Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/323830343a3639383a3a2f33322d3332203d3e203238353733.roa
File:                     323830343a3639383a3a2f33322d3332203d3e203238353733.roa (raw, json)
Hash identifier:          h/AL0ya2btms97C99+YFRt1vAyo/dlI469R+GlxE7xQ=
Subject key identifier:   F1:A4:98:26:A0:04:B7:67:A2:C5:90:A6:DA:0D:B9:35:AF:53:59:C5
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       66E404184D62FA8FFB80C49985DA84394A8F47C2
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/323830343a3639383a3a2f33322d3332203d3e203238353733.roa
Signing time:             Wed 22 Mar 2023 17:53:15 +0000
ROA not before:           Wed 22 Mar 2023 17:48:15 +0000
ROA not after:            Wed 20 Mar 2024 17:53:15 +0000
asID:                     28573
IP address blocks:        2804:698::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e4:04:18:4d:62:fa:8f:fb:80:c4:99:85:da:84:39:4a:8f:47:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Mar 22 17:48:15 2023 GMT
            Not After : Mar 20 17:53:15 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:16:c5:a5:cb:f2:3a:33:9c:42:47:9e:c4:ed:
                    90:3c:fd:9f:be:e5:c4:4b:11:c8:39:a0:1d:fa:0f:
                    87:4f:8e:b1:49:78:8b:e7:61:cc:40:87:59:99:0d:
                    aa:d6:dc:e6:ae:41:fb:55:a0:8d:18:e8:48:6b:a8:
                    ba:40:ce:53:09:86:78:43:14:76:cd:13:44:a1:d0:
                    93:59:91:8c:8c:38:c5:7b:77:10:92:ea:54:04:89:
                    1a:88:4d:08:bb:92:55:6a:c1:1c:99:62:a9:54:fa:
                    bf:42:f7:84:2d:8f:0b:0c:4a:56:95:c8:e7:49:01:
                    4f:2d:c8:50:e7:0e:83:c2:09:1f:fa:3a:70:11:af:
                    44:b0:2e:37:c3:2e:95:4a:b3:a7:ea:60:58:dc:86:
                    61:d6:40:ff:37:3f:ca:59:87:7b:08:8f:e1:b0:54:
                    67:a4:71:78:79:3b:16:41:80:2b:38:ed:f3:22:25:
                    41:8b:6b:24:99:6b:94:5a:0f:a3:75:69:41:d9:9e:
                    dd:de:5c:4b:9f:7f:2b:e3:07:93:37:47:12:07:75:
                    2f:ae:cd:2e:60:67:9a:ea:1d:af:be:c4:9a:e5:e2:
                    6c:53:9b:f1:f3:fd:4d:06:b4:c5:77:87:72:63:81:
                    f8:10:06:a5:4c:24:09:2c:8e:d1:7f:a6:82:cd:06:
                    44:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A4:98:26:A0:04:B7:67:A2:C5:90:A6:DA:0D:B9:35:AF:53:59:C5
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/323830343a3639383a3a2f33322d3332203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:698::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:4d:70:5e:de:ba:f1:49:a6:46:b6:93:d2:dc:c2:75:cd:9f:
         4d:2d:2e:73:c4:4b:a9:56:98:8d:b5:6d:a1:59:e7:31:51:3a:
         c2:94:a8:5b:03:47:e0:fe:57:d5:e7:14:0f:2d:2d:e9:96:6d:
         0e:3d:7d:c7:87:7a:80:1c:62:09:12:8a:f9:93:fd:56:f7:bb:
         76:38:52:95:12:9e:ea:a0:54:69:b8:8c:11:a1:c1:eb:ce:93:
         0e:b5:58:98:ee:95:bb:3f:a5:7f:43:08:31:c7:1e:5c:88:8f:
         3a:7d:b0:0a:0b:2d:a3:ea:98:e4:97:54:e7:2e:f4:f1:82:a3:
         cc:32:a5:1a:d1:c4:ba:47:29:04:6c:c4:da:b8:32:08:0a:5b:
         31:38:a2:1f:50:31:7f:d5:e7:40:1b:52:ea:86:d2:c3:4e:aa:
         9b:b3:e7:c3:07:8c:56:3b:ab:4a:3f:55:6b:e4:2a:c8:48:68:
         61:be:ec:18:86:6b:35:47:10:4b:e7:23:96:ed:6e:e1:c4:5d:
         8a:d5:b7:a8:f6:9b:c3:26:58:2e:26:a4:3d:c3:da:43:bb:47:
         4b:52:7d:a9:35:50:a7:02:30:2d:6c:80:89:f1:53:31:ed:92:
         77:e5:e9:51:62:9b:22:8b:ed:ed:8d:af:1e:d6:35:77:00:ae:
         6c:59:47:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org