Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHoBBpBFaRQUiZbXaKHKMB3YJpdrJAv4jPjXUETNV3fz/0/323830343a326632303a3a2f33322d3438203d3e20323634383733.roa
File:                     323830343a326632303a3a2f33322d3438203d3e20323634383733.roa (raw, json)
Hash identifier:          Uq05jshlxsJLRuaCi0U/rgcDPlDmQSQ6iNHlU0RSUEU=
Subject key identifier:   8E:20:64:D3:AE:10:EF:53:47:A4:03:83:54:7C:05:C0:39:9E:79:AD
Certificate issuer:       /CN=F1C14EF1523999794DD250CE11165F513FBE3E24
Certificate serial:       777C1A779D8E61F9C85402F0222FAC79E1B690F5
Authority key identifier: F1:C1:4E:F1:52:39:99:79:4D:D2:50:CE:11:16:5F:51:3F:BE:3E:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1C14EF1523999794DD250CE11165F513FBE3E24.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHoBBpBFaRQUiZbXaKHKMB3YJpdrJAv4jPjXUETNV3fz/0/323830343a326632303a3a2f33322d3438203d3e20323634383733.roa
Signing time:             Wed 06 Jul 2022 14:30:00 +0000
ROA not before:           Wed 06 Jul 2022 14:25:00 +0000
ROA not after:            Wed 05 Jul 2023 14:30:00 +0000
asID:                     264873
IP address blocks:        2804:2f20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:7c:1a:77:9d:8e:61:f9:c8:54:02:f0:22:2f:ac:79:e1:b6:90:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C14EF1523999794DD250CE11165F513FBE3E24
        Validity
            Not Before: Jul  6 14:25:00 2022 GMT
            Not After : Jul  5 14:30:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8c:6d:f4:55:38:6e:01:89:9c:d6:93:78:bc:
                    9b:95:6d:9b:da:ae:2b:3b:79:bf:f1:87:1d:c4:c9:
                    06:1d:de:88:2f:b0:fe:6a:82:67:ea:7c:24:22:b3:
                    ec:5d:8b:7b:8f:ca:81:a8:8c:0d:92:e5:7d:43:0e:
                    46:9b:eb:2b:3c:7b:68:08:5a:55:9a:da:21:06:1a:
                    ff:20:6a:22:db:44:0e:40:d1:19:e8:77:6c:12:2a:
                    ef:5a:c4:27:77:6f:57:3b:78:fd:83:2f:72:0c:21:
                    27:c1:c5:c3:53:cf:57:3f:0d:d8:42:75:58:f7:e8:
                    76:da:2c:04:1e:ac:01:7d:fb:3f:c9:a7:41:6a:f7:
                    c3:bf:b1:b9:60:f5:99:4d:45:bc:e6:46:dc:15:ef:
                    25:da:cb:fe:49:7d:31:a4:75:e5:34:05:bd:2c:5d:
                    81:dc:78:34:16:60:93:1a:29:28:3a:6d:48:31:5d:
                    f8:26:c9:23:e8:e0:cd:8b:0e:93:6b:fc:ea:1b:3e:
                    df:56:b7:6b:e5:ee:0c:f3:e2:ac:56:0d:63:8c:9d:
                    2c:ad:55:2a:6b:06:0f:c4:e5:ca:74:e8:4b:d5:c3:
                    a6:59:48:0b:13:b4:76:89:ad:13:8e:10:7e:63:37:
                    2b:bc:b6:91:3c:08:f6:84:02:53:a4:33:22:a2:6f:
                    bf:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:20:64:D3:AE:10:EF:53:47:A4:03:83:54:7C:05:C0:39:9E:79:AD
            X509v3 Authority Key Identifier:
                keyid:F1:C1:4E:F1:52:39:99:79:4D:D2:50:CE:11:16:5F:51:3F:BE:3E:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHoBBpBFaRQUiZbXaKHKMB3YJpdrJAv4jPjXUETNV3fz/0/F1C14EF1523999794DD250CE11165F513FBE3E24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1C14EF1523999794DD250CE11165F513FBE3E24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHoBBpBFaRQUiZbXaKHKMB3YJpdrJAv4jPjXUETNV3fz/0/323830343a326632303a3a2f33322d3438203d3e20323634383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f20::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:9e:c6:48:8b:d8:27:ee:d3:b1:44:99:3a:ff:ca:46:3e:0f:
         d2:2f:e0:8d:0e:46:b2:03:f6:8e:8e:f6:c7:a9:93:3b:11:56:
         ac:21:6c:83:0e:b9:f2:3d:1a:83:b9:40:dd:c2:8d:38:ce:8b:
         ff:3e:55:4a:e7:e0:87:9e:b1:b5:a7:f0:57:0f:3d:72:6e:2c:
         7b:80:f6:f9:d0:a5:7d:25:6c:5a:7b:a3:fd:42:62:38:9b:94:
         e8:d8:00:b0:0a:09:b5:6f:d5:a0:f4:26:cc:08:64:58:fb:bb:
         23:a4:0f:97:77:d0:59:37:eb:31:43:5e:aa:86:59:1c:fd:ff:
         53:7d:92:3c:ad:d9:2e:af:7a:cd:cc:fd:c5:3f:f4:b5:5b:ca:
         42:a6:06:e9:5b:76:b9:15:45:c0:bd:e9:73:da:d9:ff:a8:ce:
         78:60:a9:68:9e:37:3f:b5:20:60:cb:f4:7c:eb:5d:8e:a6:47:
         c4:3d:9d:ae:17:49:18:45:10:82:4b:06:67:46:fd:aa:4f:07:
         27:ea:45:36:85:12:60:19:ad:02:0b:d3:5a:46:c4:41:0f:61:
         8c:88:70:b3:65:af:b1:44:e2:bb:73:7d:7d:04:fc:1c:15:de:
         a4:ad:8f:89:0c:0a:01:9b:cb:cb:e8:72:fd:2b:97:89:ed:69:
         23:39:1f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org