Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/323830343a3830383a3a2f33322d3332203d3e203533303036.roa
File:                     323830343a3830383a3a2f33322d3332203d3e203533303036.roa (raw, json)
Hash identifier:          JRJVHyhG+1rcqBBa6sRx7TxjBPW15D086kYuvsj1sYs=
Subject key identifier:   18:DE:0E:17:4B:9E:B7:C6:65:6F:15:6E:17:B9:22:77:10:2C:57:A7
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       7C542B836C6459D7DAC8E707EEB134F03E9FB8B8
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/323830343a3830383a3a2f33322d3332203d3e203533303036.roa
Signing time:             Sat 11 Dec 2021 18:09:05 +0000
ROA not before:           Sat 11 Dec 2021 18:04:05 +0000
ROA not after:            Sat 10 Dec 2022 18:09:05 +0000
asID:                     53006
IP address blocks:        2804:808::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:54:2b:83:6c:64:59:d7:da:c8:e7:07:ee:b1:34:f0:3e:9f:b8:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:04:05 2021 GMT
            Not After : Dec 10 18:09:05 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a8:26:b9:e9:c9:29:23:b7:d4:4e:08:77:f4:
                    94:2a:74:92:9c:98:54:c5:63:c0:17:e8:bc:8f:77:
                    c8:b1:c1:e5:9b:48:cc:0c:8d:0b:da:36:ef:ec:6d:
                    ea:59:e0:f7:4b:d9:3c:23:f1:26:93:64:fd:46:6f:
                    ac:09:fd:77:e4:c0:e4:17:38:da:c1:2c:8a:c5:af:
                    1c:26:07:39:c5:d5:c3:13:6d:f7:cf:0b:d7:15:d6:
                    c3:bf:98:89:8b:cb:2e:87:93:d6:34:be:7c:d2:93:
                    cc:d0:20:02:3f:7c:10:88:65:d8:a5:a3:53:a7:ee:
                    f5:9b:f8:5d:79:b0:55:39:37:63:aa:49:e6:f2:0d:
                    83:91:25:dc:84:57:02:a4:ac:a0:dc:62:44:b5:6b:
                    71:be:58:1a:b8:d8:73:2e:02:a0:59:5a:e7:3c:fc:
                    80:71:f4:c2:9f:e3:ca:39:a3:d7:ea:9b:5a:bc:12:
                    62:a0:6d:03:45:71:46:db:71:b6:14:92:5c:ad:f0:
                    ec:e8:8c:0a:eb:86:58:f3:2a:3c:46:f7:36:0f:90:
                    c4:12:7d:75:31:f6:d1:25:ec:94:c5:4d:e2:7b:14:
                    97:3c:04:e3:e3:65:19:f1:14:7f:60:3e:2e:de:12:
                    fa:08:af:51:89:3c:4f:8e:85:94:d0:d1:fc:57:de:
                    27:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DE:0E:17:4B:9E:B7:C6:65:6F:15:6E:17:B9:22:77:10:2C:57:A7
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/323830343a3830383a3a2f33322d3332203d3e203533303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:808::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:7e:ed:e4:6d:8c:28:c3:cd:5d:3a:f4:fd:cd:9b:f9:d0:d0:
         98:6b:54:4d:0e:49:46:02:4a:4f:d9:c1:7b:9d:70:4f:01:0c:
         21:25:63:f1:48:02:d6:9f:90:3d:59:ab:2f:61:8e:ab:46:83:
         69:89:ce:78:0d:b8:fd:c8:e0:0f:b5:89:cb:59:57:a1:14:b1:
         af:25:98:e5:be:5a:77:96:77:b6:ff:8b:1e:09:96:ed:e1:5f:
         c8:84:3b:85:25:64:22:2c:ca:45:e1:63:b3:47:ca:9a:a8:88:
         9e:41:a3:66:b6:ec:ba:4c:31:5f:b2:af:a9:a9:62:90:3d:4c:
         b5:3a:f1:1a:bd:20:cf:72:25:6b:87:34:b8:f3:e8:fb:b8:ca:
         64:ff:54:31:6c:c1:3c:c7:91:60:32:df:ad:89:d7:90:cd:9f:
         38:05:7e:34:42:42:b2:76:59:14:a5:20:5a:02:70:52:9d:e9:
         9f:7c:f2:cb:1f:62:16:41:2f:12:31:d7:51:47:5b:63:4e:fb:
         7e:26:64:56:2d:4b:d3:12:fb:4a:03:ef:2a:22:7e:06:ec:30:
         a1:10:de:14:84:98:d7:09:5e:cd:dc:4a:3e:f1:61:32:28:94:
         c5:b2:f7:10:67:56:de:31:d0:93:07:ef:3b:73:b0:f3:92:4f:
         96:02:03:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org