Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/323830343a316163383a3a2f33342d3334203d3e203631383835.roa
File:                     323830343a316163383a3a2f33342d3334203d3e203631383835.roa (raw, json)
Hash identifier:          evrLbnV9SkikgIZEGKAu4sdG+psIqObA90A3+fUkKAU=
Subject key identifier:   E9:FD:27:CE:CC:EF:84:57:93:96:EB:C2:17:6C:AA:E6:D8:51:5C:A9
Certificate issuer:       /CN=FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F
Certificate serial:       52B17A8C43EEFE998E03B0A9165491507F89D4CC
Authority key identifier: FC:68:8B:7E:5E:77:F5:FD:A8:7F:9C:E9:52:7A:AE:6E:C6:C5:B5:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/323830343a316163383a3a2f33342d3334203d3e203631383835.roa
Signing time:             Thu 04 Apr 2024 15:17:12 +0000
ROA not before:           Thu 04 Apr 2024 15:12:12 +0000
ROA not after:            Thu 03 Apr 2025 15:17:12 +0000
asID:                     61885
IP address blocks:        2804:1ac8::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b1:7a:8c:43:ee:fe:99:8e:03:b0:a9:16:54:91:50:7f:89:d4:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F
        Validity
            Not Before: Apr  4 15:12:12 2024 GMT
            Not After : Apr  3 15:17:12 2025 GMT
        Subject: CN=E9FD27CECCEF84579396EBC2176CAAE6D8515CA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:22:36:c8:d3:5f:ce:46:51:1b:b6:59:80:e5:
                    37:c9:73:b6:37:5e:78:36:a0:05:a9:a9:76:d1:a2:
                    88:7e:9b:35:ff:3e:42:e5:f5:36:1b:26:1a:6d:67:
                    2c:22:c0:0e:a2:1a:70:ce:2a:fe:1f:ba:31:3f:83:
                    e1:49:ff:2f:09:1c:63:28:60:07:a2:95:36:57:69:
                    fe:0a:8f:5a:4f:7e:33:c8:ca:b5:27:57:35:52:f7:
                    ef:24:29:e9:52:68:64:c0:f2:93:05:9a:f9:46:25:
                    1d:15:ae:82:58:bf:6a:c0:b6:b3:46:8b:88:12:3a:
                    dc:ff:21:6d:ee:52:40:21:15:ea:f6:54:98:8e:48:
                    dc:48:ff:63:23:a5:c5:a4:82:f2:4a:e8:b8:d1:bb:
                    80:8d:c9:37:a6:04:08:07:df:a9:09:60:67:9b:62:
                    65:7e:cd:b0:a3:8d:ba:e6:ff:e1:e5:93:73:59:75:
                    1c:3e:d0:0e:a9:7b:44:37:a3:40:8e:08:f3:ff:8c:
                    57:1d:27:01:70:06:62:17:82:d6:fc:78:32:3b:72:
                    ff:8d:52:bf:dc:cf:f8:d2:c0:98:01:80:82:75:b2:
                    7e:4d:73:01:34:e0:8a:b1:78:89:ca:c2:97:73:ed:
                    68:1d:17:79:82:97:65:65:f1:4e:8b:56:d5:f3:eb:
                    ce:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FD:27:CE:CC:EF:84:57:93:96:EB:C2:17:6C:AA:E6:D8:51:5C:A9
            X509v3 Authority Key Identifier:
                keyid:FC:68:8B:7E:5E:77:F5:FD:A8:7F:9C:E9:52:7A:AE:6E:C6:C5:B5:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/323830343a316163383a3a2f33342d3334203d3e203631383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ac8::/34

    Signature Algorithm: sha256WithRSAEncryption
         1d:c1:a6:19:de:5f:ed:64:af:5b:fa:5d:26:1c:e5:d0:99:6c:
         75:64:4a:7e:a8:e7:bf:32:8f:fd:a2:bb:72:c4:2e:8e:11:b8:
         28:fd:bb:eb:f3:1e:1f:b1:3e:96:82:00:07:79:b6:80:bf:e8:
         3d:15:97:be:26:aa:51:4f:0d:87:ee:90:c4:f0:69:b5:3b:8c:
         ad:a4:26:80:83:2f:83:b4:e0:51:be:bf:97:82:02:8a:b2:88:
         ff:e5:43:1e:22:b2:80:2f:75:3d:03:b6:d2:3c:fd:3b:85:d0:
         01:9e:18:01:ec:40:fc:81:0a:dd:57:a5:ea:a2:8f:64:81:73:
         2a:ab:0a:1b:e7:9d:8a:b5:32:80:5d:1a:96:97:3f:a3:a4:5e:
         a2:7e:e1:f5:4e:cd:15:1f:19:99:43:52:19:9a:c2:24:3f:15:
         a1:ff:8b:eb:51:44:d5:ab:38:a4:81:75:7c:e3:75:63:1c:9f:
         14:5b:4f:60:72:73:ea:e3:c8:bc:8b:9f:53:ec:c4:c8:da:0e:
         36:7b:b3:70:2b:20:ae:d2:b1:0b:84:a1:17:d2:7c:17:4d:85:
         2f:4d:6e:3e:c9:96:45:9b:83:8c:48:e9:c2:b6:02:dd:5b:ea:
         0e:5c:eb:f0:02:b1:b6:f8:2e:de:3e:27:32:a1:d7:10:26:a5:
         7c:d1:72:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org