Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/1/323830343a363662633a383030303a3a2f33332d3333203d3e20323639353739.roa
File:                     323830343a363662633a383030303a3a2f33332d3333203d3e20323639353739.roa (raw, json)
Hash identifier:          CviDIBNqJajRTQe+H7deS6SfcsA49EGe1lllJvE6Dc8=
Subject key identifier:   65:04:7B:0C:D8:B3:F8:C5:B3:F4:30:4F:E7:5D:D4:6B:55:B3:E0:17
Certificate issuer:       /CN=7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0
Certificate serial:       291F8CB5C5A7B888441C180FD0B0E29B5DB9DC28
Authority key identifier: 7E:A4:26:2C:73:E9:C3:CB:DF:61:1C:6B:5D:05:E1:CE:5B:58:1B:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/1/323830343a363662633a383030303a3a2f33332d3333203d3e20323639353739.roa
Signing time:             Wed 03 Apr 2024 18:30:02 +0000
ROA not before:           Wed 03 Apr 2024 18:25:02 +0000
ROA not after:            Wed 02 Apr 2025 18:30:02 +0000
asID:                     269579
IP address blocks:        2804:66bc:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:1f:8c:b5:c5:a7:b8:88:44:1c:18:0f:d0:b0:e2:9b:5d:b9:dc:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0
        Validity
            Not Before: Apr  3 18:25:02 2024 GMT
            Not After : Apr  2 18:30:02 2025 GMT
        Subject: CN=65047B0CD8B3F8C5B3F4304FE75DD46B55B3E017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a6:fe:2d:02:66:62:e2:4f:f3:cd:66:16:dd:
                    c1:c3:14:50:b1:aa:80:6b:26:92:fa:12:ba:cd:57:
                    da:1b:6e:a4:09:b7:56:64:75:6b:c5:26:56:6f:8e:
                    c3:00:39:86:2c:72:6e:fa:8b:ad:4b:18:55:b0:1d:
                    46:81:e5:12:fe:90:4d:9a:c0:87:e7:23:54:42:29:
                    5f:22:27:12:0f:db:ad:8c:59:32:bb:89:f1:1b:9e:
                    88:2e:e3:4c:5e:33:b7:25:4f:fa:03:d3:0a:62:e6:
                    6b:22:19:a1:fe:28:80:10:41:7b:7c:6b:91:bf:45:
                    ab:ff:65:6c:c8:3a:55:48:eb:47:5c:51:f5:6b:13:
                    5b:e2:e3:d7:3c:9b:d9:01:f8:02:0d:1a:3e:91:57:
                    60:d6:3f:27:c3:b5:b6:1a:f5:aa:4b:14:5c:b8:9c:
                    e0:68:1d:f0:32:1b:d0:5c:61:55:c7:c3:3e:63:ac:
                    66:d2:6e:91:77:90:00:ca:44:d3:bd:7b:4a:97:7c:
                    79:bd:55:6f:fe:0a:54:b8:f3:83:e7:58:6c:ef:fb:
                    c2:ac:7f:dd:30:17:22:80:cf:ba:25:c1:9f:5d:22:
                    22:af:0c:c2:d5:79:c7:48:22:c6:3e:d0:1a:ab:b4:
                    6a:a8:7f:53:5e:0e:b0:36:ed:a1:f3:66:eb:f0:00:
                    25:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:04:7B:0C:D8:B3:F8:C5:B3:F4:30:4F:E7:5D:D4:6B:55:B3:E0:17
            X509v3 Authority Key Identifier:
                keyid:7E:A4:26:2C:73:E9:C3:CB:DF:61:1C:6B:5D:05:E1:CE:5B:58:1B:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/1/7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/1/323830343a363662633a383030303a3a2f33332d3333203d3e20323639353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66bc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         2d:5f:80:ff:bf:18:0e:8e:91:3b:55:60:d9:7b:a8:7f:e6:2c:
         66:0e:f3:72:19:1e:a3:fc:65:d8:22:e4:fe:f3:f8:f2:a4:d8:
         4c:53:18:d2:82:dd:48:ed:07:2a:e0:d6:ef:57:3b:5f:0f:11:
         40:4a:5e:3c:12:62:59:a1:48:7c:46:d0:ed:a7:c6:e2:38:f2:
         39:4f:9a:13:6d:4e:4f:aa:18:80:4b:fd:72:40:aa:bd:aa:f2:
         87:06:bf:6d:a6:e7:95:d8:5e:e2:9d:20:ce:91:0d:57:d6:33:
         da:e6:5e:1c:27:7f:20:39:1d:92:de:24:72:cf:57:ac:42:ee:
         26:39:6c:fa:b1:f6:78:0e:fe:7b:4f:54:7e:c8:e4:bf:3b:e6:
         f8:08:85:5a:fa:b5:6e:ae:b7:64:a1:c3:f1:d8:4c:c9:02:31:
         64:9a:be:db:cd:6e:06:27:26:61:0e:77:a6:90:af:9b:ec:b1:
         f6:0a:bc:f8:91:44:aa:a9:92:65:75:ee:6b:72:e5:68:1d:cb:
         7c:42:1d:e8:53:e3:0c:1a:1a:41:44:d4:8f:24:56:78:4f:2f:
         e4:d1:ed:78:2d:1b:4e:25:f4:99:7c:0d:1e:36:13:fd:0c:e9:
         26:5b:1a:9b:20:c7:75:2e:09:94:16:65:6e:b8:6b:b8:1c:50:
         b9:ff:57:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:02 2024 by rpki-client on console-ams.rpki-client.org