Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FCmtN4pMGoa4k5AgQRiJPzj47DGKJdUxjDi5uy7tY7qk/0/323830343a343731633a3a2f33332d3333203d3e20323637303332.roa
File:                     323830343a343731633a3a2f33332d3333203d3e20323637303332.roa (raw, json)
Hash identifier:          f10Aav/teu4a/AmFuuo7zw8dH2M7pWJDu4mHI1t86/E=
Subject key identifier:   2F:C8:DE:12:C1:82:DA:FA:5A:00:86:EB:6F:7E:8B:0D:99:CB:2A:B9
Certificate issuer:       /CN=A2BFC87697B75BE13FD7BBFD27F9C7E83ED4101E
Certificate serial:       40B855556D5357FAD858765D856D6F9AB1E43563
Authority key identifier: A2:BF:C8:76:97:B7:5B:E1:3F:D7:BB:FD:27:F9:C7:E8:3E:D4:10:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2BFC87697B75BE13FD7BBFD27F9C7E83ED4101E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCmtN4pMGoa4k5AgQRiJPzj47DGKJdUxjDi5uy7tY7qk/0/323830343a343731633a3a2f33332d3333203d3e20323637303332.roa
Signing time:             Wed 21 Aug 2024 16:25:16 +0000
ROA not before:           Wed 21 Aug 2024 16:20:16 +0000
ROA not after:            Wed 20 Aug 2025 16:25:16 +0000
asID:                     267032
IP address blocks:        2804:471c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b8:55:55:6d:53:57:fa:d8:58:76:5d:85:6d:6f:9a:b1:e4:35:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2BFC87697B75BE13FD7BBFD27F9C7E83ED4101E
        Validity
            Not Before: Aug 21 16:20:16 2024 GMT
            Not After : Aug 20 16:25:16 2025 GMT
        Subject: CN=2FC8DE12C182DAFA5A0086EB6F7E8B0D99CB2AB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c3:74:b6:6e:d3:df:12:16:c7:9b:4f:76:ca:
                    2a:c4:f3:90:04:29:10:83:4e:96:b6:10:10:e1:b9:
                    24:21:61:32:74:69:fd:75:d2:34:a6:ae:bc:ee:e4:
                    36:81:29:bc:8b:e7:c8:16:03:df:07:b8:2c:7a:ef:
                    67:b2:09:60:28:04:00:a9:2b:a0:62:db:64:00:2c:
                    5b:0c:d4:7c:b2:a7:fd:3d:be:61:a8:bf:66:90:1b:
                    d1:6d:d4:24:05:c1:a3:fe:ba:68:45:46:59:99:bb:
                    15:46:a9:10:95:0d:9f:30:be:9f:f8:4c:47:b8:cd:
                    f3:f8:e5:b3:2b:8b:95:e5:2a:10:dc:de:f5:e4:ee:
                    4e:db:d6:47:aa:79:b0:dc:21:61:dd:55:d0:ed:49:
                    a6:30:82:6d:2d:0f:b9:c6:ff:41:be:cb:d1:56:07:
                    2c:25:da:60:8a:b6:17:d9:7c:9b:7b:e5:f5:6d:ed:
                    cc:91:5b:12:18:39:f9:4a:42:23:d7:0e:89:ab:ac:
                    8f:ab:e2:c0:67:34:f1:28:eb:15:e8:1a:fe:de:d5:
                    64:bb:0a:56:83:0b:30:37:99:14:94:09:7d:7c:09:
                    f7:43:93:0f:13:c1:61:71:ba:fb:69:47:29:ec:7b:
                    06:39:f3:ea:33:38:ca:17:95:1e:b1:f3:20:4c:98:
                    6b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C8:DE:12:C1:82:DA:FA:5A:00:86:EB:6F:7E:8B:0D:99:CB:2A:B9
            X509v3 Authority Key Identifier:
                keyid:A2:BF:C8:76:97:B7:5B:E1:3F:D7:BB:FD:27:F9:C7:E8:3E:D4:10:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCmtN4pMGoa4k5AgQRiJPzj47DGKJdUxjDi5uy7tY7qk/0/A2BFC87697B75BE13FD7BBFD27F9C7E83ED4101E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2BFC87697B75BE13FD7BBFD27F9C7E83ED4101E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCmtN4pMGoa4k5AgQRiJPzj47DGKJdUxjDi5uy7tY7qk/0/323830343a343731633a3a2f33332d3333203d3e20323637303332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:471c::/33

    Signature Algorithm: sha256WithRSAEncryption
         1e:34:a7:0e:2e:79:b6:65:01:6d:45:e2:cb:18:4e:3e:46:87:
         0e:7e:04:47:ce:b4:8d:bf:ce:c0:7e:7c:c8:35:8e:47:a5:4a:
         ec:46:89:5a:b6:0a:29:79:ba:1c:75:75:ab:1d:4b:14:54:36:
         ec:3b:d6:bc:60:d3:cc:24:51:dc:07:8f:98:e4:81:06:95:c4:
         ed:42:9d:67:81:af:1f:f7:47:9f:ed:42:81:64:e4:3f:67:15:
         dd:10:40:37:9c:05:6a:95:99:d0:37:ba:55:66:85:4b:0f:2b:
         33:18:97:c5:a1:8b:a4:5f:75:9f:01:cb:07:93:ee:fe:49:f9:
         f8:f2:1e:43:ed:c0:45:4a:1d:a4:50:c9:c5:1a:f0:6d:e4:6a:
         a1:06:19:7d:71:6e:2d:8d:6f:ce:3b:4f:c3:7c:59:7b:79:87:
         ee:19:ad:1b:11:e8:cf:78:da:6a:ae:9e:5a:9a:c0:cb:20:4c:
         dd:12:b1:ab:e5:37:83:ef:91:2c:b1:3f:e7:8d:ea:19:c5:da:
         da:c2:a2:02:7e:06:f5:04:69:be:03:85:b2:82:59:1b:16:35:
         36:1a:c6:2f:be:7c:ec:22:f6:ab:fb:c2:8e:f9:7d:01:de:3a:
         61:2b:8b:7c:c3:33:80:a3:20:21:b7:94:7a:cf:0a:ec:15:30:
         7d:ee:42:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 04:57:53 2024 by rpki-client on console-fra.rpki-client.org