Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/323830343a316336343a3a2f33322d3438203d3e203631363533.roa
File:                     323830343a316336343a3a2f33322d3438203d3e203631363533.roa (raw, json)
Hash identifier:          2APFRbUnoh32fZREFnJba40crwpBjWb9WjMufffghOc=
Subject key identifier:   48:F0:EC:6F:CE:E8:EC:C4:C9:1D:A7:26:F3:38:0D:66:D8:1C:AA:03
Certificate issuer:       /CN=9FD58CAC47D65B11B5C050250C49C0B3046662F7
Certificate serial:       F71B07468592E55145AB0999F9A8FD550CCC82
Authority key identifier: 9F:D5:8C:AC:47:D6:5B:11:B5:C0:50:25:0C:49:C0:B3:04:66:62:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FD58CAC47D65B11B5C050250C49C0B3046662F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/323830343a316336343a3a2f33322d3438203d3e203631363533.roa
Signing time:             Tue 29 Mar 2022 13:26:19 +0000
ROA not before:           Tue 29 Mar 2022 13:21:19 +0000
ROA not after:            Tue 28 Mar 2023 13:26:19 +0000
asID:                     61653
IP address blocks:        2804:1c64::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f7:1b:07:46:85:92:e5:51:45:ab:09:99:f9:a8:fd:55:0c:cc:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FD58CAC47D65B11B5C050250C49C0B3046662F7
        Validity
            Not Before: Mar 29 13:21:19 2022 GMT
            Not After : Mar 28 13:26:19 2023 GMT
        Subject: CN=48F0EC6FCEE8ECC4C91DA726F3380D66D81CAA03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:16:dc:61:82:66:a0:b9:30:fd:2b:d7:49:84:
                    eb:f2:af:fa:30:62:94:88:6b:d3:54:4f:da:f4:d3:
                    75:26:0d:8d:db:1b:e3:43:15:22:eb:d6:99:b8:6b:
                    f8:00:89:2f:58:d6:cb:2b:95:4c:ff:1f:01:41:bf:
                    25:c8:b7:80:c3:e2:9b:5a:6d:b9:1f:a3:7c:ed:9e:
                    65:e5:19:8c:55:2e:9b:16:ff:79:c4:fd:cc:7b:50:
                    05:fb:60:32:1c:8b:54:ce:a6:e3:99:46:ec:c3:62:
                    73:9e:82:4b:9d:95:e8:67:69:64:86:8a:9e:4a:19:
                    d1:f4:5d:21:23:b3:bf:98:60:12:a7:e4:0f:9f:6a:
                    33:29:7e:6e:a9:f9:c9:1a:3e:7e:e0:e7:7e:ca:e5:
                    b1:c4:79:86:ac:a8:be:fd:fe:42:56:e7:b2:05:0d:
                    82:54:29:3c:2b:f1:c3:bc:be:e7:97:10:b0:14:97:
                    36:9c:40:b2:ec:60:39:ae:03:8b:68:a5:13:ee:a8:
                    6e:cb:84:07:b1:f8:37:34:4e:ae:9f:e5:05:fd:4a:
                    cb:3d:1c:c2:3c:0b:af:98:ca:c1:89:2e:df:67:ae:
                    82:a6:b3:c9:58:d3:58:cd:8b:6b:1d:78:92:5d:40:
                    c2:f2:c2:08:50:c5:13:d2:b2:86:8e:73:15:ef:39:
                    b6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F0:EC:6F:CE:E8:EC:C4:C9:1D:A7:26:F3:38:0D:66:D8:1C:AA:03
            X509v3 Authority Key Identifier:
                keyid:9F:D5:8C:AC:47:D6:5B:11:B5:C0:50:25:0C:49:C0:B3:04:66:62:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/9FD58CAC47D65B11B5C050250C49C0B3046662F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FD58CAC47D65B11B5C050250C49C0B3046662F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/323830343a316336343a3a2f33322d3438203d3e203631363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c64::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:1c:53:76:e4:2e:fa:18:3b:79:22:62:51:17:de:75:e3:e4:
         81:7a:1c:f2:28:22:fd:d1:dc:33:c0:98:5d:4b:e4:00:3f:70:
         5c:05:2d:b6:89:ed:29:0b:a3:2d:10:ba:40:d8:11:9a:20:19:
         19:6b:61:56:5a:bb:6a:0e:5b:e9:29:34:68:08:78:74:d5:2a:
         3c:6d:cc:29:ba:36:fe:36:01:f5:b8:9d:83:90:f2:20:49:81:
         f3:43:07:8e:2a:cb:de:fa:00:61:a9:fa:ab:b4:47:fb:5c:7d:
         96:17:24:a7:39:10:9e:39:c9:cf:64:5d:56:5b:58:29:87:71:
         d0:b4:6a:0d:9e:0d:4d:0b:a1:6e:dc:47:d3:5b:51:25:1d:fc:
         d7:1b:b5:fb:03:c4:3d:dc:c4:19:a1:62:33:05:12:5a:e0:11:
         86:34:e8:ba:52:29:94:ec:45:46:44:67:2c:e7:bb:87:30:51:
         ce:f9:80:6f:00:3c:5a:12:33:0f:bc:e4:a9:a7:02:3a:81:0b:
         4d:36:48:d1:c0:53:38:9d:4a:8a:12:3b:39:e2:3c:a7:e7:ec:
         c2:d0:75:61:02:9e:1c:6b:00:a3:fe:4e:19:b6:9e:57:6b:1a:
         8a:f3:9d:4f:5f:7b:cb:4b:8e:a2:db:c0:99:b5:1f:c6:0e:a3:
         f4:1b:ef:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org