Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a363931363a3a2f34382d3438203d3e20323638343731.roa
File:                     323830343a353162343a363931363a3a2f34382d3438203d3e20323638343731.roa (raw, json)
Hash identifier:          jQ33dyJI+iKdgKmHXXI4rAgyrPXZx+D3yHU7iHVM6DM=
Subject key identifier:   5C:6A:6D:0C:40:F8:5E:45:4D:77:CE:D2:A6:0B:14:D7:D6:2B:61:86
Certificate issuer:       /CN=3AA25D1A66959674425740B0D69389FFFDDE91CB
Certificate serial:       66BC373E6B99745DE43D76FB8F0746D2EDD96F89
Authority key identifier: 3A:A2:5D:1A:66:95:96:74:42:57:40:B0:D6:93:89:FF:FD:DE:91:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a363931363a3a2f34382d3438203d3e20323638343731.roa
Signing time:             Wed 08 Mar 2023 13:37:28 +0000
ROA not before:           Wed 08 Mar 2023 13:32:28 +0000
ROA not after:            Wed 06 Mar 2024 13:37:28 +0000
asID:                     268471
IP address blocks:        2804:51b4:6916::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:bc:37:3e:6b:99:74:5d:e4:3d:76:fb:8f:07:46:d2:ed:d9:6f:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AA25D1A66959674425740B0D69389FFFDDE91CB
        Validity
            Not Before: Mar  8 13:32:28 2023 GMT
            Not After : Mar  6 13:37:28 2024 GMT
        Subject: CN=5C6A6D0C40F85E454D77CED2A60B14D7D62B6186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bc:34:5b:d3:e3:48:0f:79:d5:42:07:db:47:
                    20:a5:1a:b6:4c:4f:72:df:93:df:27:0b:f1:08:3b:
                    34:58:38:85:c1:94:5f:ef:7c:de:dc:6c:fa:06:ac:
                    65:b7:4f:cc:d5:8c:36:0a:1b:4e:38:a0:d6:0e:5d:
                    bb:7d:83:13:7b:dd:6d:f2:43:f5:60:61:92:4c:4e:
                    4c:91:84:6d:56:53:2f:a8:3d:d2:ab:9b:50:dd:03:
                    a7:08:2e:c1:9a:8e:aa:2b:00:19:92:29:71:24:f9:
                    e5:ca:b1:aa:c1:06:1e:2c:eb:b9:1a:02:86:4d:db:
                    37:3a:1a:53:a0:dc:e5:78:92:e4:b3:5b:98:30:72:
                    f4:d6:ed:13:18:5e:ea:f8:d2:81:4b:60:f6:38:a2:
                    7a:f2:fc:e6:8b:a3:86:16:25:22:c7:2d:99:b6:74:
                    67:32:8a:33:db:8a:54:0c:d3:8b:d8:bb:d6:2e:7e:
                    4b:fe:84:fa:cb:ef:bb:c0:b2:b0:af:94:c8:dc:cb:
                    53:5e:79:86:31:6e:4a:77:f9:cd:65:85:5d:23:2d:
                    ba:9f:fd:51:dc:dc:10:18:35:5f:0e:01:1e:bb:0e:
                    cb:c1:72:b4:64:ae:1e:3b:d3:32:7e:34:6c:3d:3b:
                    fa:b5:94:cb:61:93:3f:32:2f:03:cf:72:a1:f0:d3:
                    66:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:6A:6D:0C:40:F8:5E:45:4D:77:CE:D2:A6:0B:14:D7:D6:2B:61:86
            X509v3 Authority Key Identifier:
                keyid:3A:A2:5D:1A:66:95:96:74:42:57:40:B0:D6:93:89:FF:FD:DE:91:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a363931363a3a2f34382d3438203d3e20323638343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51b4:6916::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:04:11:4b:84:0b:f8:a4:c6:3e:2e:b8:1a:aa:f4:bc:ff:61:
         d2:d2:63:21:f0:a4:80:08:07:c1:96:17:5e:ac:96:03:41:51:
         68:fd:06:f2:4c:b0:c0:b1:2b:62:80:45:0a:df:ed:5c:9e:40:
         0c:f0:7f:0e:92:f0:f6:4e:2d:4f:0d:60:dc:70:4b:6e:ac:50:
         62:a1:f9:2c:fa:88:a9:b6:57:a2:b4:1f:ec:bc:13:e0:d8:9a:
         e1:6e:8a:7a:7e:5a:80:c9:c8:ba:eb:37:d2:df:50:e1:77:ef:
         d4:4a:ba:5a:e8:94:e0:b9:90:6d:a4:4d:c9:d4:fc:44:9c:d8:
         d9:db:52:c7:f3:6d:11:2c:6c:c6:b5:ec:c1:c5:84:37:46:46:
         c5:8a:5c:d4:55:a6:4b:44:fd:47:7b:7e:ce:20:2d:41:77:d0:
         74:89:dd:10:b3:12:04:92:f5:25:55:de:1f:42:a3:25:a6:61:
         6c:a4:4b:63:c5:85:76:8d:3d:41:cd:cf:d8:0b:0e:f3:be:37:
         96:e2:f6:05:85:69:3c:b2:57:f4:16:e1:1e:fc:5d:e3:fb:02:
         b1:f0:00:cc:34:c4:9c:73:4a:fd:71:35:2f:51:06:5a:f6:1a:
         71:ce:88:a6:c4:f9:4d:41:34:64:dd:75:b5:1c:61:70:bf:c9:
         38:c5:2e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:08 2024 by rpki-client on console-ams.rpki-client.org