Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FuMfPZXTPw6Zko763ENk1o7nXN7JVfFDvoyt5bJzeb4A/0/323830343a376130633a3a2f33322d3430203d3e20323731333434.roa
File:                     323830343a376130633a3a2f33322d3430203d3e20323731333434.roa (raw, json)
Hash identifier:          ojlSqDuRXg3fQvMjFAG55uALvb7YeQKNYC6aSRiplho=
Subject key identifier:   8A:6D:CF:4C:C1:39:CE:D9:C7:88:F7:53:61:86:C0:B8:97:2C:3D:DE
Certificate issuer:       /CN=A9A8D79014E18BC10EA717A496F0FCDA7EEA607C
Certificate serial:       3A07FA3D721709007BE340A17480B82C403278DA
Authority key identifier: A9:A8:D7:90:14:E1:8B:C1:0E:A7:17:A4:96:F0:FC:DA:7E:EA:60:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9A8D79014E18BC10EA717A496F0FCDA7EEA607C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FuMfPZXTPw6Zko763ENk1o7nXN7JVfFDvoyt5bJzeb4A/0/323830343a376130633a3a2f33322d3430203d3e20323731333434.roa
Signing time:             Fri 22 Sep 2023 18:15:40 +0000
ROA not before:           Fri 22 Sep 2023 18:10:40 +0000
ROA not after:            Fri 20 Sep 2024 18:15:40 +0000
asID:                     271344
IP address blocks:        2804:7a0c::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:07:fa:3d:72:17:09:00:7b:e3:40:a1:74:80:b8:2c:40:32:78:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9A8D79014E18BC10EA717A496F0FCDA7EEA607C
        Validity
            Not Before: Sep 22 18:10:40 2023 GMT
            Not After : Sep 20 18:15:40 2024 GMT
        Subject: CN=8A6DCF4CC139CED9C788F7536186C0B8972C3DDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3e:14:78:f2:e2:f3:ec:db:dd:3d:d0:5c:c7:
                    74:af:5f:52:4f:53:9d:b2:4e:02:27:0a:f7:f3:e3:
                    f8:2a:58:11:f9:9c:45:d9:d1:bd:57:3a:1b:c2:22:
                    e8:2f:1b:b1:77:da:23:ce:b9:48:ee:d5:83:c1:72:
                    01:6d:37:0a:f1:2a:f2:71:70:cd:88:47:36:20:3f:
                    78:bb:2b:55:ae:73:2f:51:7f:5e:03:95:02:2c:b8:
                    63:2b:aa:f0:cd:b6:6b:bf:33:f4:94:94:72:32:f8:
                    c7:d7:fa:7e:c8:90:bb:26:f1:c9:12:9f:4a:91:5c:
                    25:92:da:8b:6d:f5:e2:2f:41:1a:69:7a:4b:54:01:
                    4f:f9:4b:23:84:2e:cd:37:85:70:3a:e4:b9:7f:dc:
                    98:c5:65:33:bb:7b:3e:8c:72:44:a3:64:53:86:10:
                    78:c6:14:f6:71:d7:47:b8:52:d8:5e:98:4e:3e:47:
                    27:99:a6:ef:e1:48:0e:0d:7e:40:3b:be:39:0b:0d:
                    ef:12:44:07:0c:51:83:93:18:70:33:b1:29:2b:90:
                    ed:78:ff:73:b1:98:e2:05:79:40:41:90:6b:69:23:
                    94:86:e7:78:59:90:e1:e8:58:df:2b:ca:77:2b:ee:
                    da:4c:f6:08:bd:ff:7f:3a:81:5f:6c:29:7c:42:1e:
                    0e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6D:CF:4C:C1:39:CE:D9:C7:88:F7:53:61:86:C0:B8:97:2C:3D:DE
            X509v3 Authority Key Identifier:
                keyid:A9:A8:D7:90:14:E1:8B:C1:0E:A7:17:A4:96:F0:FC:DA:7E:EA:60:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FuMfPZXTPw6Zko763ENk1o7nXN7JVfFDvoyt5bJzeb4A/0/A9A8D79014E18BC10EA717A496F0FCDA7EEA607C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9A8D79014E18BC10EA717A496F0FCDA7EEA607C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FuMfPZXTPw6Zko763ENk1o7nXN7JVfFDvoyt5bJzeb4A/0/323830343a376130633a3a2f33322d3430203d3e20323731333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:5e:4f:c9:6d:74:26:66:20:c9:dc:d3:29:a9:13:5d:a5:3f:
         c3:35:05:e1:50:14:d8:84:3f:98:c5:54:f9:ae:99:1f:57:f5:
         33:c1:d2:76:f0:c4:1c:e4:69:42:01:c4:28:b4:84:58:07:6e:
         85:84:82:0e:7d:b3:b5:e2:41:e0:c2:eb:25:85:51:f2:d5:e1:
         f0:0d:88:99:ff:bc:d9:cb:3e:5b:dc:ce:de:b1:8e:e6:b4:78:
         a5:ee:00:46:d9:6b:6d:95:45:3a:8a:d7:5b:3b:49:fd:59:8b:
         9f:dd:68:1a:85:8e:60:62:a4:e8:42:e6:99:fd:51:ab:6f:94:
         aa:2a:17:b1:b0:c4:3f:59:d0:d4:9c:51:96:65:f4:38:d0:b4:
         ef:8c:47:d8:36:dd:a8:07:07:fa:60:69:1c:e3:f1:19:e0:da:
         04:ff:9b:77:7b:6e:63:5b:22:29:63:c3:19:ea:ac:51:b3:02:
         0e:d0:d0:a2:c8:f8:e0:71:90:c7:27:66:2d:c1:a6:3a:8c:48:
         4d:61:74:d5:1d:7b:5c:13:1a:b0:5e:64:52:e4:f5:9f:e5:67:
         f6:cf:2a:e4:a9:91:31:b7:0e:e2:83:4e:e4:24:6c:25:72:e9:
         22:0b:07:e3:62:b1:a1:26:4d:f9:f8:86:a9:73:f5:16:2c:68:
         10:c1:6f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:08 2024 by rpki-client on console-ams.rpki-client.org