Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a373131363a3a2f34382d3438203d3e20323638343731.roa
File:                     323830343a353162343a373131363a3a2f34382d3438203d3e20323638343731.roa (raw, json)
Hash identifier:          PTZUa9hhNE9XAXWEvIcQBOxTRnGPyoRVakM5F4fOrzE=
Subject key identifier:   82:10:46:3B:C7:32:FC:01:09:54:EE:CD:D7:C8:AF:A8:80:02:91:A7
Certificate issuer:       /CN=7F000801D88E7BA8E23FCDDC396CC2FE198D022F
Certificate serial:       5CF034FAC1450CDE67675B6CF0566721BB072E40
Authority key identifier: 7F:00:08:01:D8:8E:7B:A8:E2:3F:CD:DC:39:6C:C2:FE:19:8D:02:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F000801D88E7BA8E23FCDDC396CC2FE198D022F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a373131363a3a2f34382d3438203d3e20323638343731.roa
Signing time:             Sun 05 May 2024 14:23:10 +0000
ROA not before:           Sun 05 May 2024 14:18:10 +0000
ROA not after:            Sun 04 May 2025 14:23:10 +0000
asID:                     268471
IP address blocks:        2804:51b4:7116::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f0:34:fa:c1:45:0c:de:67:67:5b:6c:f0:56:67:21:bb:07:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F000801D88E7BA8E23FCDDC396CC2FE198D022F
        Validity
            Not Before: May  5 14:18:10 2024 GMT
            Not After : May  4 14:23:10 2025 GMT
        Subject: CN=8210463BC732FC010954EECDD7C8AFA8800291A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:08:b1:17:84:5e:71:0b:8f:f3:b6:09:c7:ed:
                    b2:e8:ef:c0:3c:30:4b:67:bd:ae:6e:27:91:3e:2a:
                    b8:c0:4c:73:32:39:30:55:be:43:e9:47:f0:d0:ba:
                    05:69:71:6e:46:15:d4:cb:3c:e0:87:72:e8:4d:57:
                    4f:e8:17:61:48:48:24:81:e5:64:d8:a5:17:c2:40:
                    56:49:24:79:ff:15:a0:d3:a5:1f:61:f5:be:bc:d4:
                    fe:77:05:79:96:28:84:db:3f:96:1c:93:c2:73:62:
                    1b:12:64:6b:ac:1c:de:6d:cf:ef:45:bc:38:92:40:
                    64:d2:36:a3:2e:41:e3:99:09:59:35:08:57:ec:3e:
                    47:42:28:70:d1:76:ab:b6:17:b3:75:5f:95:e2:d1:
                    bc:4a:8e:7f:00:3f:a8:7b:87:4b:95:68:3e:a6:78:
                    db:18:b5:65:97:87:73:e6:61:86:c7:b6:1b:c8:fd:
                    84:24:30:2e:d7:4b:8f:80:f6:9d:3b:7e:51:dc:1a:
                    c7:d3:e9:60:61:a6:ee:96:92:c2:34:8a:18:47:c7:
                    27:b1:1a:aa:f0:2d:c9:c9:38:f1:c6:10:fc:90:f3:
                    1c:ae:63:fc:b9:9b:6d:c7:60:df:01:23:0e:08:e4:
                    2f:01:1e:85:48:1e:31:dc:c8:22:a5:5c:24:88:7d:
                    7b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:10:46:3B:C7:32:FC:01:09:54:EE:CD:D7:C8:AF:A8:80:02:91:A7
            X509v3 Authority Key Identifier:
                keyid:7F:00:08:01:D8:8E:7B:A8:E2:3F:CD:DC:39:6C:C2:FE:19:8D:02:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/7F000801D88E7BA8E23FCDDC396CC2FE198D022F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F000801D88E7BA8E23FCDDC396CC2FE198D022F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a373131363a3a2f34382d3438203d3e20323638343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51b4:7116::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:12:fc:b1:89:4c:7b:e2:e9:88:6b:3e:5d:a2:ff:94:ac:b2:
         d2:c0:2e:56:77:82:df:3b:de:9f:65:bf:e5:be:0e:55:a9:52:
         69:d9:ee:e6:71:f2:81:bd:9f:bd:17:71:86:82:ab:2b:b9:d1:
         2b:9f:90:d5:e8:51:fb:53:55:96:00:15:ad:49:d1:37:b1:91:
         3f:61:59:36:06:d8:b5:ee:3c:f2:04:6d:64:f5:67:30:51:a1:
         0e:29:4e:40:d8:d6:29:e2:ba:e6:06:e2:da:9c:66:cc:e0:18:
         17:25:ab:05:70:7e:f2:b8:6e:78:ac:ea:b8:67:96:8e:98:d9:
         31:1f:78:e2:0f:65:a2:05:9d:09:7d:59:4b:46:d9:74:8f:be:
         4c:15:b6:53:02:98:a9:04:9d:c1:f5:59:23:be:84:eb:8e:11:
         dc:38:67:90:47:38:9d:42:0c:c1:1e:6e:f8:28:e7:63:bf:6b:
         5c:a1:8d:9f:28:68:d1:df:62:78:09:5f:39:78:b8:64:ab:8c:
         45:54:38:0b:80:9d:e2:1b:e6:7e:f6:c5:57:0c:cf:94:e8:d4:
         7f:a7:03:12:98:23:2a:e9:da:48:3d:fa:36:7f:8a:fe:86:07:
         67:fc:80:f3:d1:e4:33:0c:b9:cd:99:9d:f6:70:48:d3:18:93:
         84:aa:c4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org