Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/323830343a316163383a383030303a3a2f33342d3334203d3e203631383835.roa
File:                     323830343a316163383a383030303a3a2f33342d3334203d3e203631383835.roa (raw, json)
Hash identifier:          fufOI6ZSjjFpvx0UPNJMVIwdedXw2pVJXgnNnsIoqVc=
Subject key identifier:   00:46:0C:E2:D8:17:8C:80:A4:B7:A4:59:C3:8A:73:FD:7A:DC:67:6A
Certificate issuer:       /CN=FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F
Certificate serial:       43C86E6F9E54A4D6A8971F57013056D8F9B73981
Authority key identifier: FC:68:8B:7E:5E:77:F5:FD:A8:7F:9C:E9:52:7A:AE:6E:C6:C5:B5:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/323830343a316163383a383030303a3a2f33342d3334203d3e203631383835.roa
Signing time:             Thu 04 Apr 2024 15:17:11 +0000
ROA not before:           Thu 04 Apr 2024 15:12:11 +0000
ROA not after:            Thu 03 Apr 2025 15:17:11 +0000
asID:                     61885
IP address blocks:        2804:1ac8:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c8:6e:6f:9e:54:a4:d6:a8:97:1f:57:01:30:56:d8:f9:b7:39:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F
        Validity
            Not Before: Apr  4 15:12:11 2024 GMT
            Not After : Apr  3 15:17:11 2025 GMT
        Subject: CN=00460CE2D8178C80A4B7A459C38A73FD7ADC676A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:83:a2:12:7f:56:c3:43:af:13:68:bc:87:06:
                    1f:6e:45:63:0c:30:f3:9c:17:07:db:76:b7:89:29:
                    c9:a7:02:6d:ca:67:fd:67:1f:5b:1d:ad:68:d1:ed:
                    1e:da:50:74:c7:c2:5a:fd:50:c3:99:11:7e:bf:b3:
                    2d:0b:df:b3:c9:5c:77:20:2a:79:74:08:c7:88:61:
                    58:6b:73:cc:85:04:30:8f:58:75:07:86:aa:9d:f2:
                    09:16:44:ca:13:a3:52:16:40:29:44:3e:21:8b:44:
                    79:fc:42:3d:89:48:a7:b4:58:17:79:7b:22:3a:c1:
                    65:64:04:08:80:dd:f0:ba:1a:99:bb:1b:c0:18:e1:
                    e0:52:7c:90:dc:7d:88:2c:68:f3:c4:f4:b4:f5:e1:
                    18:91:9c:a4:d8:7d:91:9d:04:54:06:18:60:9a:0a:
                    d0:d0:21:ca:fc:bf:73:2a:d4:1c:21:3b:e9:bd:83:
                    d0:a8:0c:2e:7d:30:34:52:d1:9e:3e:87:3d:57:48:
                    6f:ee:34:17:79:f0:58:4e:63:01:43:16:62:87:84:
                    90:bf:af:6c:da:2f:8c:8e:e1:0f:1b:f4:fb:61:50:
                    22:50:85:88:0f:12:bb:29:bd:45:42:a2:be:68:68:
                    df:66:af:97:a4:e1:64:9f:1b:af:a0:4a:22:a5:c2:
                    25:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:46:0C:E2:D8:17:8C:80:A4:B7:A4:59:C3:8A:73:FD:7A:DC:67:6A
            X509v3 Authority Key Identifier:
                keyid:FC:68:8B:7E:5E:77:F5:FD:A8:7F:9C:E9:52:7A:AE:6E:C6:C5:B5:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/323830343a316163383a383030303a3a2f33342d3334203d3e203631383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ac8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a9:83:4a:e4:05:52:dd:62:d4:7a:9b:3e:e7:1f:e2:8a:64:a1:
         92:09:45:35:b0:e7:54:8b:4e:a2:19:b0:68:ae:83:ce:47:ea:
         25:4a:e2:ba:d2:c6:d6:70:1f:73:28:d0:19:22:5c:b4:e5:3c:
         24:3b:fc:3b:6b:59:62:57:c9:f4:0e:b8:03:12:ac:c6:ab:9a:
         92:65:9f:54:5f:7a:cd:46:cf:09:d2:1d:39:ac:ce:e8:48:77:
         73:b7:9e:1a:96:b4:b3:94:b0:fc:5c:6c:26:7c:20:10:91:9b:
         9e:c0:86:73:39:06:76:74:44:9b:fa:aa:fe:c5:af:2b:52:6c:
         78:27:14:4e:7f:cc:6c:8e:62:bc:58:a6:28:93:08:db:17:74:
         5b:27:25:21:fd:57:8e:61:6e:a2:c9:fb:8b:f9:5e:35:86:84:
         bf:0b:5a:d8:43:54:c8:dd:3c:87:61:77:e7:bd:f8:6d:2e:cf:
         fa:50:af:6c:41:fd:4b:65:90:01:07:1d:27:98:0c:29:92:dc:
         5a:23:e4:81:cc:e8:80:ce:45:df:40:c6:50:f5:4c:89:ab:f4:
         97:f9:b3:8c:82:b1:59:1c:d1:00:ba:ec:e2:9d:86:13:b2:66:
         6f:c2:80:78:a0:31:ea:c3:a8:b1:b9:a5:1a:eb:e8:f0:8f:f3:
         72:66:40:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org