Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a3a2f33322d3334203d3e20323638343731.roa
File:                     323830343a353162343a3a2f33322d3334203d3e20323638343731.roa (raw, json)
Hash identifier:          KP8Y6HY1SwA2Y4iEFAFWrRHNJztAhZHjf/XsM+Wd9X8=
Subject key identifier:   97:C7:26:81:46:31:00:82:E2:D9:F4:F6:1A:57:CC:22:25:EC:A4:E7
Certificate issuer:       /CN=3AA25D1A66959674425740B0D69389FFFDDE91CB
Certificate serial:       14FD5C8836AB184B33081DAA1FB2DB87FE7A5688
Authority key identifier: 3A:A2:5D:1A:66:95:96:74:42:57:40:B0:D6:93:89:FF:FD:DE:91:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a3a2f33322d3334203d3e20323638343731.roa
Signing time:             Tue 22 Nov 2022 21:00:00 +0000
ROA not before:           Tue 22 Nov 2022 20:55:00 +0000
ROA not after:            Tue 21 Nov 2023 21:00:00 +0000
asID:                     268471
IP address blocks:        2804:51b4::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:fd:5c:88:36:ab:18:4b:33:08:1d:aa:1f:b2:db:87:fe:7a:56:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AA25D1A66959674425740B0D69389FFFDDE91CB
        Validity
            Not Before: Nov 22 20:55:00 2022 GMT
            Not After : Nov 21 21:00:00 2023 GMT
        Subject: CN=97C7268146310082E2D9F4F61A57CC2225ECA4E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2d:ee:e5:b3:4a:9f:c7:c5:7a:0d:7c:5b:0b:
                    06:d4:30:e7:41:90:e2:e0:b7:0a:f9:41:7a:9e:e3:
                    5e:a8:72:56:ea:29:b6:d7:16:60:df:36:d1:1a:04:
                    7b:9c:a3:2a:c0:ff:e2:15:fb:05:ee:2e:5a:f9:6f:
                    d0:0f:27:b7:e4:98:e3:d9:a6:1d:e1:bb:f7:52:b6:
                    6b:fc:e0:07:d7:bb:9b:56:8f:d5:c8:7d:c8:94:92:
                    92:e1:66:8c:3a:1e:ae:d4:d3:55:b0:78:a9:e1:64:
                    e7:6f:09:80:8d:e9:91:2a:e0:69:f0:bc:e1:39:f7:
                    1a:74:21:f1:f0:7c:3e:37:6f:38:a6:c4:bf:96:3a:
                    91:f7:e5:de:83:a7:c8:96:ac:1e:f3:f6:de:9d:ca:
                    51:b3:39:e0:8e:1d:50:c2:7f:5b:c9:0b:74:4c:39:
                    37:cc:92:b9:a3:f5:b9:82:95:5a:13:7b:89:07:30:
                    bb:57:8c:a7:97:b2:94:35:ec:63:00:32:74:47:5c:
                    7c:a0:20:99:fe:1f:50:bb:33:93:34:e0:91:49:16:
                    d0:95:ed:73:a3:52:6c:a7:68:82:c8:52:7e:62:cb:
                    95:10:52:13:73:3a:60:99:24:81:59:9c:b3:f6:0f:
                    8a:72:9c:cc:f5:1e:d3:ba:3a:cc:5b:fd:a7:36:e2:
                    ee:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C7:26:81:46:31:00:82:E2:D9:F4:F6:1A:57:CC:22:25:EC:A4:E7
            X509v3 Authority Key Identifier:
                keyid:3A:A2:5D:1A:66:95:96:74:42:57:40:B0:D6:93:89:FF:FD:DE:91:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a3a2f33322d3334203d3e20323638343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:67:e4:1a:39:21:0f:21:8c:60:dd:65:cf:95:6d:e1:dd:be:
         1c:c0:36:4c:27:b6:53:3d:22:35:cc:55:55:ed:b0:3f:c2:8f:
         a0:88:df:3f:89:96:e7:57:62:e6:3a:69:21:40:04:18:94:30:
         25:f9:c3:32:fc:c2:e5:a6:37:ec:be:46:4c:55:87:16:5e:9a:
         1b:0c:59:5e:a3:d0:1c:8f:33:dc:3e:69:c3:86:86:98:60:1d:
         56:bd:f3:4c:ec:73:e3:06:fb:7d:b3:3c:74:e4:81:48:e6:59:
         e8:6c:ee:28:94:7c:5e:d6:5a:97:85:62:9a:d1:d1:80:2d:5d:
         f7:67:9e:6a:66:59:e2:50:59:fb:b2:66:e1:b2:d7:11:a5:59:
         4f:8c:f6:8b:0c:d3:9b:5d:d5:eb:69:c1:91:d0:b5:28:8b:b0:
         7c:e9:16:0d:08:32:41:38:38:60:60:a0:67:82:72:62:ec:e2:
         fe:8b:de:aa:32:e0:ba:d6:61:b3:a9:22:8b:27:1c:39:06:8b:
         68:e7:a4:02:88:f0:1f:5c:d3:f3:f1:a9:84:98:cc:ee:5f:c7:
         c4:b5:0b:f9:0d:13:94:f4:c1:9c:2c:bb:6d:53:26:87:d6:cf:
         49:bd:c9:e8:00:79:f6:c4:3a:1f:7b:12:0b:61:1f:a2:7b:0d:
         28:44:fa:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:08 2024 by rpki-client on console-ams.rpki-client.org