Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/323830343a383461633a3a2f33332d3333203d3e203238323233.roa
File:                     323830343a383461633a3a2f33332d3333203d3e203238323233.roa (raw, json)
Hash identifier:          XwD7RqjlqUddsD4GXzLhqO3ieB+5RccdAb9QgOdD8yE=
Subject key identifier:   3A:AC:DD:00:18:FC:67:A3:98:79:77:64:FC:88:F9:F1:49:59:3D:C0
Certificate issuer:       /CN=BE63B8CB93F2BA6FE679C54630B5285FD7878CF3
Certificate serial:       51DC2ABC8562553641D22ACDA536A11B75645327
Authority key identifier: BE:63:B8:CB:93:F2:BA:6F:E6:79:C5:46:30:B5:28:5F:D7:87:8C:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/323830343a383461633a3a2f33332d3333203d3e203238323233.roa
Signing time:             Wed 03 May 2023 22:17:02 +0000
ROA not before:           Wed 03 May 2023 22:12:02 +0000
ROA not after:            Wed 01 May 2024 22:17:02 +0000
asID:                     28223
IP address blocks:        2804:84ac::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:dc:2a:bc:85:62:55:36:41:d2:2a:cd:a5:36:a1:1b:75:64:53:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE63B8CB93F2BA6FE679C54630B5285FD7878CF3
        Validity
            Not Before: May  3 22:12:02 2023 GMT
            Not After : May  1 22:17:02 2024 GMT
        Subject: CN=3AACDD0018FC67A398797764FC88F9F149593DC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e2:68:05:cd:8e:81:38:c5:73:7e:d2:c2:34:
                    64:06:fb:50:9e:e3:e3:41:5f:33:f5:b6:c2:c6:24:
                    bc:1b:72:cf:00:59:11:cf:60:0a:73:d2:e5:3f:e6:
                    05:0d:24:11:86:44:ed:6d:2b:e0:30:64:a8:af:21:
                    4d:07:46:77:46:85:37:3b:e8:64:d2:e8:83:74:c5:
                    3c:5d:fd:22:31:f7:3c:fe:d1:02:01:68:62:35:fe:
                    ac:f0:ac:1c:1d:31:95:3e:34:a8:bf:78:7d:9a:1f:
                    c3:f1:2b:5a:5c:90:49:32:cd:c8:9c:3a:b5:76:f8:
                    6b:1a:03:f4:4b:82:e2:ca:7d:dc:00:eb:f6:3c:5d:
                    6b:f0:df:6a:32:3b:32:ff:10:8c:89:13:38:3e:ce:
                    32:e3:26:72:18:12:6d:7a:9d:ae:b0:ce:70:5a:28:
                    e6:bc:be:83:ac:c6:94:54:bf:85:ab:aa:2e:47:96:
                    e0:d1:29:e8:3a:0d:aa:e3:f3:0c:4f:f4:99:92:ca:
                    52:af:ba:67:39:d7:e4:09:f4:a6:16:e9:4e:81:42:
                    a5:b2:0e:40:1b:ea:a2:8f:e8:82:a9:04:b7:72:83:
                    b0:06:7e:d5:ac:b2:74:0d:19:fb:07:77:6a:67:7e:
                    51:bb:bc:8c:da:07:57:71:77:36:fb:6b:94:bd:de:
                    40:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AC:DD:00:18:FC:67:A3:98:79:77:64:FC:88:F9:F1:49:59:3D:C0
            X509v3 Authority Key Identifier:
                keyid:BE:63:B8:CB:93:F2:BA:6F:E6:79:C5:46:30:B5:28:5F:D7:87:8C:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/323830343a383461633a3a2f33332d3333203d3e203238323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:84ac::/33

    Signature Algorithm: sha256WithRSAEncryption
         bc:01:69:28:e5:2a:57:f9:ff:15:cd:a0:e8:76:8a:42:46:f2:
         99:64:df:4b:e5:6c:04:dd:5a:e0:df:28:a0:90:f2:7b:d1:2d:
         ef:28:05:60:c3:c4:21:ec:c1:19:7d:aa:0f:5b:b8:ea:cd:b1:
         dd:7e:33:95:e8:f1:bb:ac:b3:27:54:82:e9:dc:37:7b:f4:ce:
         ab:ba:93:04:a6:00:a4:d5:6d:16:f8:c2:fb:3e:5d:96:b0:e7:
         71:49:84:8a:65:41:6d:79:33:44:a7:2a:ca:e6:51:f2:52:10:
         52:67:d8:a3:c7:4b:cf:c4:ba:5a:81:23:5a:34:ad:97:18:53:
         ef:25:2c:b4:ef:6c:c9:c3:c7:49:e3:33:15:ce:b2:62:54:87:
         37:2b:7d:40:8c:ea:00:9b:f8:93:28:da:71:8c:b5:13:0c:95:
         1f:80:ab:ad:fb:9e:66:5f:52:08:f2:70:ed:e6:89:95:ca:17:
         7b:e9:aa:da:41:b3:ab:a5:31:ac:49:41:b5:a1:63:6a:85:21:
         c7:0d:a1:7a:bb:68:3d:14:c1:1a:bb:0b:01:df:61:ab:9c:b3:
         0e:96:68:62:fb:ad:5c:7c:1a:e8:17:d6:41:81:f1:36:6f:7b:
         cb:0c:57:ea:e0:40:f8:cb:b3:96:2a:06:8c:84:ef:47:c1:f1:
         a9:94:89:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org