Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/0/323830343a336630303a3a2f33322d3438203d3e203532363433.roa
File:                     323830343a336630303a3a2f33322d3438203d3e203532363433.roa (raw, json)
Hash identifier:          ewMBs5skaDFr8StFEZX+St4n2zQZ/7IEYo00nUrVQdg=
Subject key identifier:   68:25:A4:4F:5E:23:A6:2C:E4:37:48:00:73:81:83:48:DB:FF:30:21
Certificate issuer:       /CN=FC7E691CC9744A29EC6542D60A2C4A90891FEDEE
Certificate serial:       5CBBF879B33E41A71FD3F9D0DF062D7540F2FB07
Authority key identifier: FC:7E:69:1C:C9:74:4A:29:EC:65:42:D6:0A:2C:4A:90:89:1F:ED:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC7E691CC9744A29EC6542D60A2C4A90891FEDEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/0/323830343a336630303a3a2f33322d3438203d3e203532363433.roa
Signing time:             Thu 04 Jan 2024 18:01:19 +0000
ROA not before:           Thu 04 Jan 2024 17:56:19 +0000
ROA not after:            Thu 02 Jan 2025 18:01:19 +0000
asID:                     52643
IP address blocks:        2804:3f00::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:bb:f8:79:b3:3e:41:a7:1f:d3:f9:d0:df:06:2d:75:40:f2:fb:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC7E691CC9744A29EC6542D60A2C4A90891FEDEE
        Validity
            Not Before: Jan  4 17:56:19 2024 GMT
            Not After : Jan  2 18:01:19 2025 GMT
        Subject: CN=6825A44F5E23A62CE437480073818348DBFF3021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:89:5b:d3:9c:9f:49:ec:a2:ef:17:61:a6:1d:
                    a2:aa:49:8d:65:eb:82:31:cd:28:48:4c:f6:01:91:
                    39:b3:e5:0a:9e:ec:dc:48:f4:74:90:20:4a:41:52:
                    8e:6a:b1:85:e8:63:3f:ad:b4:b0:25:9f:81:bf:be:
                    4f:b2:75:3e:16:7d:99:ca:99:e7:e2:08:12:d5:4c:
                    0f:c0:ef:3b:04:59:c8:e0:1f:3b:ed:29:dd:94:ec:
                    9f:e3:7f:93:3f:4c:fd:75:9f:13:79:79:8c:9c:9c:
                    73:c2:ca:ed:61:5d:d1:03:32:4c:04:73:9e:f4:66:
                    4f:cd:80:73:98:97:4c:ea:7e:a1:b7:18:64:42:7f:
                    b6:eb:8c:13:ac:8a:36:51:6d:5e:46:4a:7e:83:68:
                    84:b0:f2:80:c4:95:55:e8:f9:d6:fd:41:62:b7:78:
                    50:1d:cf:5d:06:c6:55:de:af:56:f5:1a:4c:de:32:
                    a6:dc:71:e8:da:3e:29:50:5e:9f:7d:33:07:f6:22:
                    ac:f7:5c:69:85:e4:71:f3:a7:8a:1f:8a:d5:f3:c8:
                    29:75:ad:42:b5:36:fa:5b:4a:65:81:73:2d:d4:89:
                    01:ca:3e:10:d6:08:ef:11:cd:79:a7:72:bc:d7:30:
                    e7:e7:2e:6c:a8:66:d1:88:72:11:b3:1c:60:04:92:
                    27:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:25:A4:4F:5E:23:A6:2C:E4:37:48:00:73:81:83:48:DB:FF:30:21
            X509v3 Authority Key Identifier:
                keyid:FC:7E:69:1C:C9:74:4A:29:EC:65:42:D6:0A:2C:4A:90:89:1F:ED:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/0/FC7E691CC9744A29EC6542D60A2C4A90891FEDEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC7E691CC9744A29EC6542D60A2C4A90891FEDEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/0/323830343a336630303a3a2f33322d3438203d3e203532363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:6a:83:e4:8a:e9:68:e6:a3:56:d3:c1:eb:b6:9c:6e:5e:a0:
         f9:62:21:5a:b5:50:1d:43:6d:e4:5b:67:fe:a9:9e:55:0f:db:
         c5:9a:3f:c5:86:ba:ec:06:26:24:4a:32:ac:4d:2d:3f:18:bd:
         2e:14:da:db:c3:a4:8d:57:0c:b8:3f:ed:f2:bc:d0:67:f6:9f:
         b6:73:4c:6c:64:b7:88:66:8d:30:a9:83:29:c1:37:6b:68:26:
         dc:0b:cf:94:91:c6:23:9c:69:63:ea:e9:1a:a4:9b:4e:c0:26:
         30:47:0e:3c:91:34:f3:34:3f:81:30:69:82:b9:aa:0c:9e:9d:
         0b:a3:ac:10:0d:07:51:84:a7:03:55:68:69:f3:a2:3a:42:39:
         4a:51:c8:56:98:dd:01:46:20:44:ae:7c:a5:d3:5d:3d:0a:9e:
         81:b1:df:55:c6:b1:29:70:cc:46:b8:2f:b5:a8:31:90:5d:9b:
         30:7e:77:b9:a0:d8:95:c2:91:63:2c:4e:0c:7a:fa:40:03:17:
         15:15:aa:85:02:d0:23:f3:31:82:b8:e6:86:28:24:3d:07:d4:
         08:af:83:b4:e3:62:13:13:86:a7:a0:3f:eb:22:1c:ae:3c:a6:
         a8:5c:97:c7:7d:9c:2b:e6:56:82:3d:9a:12:77:c7:84:4c:97:
         d8:01:fe:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org