7c:27:96:7a:ce:a3:5e:
                    c1:ea:dd:64:36:89:39:bd:8b:96:38:9e:76:e7:59:
                    0d:de:a6:43:08:68:42:a6:e5:ce:83:4a:ea:80:79:
                    60:c7:c2:1f:84:91:89:71:ab:37:c3:34:76:90:75:
                    6f:88:44:66:e8:c9:4f:b2:90:e4:69:53:98:2d:16:
                    93:21:95:cc:43:af:0e:6e:33:3e:44:45:87:cf:6d:
                    46:e0:2c:1b:92:ea:70:ad:ad:26:69:96:3b:ce:25:
                    72:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:89:0D:E5:03:7E:41:9E:BE:40:A0:CE:47:5E:9C:EB:66:C2:F2:11
            X509v3 Authority Key Identifier:
                keyid:64:89:49:56:86:9A:94:FA:3E:F4:5C:C1:0A:7E:5C:14:49:C5:BC:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/64894956869A94FA3EF45CC10A7E5C1449C5BCD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64894956869A94FA3EF45CC10A7E5C1449C5BCD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/323830343a6335383a3a2f33322d3332203d3e203532363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c58::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:8d:92:44:b3:d7:29:9f:b5:4d:f7:af:03:a4:ac:bb:0d:5e:
         76:dd:94:ff:c4:b1:44:81:1e:0f:99:13:6b:50:e4:9e:21:1c:
         22:cc:7b:9d:1b:e0:c8:65:65:28:ae:fd:eb:89:8e:7b:ef:5b:
         3b:8b:c8:b4:7a:07:fc:c2:f0:88:4d:b6:6b:d6:15:7b:80:e3:
         70:94:21:39:88:53:90:2d:fb:8f:9a:ef:f6:8b:7d:67:11:01:
         1d:43:b7:2c:6f:56:ab:2f:22:19:54:85:f4:52:d7:47:6b:07:
         68:de:50:1e:e4:b4:65:8f:25:e6:ea:42:03:cc:53:12:18:61:
         5d:43:1e:29:02:be:3d:75:1f:c3:ac:f8:cb:52:67:c6:ba:15:
         22:96:36:ed:0e:da:b5:88:59:20:47:43:7b:24:43:e5:cf:d6:
         4d:db:d3:58:66:e4:68:ee:a1:a9:27:3f:60:32:da:3c:04:71:
         39:00:49:53:7a:8b:7d:b0:50:98:c1:e5:92:18:8a:7e:ec:61:
         fc:3a:50:cb:8e:33:0d:a6:0a:0b:ad:aa:b6:ea:1f:66:a8:7f:
         89:99:4b:b5:b5:9d:e9:17:bb:6e:46:51:2c:55:e4:40:b1:68:
         91:34:cc:4c:dd:fb:c4:21:bb:d5:bf:65:b8:b0:f4:c4:7d:32:
         30:af:ab:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org