Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a363733333a3a2f34382d3438203d3e20323638343731.roa
File:                     323830343a353162343a363733333a3a2f34382d3438203d3e20323638343731.roa (raw, json)
Hash identifier:          /2zGdJhjz4Vs+BtqJcsHm+h5gJK6JBgLm1qwH7AIXhY=
Subject key identifier:   6C:0F:C6:FF:46:6D:DD:D3:E5:1A:88:FF:8A:8A:73:B9:66:42:81:C9
Certificate issuer:       /CN=3AA25D1A66959674425740B0D69389FFFDDE91CB
Certificate serial:       522B431CA1DB4C088E738468C92E2C2CF7519E05
Authority key identifier: 3A:A2:5D:1A:66:95:96:74:42:57:40:B0:D6:93:89:FF:FD:DE:91:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a363733333a3a2f34382d3438203d3e20323638343731.roa
Signing time:             Wed 08 Mar 2023 13:36:27 +0000
ROA not before:           Wed 08 Mar 2023 13:31:27 +0000
ROA not after:            Wed 06 Mar 2024 13:36:27 +0000
asID:                     268471
IP address blocks:        2804:51b4:6733::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:2b:43:1c:a1:db:4c:08:8e:73:84:68:c9:2e:2c:2c:f7:51:9e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AA25D1A66959674425740B0D69389FFFDDE91CB
        Validity
            Not Before: Mar  8 13:31:27 2023 GMT
            Not After : Mar  6 13:36:27 2024 GMT
        Subject: CN=6C0FC6FF466DDDD3E51A88FF8A8A73B9664281C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5a:62:67:9a:c3:e7:37:8e:a3:fa:cb:9e:5f:
                    a3:e9:89:29:2f:f3:65:0f:e4:75:ea:fa:3d:70:d1:
                    46:71:94:b4:fb:e0:a5:8c:c3:84:ae:d6:69:d6:e0:
                    76:dd:7d:26:fb:6a:ac:26:55:16:97:90:9b:45:01:
                    90:fb:d1:b8:e1:f6:a0:12:75:94:6f:95:ed:9a:46:
                    49:f0:5f:f2:a3:4d:03:e6:b5:fb:ca:f1:a2:98:e4:
                    df:c1:06:fc:16:77:bf:b2:99:f7:28:8b:1e:86:e7:
                    63:6e:d2:a2:c2:51:05:3d:d5:4e:b3:ab:18:c1:1a:
                    78:e0:5e:23:38:cb:f4:a0:51:ce:81:a1:7d:23:87:
                    5c:f4:9c:54:03:59:ee:f1:ef:2a:ea:ce:bf:73:0a:
                    b7:ed:8b:c7:25:33:55:92:3b:35:d1:2b:33:6b:36:
                    4c:ac:c5:9d:47:bc:bb:5f:a7:a9:c2:dd:06:0c:2d:
                    b3:4d:d6:e2:84:29:be:6d:51:b1:9a:e9:e5:75:12:
                    df:b6:9f:0a:96:75:0f:fe:a0:03:88:d8:22:6b:bc:
                    92:d4:ff:6d:65:60:fc:8e:e6:93:e8:a1:59:ab:a5:
                    77:29:70:03:0b:92:c2:fb:08:58:10:14:cd:32:74:
                    83:46:83:2b:a3:24:07:71:5a:c1:b9:7d:46:f2:9d:
                    14:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0F:C6:FF:46:6D:DD:D3:E5:1A:88:FF:8A:8A:73:B9:66:42:81:C9
            X509v3 Authority Key Identifier:
                keyid:3A:A2:5D:1A:66:95:96:74:42:57:40:B0:D6:93:89:FF:FD:DE:91:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a363733333a3a2f34382d3438203d3e20323638343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51b4:6733::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:ec:5c:d7:6e:2a:02:d9:ad:41:b3:b9:fc:13:80:15:f9:3e:
         20:77:25:1d:74:5a:40:23:8c:b9:2b:dd:4e:f8:2c:69:c5:3f:
         ec:4b:31:ac:f9:c6:5e:03:e3:39:d6:27:64:f3:ac:4c:e3:3e:
         2e:a3:56:75:7d:24:b5:c7:7b:5f:40:2e:4a:dd:07:16:1a:62:
         97:04:10:1f:26:49:e7:e6:cf:13:d0:93:be:69:bf:14:c3:21:
         60:7d:ca:c2:7e:3c:aa:87:bf:a6:ee:57:ad:4c:d4:27:a4:8d:
         ea:63:e6:36:de:97:9b:76:83:ba:ed:0b:9f:b1:4a:2c:e5:81:
         b6:08:7a:75:f0:5a:03:11:ed:56:ca:d1:2f:d2:82:87:5d:9c:
         fa:45:39:02:a6:db:c9:ed:9c:54:e5:52:a2:3c:47:c8:64:fd:
         e1:03:98:76:ed:2c:ac:b2:47:8a:76:35:bf:9d:eb:c8:02:c9:
         62:29:c5:7b:85:fb:bb:fe:55:99:2d:ae:27:bc:c3:18:0c:d1:
         9f:62:8f:e3:4f:37:91:c1:d0:7f:68:42:76:2e:fa:f5:65:04:
         d6:41:d7:00:77:3e:d7:0c:fe:90:08:9c:ce:56:c9:71:0c:23:
         2d:d6:22:92:19:61:a3:db:56:c4:37:8a:1e:60:2b:a4:81:d6:
         8d:c0:27:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:08 2024 by rpki-client on console-ams.rpki-client.org