Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a363633333a3a2f34382d3438203d3e20323638343731.roa
File:                     323830343a353162343a363633333a3a2f34382d3438203d3e20323638343731.roa (raw, json)
Hash identifier:          7eRtmHcmu8Qj/TF4M6UJKKk59QMH33tMDxdtrOgxxdQ=
Subject key identifier:   B6:DD:70:AE:49:AA:C4:78:6F:DF:9E:C9:FB:3C:2E:43:BE:01:02:1E
Certificate issuer:       /CN=3AA25D1A66959674425740B0D69389FFFDDE91CB
Certificate serial:       0D602F649175701898D08DF9923F076237B5651D
Authority key identifier: 3A:A2:5D:1A:66:95:96:74:42:57:40:B0:D6:93:89:FF:FD:DE:91:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a363633333a3a2f34382d3438203d3e20323638343731.roa
Signing time:             Wed 08 Mar 2023 13:35:47 +0000
ROA not before:           Wed 08 Mar 2023 13:30:47 +0000
ROA not after:            Wed 06 Mar 2024 13:35:47 +0000
asID:                     268471
IP address blocks:        2804:51b4:6633::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:60:2f:64:91:75:70:18:98:d0:8d:f9:92:3f:07:62:37:b5:65:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AA25D1A66959674425740B0D69389FFFDDE91CB
        Validity
            Not Before: Mar  8 13:30:47 2023 GMT
            Not After : Mar  6 13:35:47 2024 GMT
        Subject: CN=B6DD70AE49AAC4786FDF9EC9FB3C2E43BE01021E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:21:cd:8b:85:7b:55:01:a3:ef:ad:f3:9f:47:
                    f5:80:cb:9c:74:73:fb:5e:4a:fb:8b:92:1e:73:bc:
                    10:52:b7:67:ef:69:bd:6e:54:61:54:2b:b2:f6:dc:
                    b3:87:06:64:ea:55:75:63:7c:a3:65:fd:8c:d8:e6:
                    40:77:f1:f5:41:68:c4:22:c3:d5:6f:2a:53:31:9b:
                    08:d8:d1:78:f4:e1:da:de:e0:cb:a2:d6:d9:9d:4c:
                    8d:20:fe:7c:63:5f:cd:75:a3:68:3b:3c:20:1f:9d:
                    33:9e:ac:d0:9b:8a:e1:3b:09:0b:7b:25:ae:ac:bd:
                    61:03:51:b5:09:9d:ce:94:4a:47:f5:a8:78:55:01:
                    c1:0b:2e:b8:a8:a6:3d:28:3d:71:ed:e8:7a:ee:9b:
                    8c:9d:5c:70:8d:01:39:fe:6b:74:83:cd:d2:29:1b:
                    fa:99:cd:d2:4f:ed:2f:1f:d0:8f:d3:c6:63:34:9e:
                    89:d2:60:94:fb:86:85:0a:c1:1a:04:3e:20:8e:7c:
                    49:80:9b:d1:9a:60:29:81:f2:45:87:24:04:72:85:
                    81:b9:d8:b9:f6:65:e6:95:fc:e2:f1:db:89:59:a4:
                    e2:a7:6e:7e:06:a2:3b:55:5a:2d:71:37:65:8b:7b:
                    57:f6:00:b3:f1:cc:8e:52:86:70:66:a2:c1:4e:27:
                    0f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DD:70:AE:49:AA:C4:78:6F:DF:9E:C9:FB:3C:2E:43:BE:01:02:1E
            X509v3 Authority Key Identifier:
                keyid:3A:A2:5D:1A:66:95:96:74:42:57:40:B0:D6:93:89:FF:FD:DE:91:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a363633333a3a2f34382d3438203d3e20323638343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51b4:6633::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:17:45:d9:b9:89:5b:dd:c6:42:c1:9d:ea:6b:a0:94:d7:47:
         e5:a9:31:7b:2c:85:17:42:cc:f3:c9:b1:d3:95:75:53:e5:f6:
         c0:ab:d2:1f:60:e9:89:e8:ac:1d:43:0b:e8:7c:b1:59:c9:ee:
         31:dc:5f:a4:8c:3b:fd:35:f1:54:c3:67:7b:02:0b:60:6a:da:
         6c:fe:ed:12:a8:4d:f6:00:75:93:40:6d:67:0e:31:a7:63:81:
         97:12:df:48:43:b1:11:9a:49:c0:a3:d0:2c:86:9a:e7:33:51:
         be:1a:5a:48:72:cf:4d:44:f3:6a:73:34:cd:bf:08:97:9e:8c:
         64:24:38:45:a8:b3:53:f3:ff:92:da:68:96:e1:cc:30:ca:d3:
         85:bd:99:18:61:70:4a:ef:14:06:df:07:d3:b1:8a:d4:2c:5c:
         35:d6:3c:91:32:2e:52:51:7a:cf:96:9a:57:3a:b5:94:c4:93:
         c4:82:d5:f1:e7:56:35:37:fe:1d:42:e2:18:de:9e:c2:a1:32:
         ab:91:9f:04:72:2b:15:23:96:24:1a:b1:50:a7:db:8e:2d:75:
         5b:5e:44:f7:3b:da:76:b2:da:3b:81:8c:18:c2:92:b4:64:1f:
         b9:7a:3e:10:06:3a:d3:26:b0:f5:2b:bb:90:e9:d8:7a:54:eb:
         2c:7c:55:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org