Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a373133333a3a2f34382d3438203d3e20323638343731.roa
File:                     323830343a353162343a373133333a3a2f34382d3438203d3e20323638343731.roa (raw, json)
Hash identifier:          dTCBVSOP75b91/PJ6K1Wp4nNUTTwnZanYv7MTROOl7w=
Subject key identifier:   A9:7C:9D:00:DE:75:E8:57:88:10:FE:21:8B:29:09:5E:D2:C6:A3:3F
Certificate issuer:       /CN=7F000801D88E7BA8E23FCDDC396CC2FE198D022F
Certificate serial:       362A886B19610AEFBB7F6E30EDA03457463795FE
Authority key identifier: 7F:00:08:01:D8:8E:7B:A8:E2:3F:CD:DC:39:6C:C2:FE:19:8D:02:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F000801D88E7BA8E23FCDDC396CC2FE198D022F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a373133333a3a2f34382d3438203d3e20323638343731.roa
Signing time:             Sun 05 May 2024 14:23:25 +0000
ROA not before:           Sun 05 May 2024 14:18:25 +0000
ROA not after:            Sun 04 May 2025 14:23:25 +0000
asID:                     268471
IP address blocks:        2804:51b4:7133::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:2a:88:6b:19:61:0a:ef:bb:7f:6e:30:ed:a0:34:57:46:37:95:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F000801D88E7BA8E23FCDDC396CC2FE198D022F
        Validity
            Not Before: May  5 14:18:25 2024 GMT
            Not After : May  4 14:23:25 2025 GMT
        Subject: CN=A97C9D00DE75E8578810FE218B29095ED2C6A33F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:39:bc:c8:ed:fa:0e:c2:c5:3e:ff:34:58:c7:
                    6e:ff:ad:ec:34:1c:95:d4:86:b2:06:92:3d:1e:d0:
                    ff:b2:d0:14:5e:81:a6:6a:d8:86:54:46:63:4e:04:
                    40:7b:94:ef:93:4e:73:3c:9c:4e:e8:40:80:59:be:
                    5a:85:e9:1f:5c:01:de:ca:a9:52:b9:7a:c4:23:39:
                    70:4f:0e:c4:59:47:8b:32:d9:f6:0a:a9:79:16:d7:
                    c4:f6:66:fd:63:af:21:e1:87:be:ba:fb:d1:ba:38:
                    8f:39:38:c2:f0:fe:c9:f8:40:f2:a3:49:d7:b9:b9:
                    9b:a9:9e:77:db:65:aa:bb:f7:ef:e9:3d:1e:3e:74:
                    7d:7a:1f:d2:a6:ba:3c:ef:82:8d:e6:e0:c6:f3:cb:
                    f7:3f:b7:2f:36:2d:f8:69:67:31:b3:d0:4e:7f:bf:
                    e5:33:d6:32:e6:80:9c:0e:f0:81:e7:cf:9a:32:5e:
                    5e:79:57:42:f4:4a:ce:e8:13:dd:aa:67:82:c6:05:
                    c1:fd:40:9b:22:31:3b:49:b0:f3:9d:41:c4:74:d4:
                    80:e5:2f:a1:d7:e5:11:84:e6:59:a7:bb:b7:a3:c6:
                    fb:6d:57:fd:1b:eb:cc:47:68:00:08:0c:01:7a:0e:
                    c9:ef:bd:76:8d:8c:64:64:52:03:a6:64:f0:b8:0e:
                    20:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7C:9D:00:DE:75:E8:57:88:10:FE:21:8B:29:09:5E:D2:C6:A3:3F
            X509v3 Authority Key Identifier:
                keyid:7F:00:08:01:D8:8E:7B:A8:E2:3F:CD:DC:39:6C:C2:FE:19:8D:02:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/7F000801D88E7BA8E23FCDDC396CC2FE198D022F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F000801D88E7BA8E23FCDDC396CC2FE198D022F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a373133333a3a2f34382d3438203d3e20323638343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51b4:7133::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:a6:b0:f7:cc:32:71:da:eb:3d:b8:5d:f5:74:43:6a:00:e8:
         6b:d0:5e:74:16:a6:ac:73:4a:d2:d9:a8:2e:46:03:f4:f8:0b:
         c3:c3:62:b6:ab:c0:36:00:e0:69:2e:70:96:db:cc:4d:f9:cb:
         1b:33:29:0a:b5:3b:63:9d:b7:b6:d9:ae:90:4d:b1:3b:97:c4:
         fe:98:2a:0f:49:29:17:5a:51:ff:4e:5e:f1:4a:f9:b5:dc:c4:
         99:4d:ac:0d:ce:d2:3e:5b:83:2c:18:dd:53:ae:37:25:23:91:
         3f:82:26:f2:6c:00:7f:85:03:23:ee:51:fd:09:08:16:a2:8c:
         72:08:b7:2b:a9:47:97:0c:e2:47:eb:57:69:d9:f0:6f:a3:26:
         58:1e:40:13:75:0a:73:25:cb:18:21:8e:de:da:88:1f:f6:1e:
         ce:c2:09:83:38:70:6b:8f:c9:2f:8f:74:bb:e2:22:ba:ba:61:
         e8:d6:c5:b2:5f:a4:7b:bb:3d:4e:e8:1a:be:3a:d2:07:29:6d:
         1a:9e:2e:7d:cc:fa:5b:17:18:93:4d:f2:a5:51:0e:b3:c6:e0:
         65:f0:08:6c:92:2e:fc:84:94:10:14:bc:0f:08:ba:aa:b9:0b:
         27:98:f5:77:ef:06:39:c1:2d:dd:06:c8:e9:ed:c8:1e:fa:68:
         22:6a:1e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org