Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FKAxSb5FBw4TYV1jRJz1tpRV2rPUkemCWBhKnLAKUJnr/0/323830343a316432633a3a2f33322d3438203d3e20323634333532.roa
File:                     323830343a316432633a3a2f33322d3438203d3e20323634333532.roa (raw, json)
Hash identifier:          uq6HbVisVeFxX+PFACIKHHc+YQ1M1W0BCb2y7eKGuRs=
Subject key identifier:   16:8C:7A:47:A3:21:B3:CE:38:A8:3B:07:08:24:A4:AF:0D:5A:61:CD
Certificate issuer:       /CN=C18C1318757B221116457DC9E4FC357DB6F285A1
Certificate serial:       37ECC3AD32AA55E980110C2D6ECE5534F07EF298
Authority key identifier: C1:8C:13:18:75:7B:22:11:16:45:7D:C9:E4:FC:35:7D:B6:F2:85:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C18C1318757B221116457DC9E4FC357DB6F285A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FKAxSb5FBw4TYV1jRJz1tpRV2rPUkemCWBhKnLAKUJnr/0/323830343a316432633a3a2f33322d3438203d3e20323634333532.roa
Signing time:             Tue 29 Jun 2021 12:05:40 +0000
ROA not before:           Tue 29 Jun 2021 12:00:40 +0000
ROA not after:            Tue 28 Jun 2022 12:05:40 +0000
asID:                     264352
IP address blocks:        2804:1d2c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ec:c3:ad:32:aa:55:e9:80:11:0c:2d:6e:ce:55:34:f0:7e:f2:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C18C1318757B221116457DC9E4FC357DB6F285A1
        Validity
            Not Before: Jun 29 12:00:40 2021 GMT
            Not After : Jun 28 12:05:40 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:85:67:9c:c9:09:ce:8e:3b:b9:9a:09:d6:c2:
                    87:67:2e:77:e7:cc:cd:16:d9:c3:22:4e:fc:28:1a:
                    8a:38:72:65:23:50:53:82:dc:10:80:be:2c:cc:a6:
                    ee:55:6f:ec:fd:79:2c:c2:3b:e6:9b:96:fc:bf:45:
                    a3:88:5e:8b:80:ca:48:4f:67:6c:33:9d:14:d1:8f:
                    38:e4:16:e5:e3:62:dd:f1:46:3c:0c:bf:e2:fc:4c:
                    2c:ce:72:5e:33:c1:50:0d:c9:e2:6f:d6:39:57:b3:
                    3c:14:5d:03:6c:35:90:b5:f1:c5:6c:20:75:f9:a9:
                    fc:3f:8c:55:bd:e5:b1:12:0b:37:d6:31:27:de:46:
                    1b:66:97:35:33:e4:3c:40:f9:e2:3f:01:bd:3a:70:
                    af:24:09:67:52:45:4e:50:f7:d7:5e:fa:45:91:29:
                    7f:19:e8:b0:f1:c5:7d:e4:2b:c6:68:44:66:07:db:
                    a7:6d:f6:55:54:bc:47:3f:dc:3d:b9:92:0f:85:b9:
                    e6:eb:df:e6:11:96:a0:a0:ea:a5:9f:b5:9c:13:62:
                    bb:04:79:9a:b4:48:77:06:a8:a5:41:cd:8c:68:bc:
                    53:9c:65:93:9c:16:5d:4e:7d:48:2e:c2:91:63:af:
                    06:f9:4d:1f:c2:8e:d7:1d:2d:5c:f4:c5:59:46:14:
                    57:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8C:7A:47:A3:21:B3:CE:38:A8:3B:07:08:24:A4:AF:0D:5A:61:CD
            X509v3 Authority Key Identifier:
                keyid:C1:8C:13:18:75:7B:22:11:16:45:7D:C9:E4:FC:35:7D:B6:F2:85:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FKAxSb5FBw4TYV1jRJz1tpRV2rPUkemCWBhKnLAKUJnr/0/C18C1318757B221116457DC9E4FC357DB6F285A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C18C1318757B221116457DC9E4FC357DB6F285A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKAxSb5FBw4TYV1jRJz1tpRV2rPUkemCWBhKnLAKUJnr/0/323830343a316432633a3a2f33322d3438203d3e20323634333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:cf:42:5e:03:26:35:87:da:1e:ad:a0:22:da:84:e5:5c:18:
         54:65:12:38:77:1f:67:0f:2a:15:18:af:db:31:0b:47:32:c6:
         9d:37:4a:2f:1e:28:64:d5:59:cc:fe:75:45:eb:dd:ed:04:b8:
         ba:b7:36:77:8a:24:c8:61:dd:89:76:3a:2d:6d:cf:d1:60:e2:
         a4:48:ff:e1:3f:ae:94:05:4b:b0:89:58:28:a4:ee:f1:cb:98:
         ee:99:a3:43:fe:a4:70:3d:6f:a8:8a:ca:1c:57:81:9d:38:41:
         78:ce:49:59:c0:e4:23:19:00:a9:0f:24:ce:94:cc:83:84:8b:
         ad:df:01:38:58:6f:58:22:93:db:11:39:1e:73:2d:25:d0:8a:
         b4:02:a5:18:8e:df:0b:5e:8e:58:6d:37:a4:a1:88:8f:17:0c:
         7b:ec:be:0d:22:71:4f:03:9e:33:d4:5e:d1:ca:a2:f4:39:b1:
         5b:9f:65:3a:66:79:13:72:a9:d6:cb:68:7f:8b:ba:32:b8:4c:
         ff:0c:9c:ab:1d:65:5d:6b:45:a9:ba:5c:bd:d9:79:30:b1:c6:
         9d:f3:a1:c4:92:0c:c2:2f:b0:70:cf:51:90:6f:ac:08:27:18:
         77:71:18:60:de:7c:2c:ea:1c:ab:62:81:ec:66:b6:fb:b1:97:
         b9:67:7f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org