Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/323830343a6336303a3a2f33322d3332203d3e203532363936.roa
File:                     323830343a6336303a3a2f33322d3332203d3e203532363936.roa (raw, json)
Hash identifier:          VEDFkSfilQ9whEGARzIJrGzYMz2XC3vXl6F0HJ59nVc=
Subject key identifier:   CA:46:B6:9E:4A:B3:0F:F4:74:9F:75:FD:12:7C:4C:A4:82:5F:11:52
Certificate issuer:       /CN=C8207CBCDD5C588AA6F98954E4642BACD9C206F5
Certificate serial:       40908B8AEF85B6BE8A12272F364704A3B262DE87
Authority key identifier: C8:20:7C:BC:DD:5C:58:8A:A6:F9:89:54:E4:64:2B:AC:D9:C2:06:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8207CBCDD5C588AA6F98954E4642BACD9C206F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/323830343a6336303a3a2f33322d3332203d3e203532363936.roa
Signing time:             Wed 07 Feb 2024 05:40:48 +0000
ROA not before:           Wed 07 Feb 2024 05:35:48 +0000
ROA not after:            Wed 05 Feb 2025 05:40:48 +0000
asID:                     52696
IP address blocks:        2804:c60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:90:8b:8a:ef:85:b6:be:8a:12:27:2f:36:47:04:a3:b2:62:de:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8207CBCDD5C588AA6F98954E4642BACD9C206F5
        Validity
            Not Before: Feb  7 05:35:48 2024 GMT
            Not After : Feb  5 05:40:48 2025 GMT
        Subject: CN=CA46B69E4AB30FF4749F75FD127C4CA4825F1152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9a:b8:fb:e7:37:00:b8:8f:f9:22:ad:57:3a:
                    34:93:72:f1:8c:7d:7f:65:9d:29:ba:82:60:92:ee:
                    9a:48:34:71:ed:12:79:5c:0b:3b:27:2c:6c:e2:48:
                    70:64:4e:e5:29:f3:53:36:f4:b5:f9:62:96:fb:8b:
                    d1:87:6a:3b:ec:62:c7:c0:19:e1:dd:c3:11:b0:de:
                    c8:48:66:88:d7:47:47:8c:2c:2a:e5:50:c5:11:9d:
                    73:f1:21:cc:a8:0c:81:03:da:b1:66:fd:ca:96:03:
                    4c:54:92:fb:fa:5c:3a:35:3b:0f:4d:36:82:4e:84:
                    30:71:cd:ab:a6:2a:b2:f6:48:14:8f:ac:6c:24:8d:
                    b7:ba:11:0f:c0:5b:fd:e6:0d:89:95:80:30:e9:f4:
                    1b:a0:24:09:13:dc:72:99:4d:b2:c7:fc:95:56:bc:
                    0c:fb:98:23:1d:66:0c:dd:52:ca:a5:ad:1e:9e:e6:
                    6b:4f:7d:f6:71:ca:d3:12:b9:94:20:cf:f5:6e:c9:
                    ed:41:99:87:54:40:b6:fa:ea:8b:29:8e:f6:96:63:
                    83:85:7a:31:f8:5e:de:06:be:ee:42:85:42:18:44:
                    46:62:45:60:7c:14:05:c2:a4:37:69:67:4a:71:84:
                    68:1f:43:da:dd:6d:fd:90:35:d9:0c:a5:01:ce:90:
                    23:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:46:B6:9E:4A:B3:0F:F4:74:9F:75:FD:12:7C:4C:A4:82:5F:11:52
            X509v3 Authority Key Identifier:
                keyid:C8:20:7C:BC:DD:5C:58:8A:A6:F9:89:54:E4:64:2B:AC:D9:C2:06:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/C8207CBCDD5C588AA6F98954E4642BACD9C206F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8207CBCDD5C588AA6F98954E4642BACD9C206F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/323830343a6336303a3a2f33322d3332203d3e203532363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c60::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:06:3c:2c:7d:ba:8b:b1:39:74:50:9c:61:48:f0:1b:a3:26:
         2b:e1:1f:0d:35:0e:04:c8:47:5e:4a:11:e7:13:5d:d3:44:25:
         31:e2:f6:6e:dd:44:fd:7b:db:3f:c8:3d:67:0f:94:05:64:d5:
         cc:15:dc:cb:28:83:c9:a5:b6:7c:55:c2:f5:27:45:1c:ba:b1:
         35:6d:12:95:0c:e4:b9:72:6a:10:dc:b0:b5:c1:23:7e:47:99:
         48:e7:5d:39:d8:a2:e9:e9:e9:dc:64:f5:6a:2b:41:8c:f7:cc:
         bf:97:b8:dc:33:62:c2:f4:93:ce:a6:0b:e8:e4:03:5c:92:ee:
         eb:b7:4f:23:6e:9d:c7:0c:85:3a:32:da:3e:b3:f2:0b:c7:54:
         82:34:75:4c:bd:eb:8c:ef:e8:4c:a9:bc:39:c0:96:b8:af:27:
         66:e5:12:0c:e7:1a:a5:37:de:f0:1b:67:9a:f0:b8:28:36:a7:
         12:af:56:5d:36:ad:78:2a:bc:81:64:a1:35:c3:d8:67:38:71:
         05:50:3d:6f:95:e6:de:2e:0d:1b:6f:5c:2d:82:c3:0c:cc:55:
         db:19:f0:4b:0a:50:5d:3d:9c:13:28:4c:1d:88:9c:47:a0:8c:
         da:97:a6:55:72:33:c9:44:ef:39:c8:6c:b4:29:ee:11:52:cd:
         70:eb:bc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:08 2024 by rpki-client on console-ams.rpki-client.org