Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FmzVot6dWRLx9f5e9zJWThN1vnEQabMvpurWd6WHyxK3/0/323830343a366339633a3a2f33322d3438203d3e20323730343830.roa
File:                     323830343a366339633a3a2f33322d3438203d3e20323730343830.roa (raw, json)
Hash identifier:          MmCx6+LUYQSVwcGVoBKdRXgncfp9TnAyktZ355DUX3s=
Subject key identifier:   FB:10:35:DA:D2:03:47:72:4C:AA:44:A7:1C:90:FC:E6:AD:0D:08:E2
Certificate issuer:       /CN=AFFD1A00014BE825E27B1DBE87E973BAD5D81A1E
Certificate serial:       1909167D082045D31A699ECFA7659F9974A8E673
Authority key identifier: AF:FD:1A:00:01:4B:E8:25:E2:7B:1D:BE:87:E9:73:BA:D5:D8:1A:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFFD1A00014BE825E27B1DBE87E973BAD5D81A1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FmzVot6dWRLx9f5e9zJWThN1vnEQabMvpurWd6WHyxK3/0/323830343a366339633a3a2f33322d3438203d3e20323730343830.roa
Signing time:             Wed 24 Nov 2021 03:48:27 +0000
ROA not before:           Wed 24 Nov 2021 03:43:27 +0000
ROA not after:            Wed 23 Nov 2022 03:48:27 +0000
asID:                     270480
IP address blocks:        2804:6c9c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:09:16:7d:08:20:45:d3:1a:69:9e:cf:a7:65:9f:99:74:a8:e6:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFFD1A00014BE825E27B1DBE87E973BAD5D81A1E
        Validity
            Not Before: Nov 24 03:43:27 2021 GMT
            Not After : Nov 23 03:48:27 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7a:e8:d0:6b:11:91:d2:59:68:e2:e4:db:65:
                    61:77:3b:60:43:99:92:cb:b2:d3:1d:c9:1f:6b:42:
                    61:5d:ed:6a:46:dc:99:a7:2c:09:f8:d1:58:ad:6e:
                    8d:16:db:2b:37:53:78:3e:ee:c7:87:2a:b6:47:ae:
                    dd:7e:fc:23:1e:41:91:71:88:f1:54:67:76:f0:9e:
                    8e:42:a8:f3:6a:e3:f9:e9:c0:74:5b:45:6d:0e:e1:
                    9a:ef:12:5e:a2:08:92:e1:a0:f3:40:88:b9:e8:3d:
                    b0:22:35:76:83:5f:bd:86:10:90:64:32:c9:75:09:
                    64:4e:7c:f0:8f:ca:5d:a0:f9:19:fa:d3:63:fb:0b:
                    7b:60:cc:24:5f:51:36:a0:f9:21:3f:55:10:7c:63:
                    0e:d5:1c:1a:0e:ac:7f:26:a1:32:04:f4:71:9a:64:
                    d8:e1:1e:3c:a0:e4:9d:19:2f:5f:dc:31:10:cc:72:
                    03:3a:a4:19:ad:b9:e7:ec:50:b3:ad:dc:15:1d:c0:
                    27:cc:9f:02:cf:77:24:b7:89:7d:02:8d:e4:82:d7:
                    cf:89:e1:f8:d6:e1:a2:f6:8a:3c:e5:7a:2a:8c:8c:
                    6e:a2:b0:4a:5f:00:b1:b8:95:75:f4:61:22:24:5c:
                    a5:0b:c7:d5:a3:15:1a:c0:66:0f:38:c9:a3:16:27:
                    e5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:10:35:DA:D2:03:47:72:4C:AA:44:A7:1C:90:FC:E6:AD:0D:08:E2
            X509v3 Authority Key Identifier:
                keyid:AF:FD:1A:00:01:4B:E8:25:E2:7B:1D:BE:87:E9:73:BA:D5:D8:1A:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FmzVot6dWRLx9f5e9zJWThN1vnEQabMvpurWd6WHyxK3/0/AFFD1A00014BE825E27B1DBE87E973BAD5D81A1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFFD1A00014BE825E27B1DBE87E973BAD5D81A1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FmzVot6dWRLx9f5e9zJWThN1vnEQabMvpurWd6WHyxK3/0/323830343a366339633a3a2f33322d3438203d3e20323730343830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c9c::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:0c:8b:65:54:fd:a5:9a:30:68:a2:e6:7e:4d:11:95:11:59:
         8d:a5:26:ff:6d:56:f9:21:e4:a8:ad:a5:86:03:d9:b7:5d:e0:
         af:5a:d0:3b:d9:66:9d:92:71:a6:ab:af:6d:d7:b5:36:2d:5e:
         48:d9:50:74:4f:57:c8:a0:95:f6:7b:7f:ed:0e:74:97:8b:05:
         a9:52:17:62:1f:fc:8e:e6:7f:84:d0:95:e8:39:cb:33:fb:ac:
         ea:3b:fc:9e:64:76:42:00:1a:47:35:85:23:04:8b:f3:83:ec:
         b1:70:d1:50:b9:f8:5c:a6:06:63:17:75:5a:66:c0:dd:38:5d:
         41:55:a8:19:92:81:d1:0c:46:81:bd:cb:59:1f:84:15:21:40:
         5f:49:cf:02:67:ef:a6:5b:d6:52:b5:59:36:7a:24:bc:a4:0c:
         62:e5:8b:af:71:3c:03:3e:75:e2:21:86:21:b1:68:91:ef:4f:
         ee:72:38:ee:77:d5:9d:fc:a6:03:83:42:9d:a6:21:92:dc:f1:
         97:f6:2f:b0:ee:45:fc:23:c1:26:f1:b1:69:07:05:37:a6:73:
         69:d7:5f:d0:9d:03:b1:0a:28:ab:f3:cc:f8:44:86:34:c1:b6:
         55:28:c5:41:66:13:bd:74:aa:7d:88:56:0f:f6:9a:11:c6:97:
         da:f4:03:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:08 2024 by rpki-client on console-ams.rpki-client.org