Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/323830343a6430633a3a2f33322d3432203d3e203533313132.roa
File:                     323830343a6430633a3a2f33322d3432203d3e203533313132.roa (raw, json)
Hash identifier:          Zw2hWOaE89X8IWUdGcQca7oltWO7E3BR8Guwqar4hy8=
Subject key identifier:   9D:F7:11:FD:98:2C:EA:7E:94:78:2D:B6:91:BE:12:10:E8:52:1C:DE
Certificate issuer:       /CN=FB77F49574CBE0843961A23238230FA3417E4159
Certificate serial:       171E535C30670C3D6C7A7299406C421877119303
Authority key identifier: FB:77:F4:95:74:CB:E0:84:39:61:A2:32:38:23:0F:A3:41:7E:41:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB77F49574CBE0843961A23238230FA3417E4159.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/323830343a6430633a3a2f33322d3432203d3e203533313132.roa
Signing time:             Wed 14 Sep 2022 07:48:10 +0000
ROA not before:           Wed 14 Sep 2022 07:43:10 +0000
ROA not after:            Wed 13 Sep 2023 07:48:10 +0000
asID:                     53112
IP address blocks:        2804:d0c::/32 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:1e:53:5c:30:67:0c:3d:6c:7a:72:99:40:6c:42:18:77:11:93:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB77F49574CBE0843961A23238230FA3417E4159
        Validity
            Not Before: Sep 14 07:43:10 2022 GMT
            Not After : Sep 13 07:48:10 2023 GMT
        Subject: CN=9DF711FD982CEA7E94782DB691BE1210E8521CDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3c:76:02:ce:a1:8b:dc:8c:1e:29:59:14:f6:
                    9d:4d:a7:b3:fb:f1:bd:02:54:5d:d9:c8:b0:d8:ce:
                    59:c1:e5:2e:e8:14:38:36:ef:9c:04:ad:14:cc:fd:
                    ce:cc:e6:12:fe:c7:54:f3:7f:81:fa:3a:34:7f:bc:
                    a1:e9:b4:89:48:48:53:dd:3e:3c:df:a8:66:d3:bb:
                    ac:d8:a9:d5:12:36:df:ec:81:e0:cc:83:34:9d:75:
                    69:0c:d3:1e:c9:6f:49:6f:fa:00:b6:f9:d0:0e:fe:
                    37:ff:c1:e0:f3:42:57:25:52:1f:d1:d6:7c:58:24:
                    d3:86:7c:ac:3c:e7:09:72:c6:f2:f8:f1:85:62:0c:
                    a7:a8:b4:45:d8:48:1f:34:46:9c:b0:a8:be:d2:d3:
                    13:ec:f9:d7:2d:1f:8f:13:7d:64:16:13:ea:69:5b:
                    4f:da:a1:79:a6:b0:f3:e2:4a:f7:db:73:eb:86:6f:
                    fb:28:f5:36:33:c1:a1:ac:3e:0c:22:01:12:f6:71:
                    af:85:1a:ea:00:0b:13:13:d3:21:cf:21:e7:8b:f6:
                    db:8d:a1:69:2b:56:84:d5:45:57:72:02:b6:37:ce:
                    23:16:b9:fa:7a:56:2a:6a:16:de:2c:15:d8:e5:4c:
                    ed:38:d1:8b:ec:cd:3d:a5:66:54:99:9a:dd:49:ea:
                    59:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F7:11:FD:98:2C:EA:7E:94:78:2D:B6:91:BE:12:10:E8:52:1C:DE
            X509v3 Authority Key Identifier:
                keyid:FB:77:F4:95:74:CB:E0:84:39:61:A2:32:38:23:0F:A3:41:7E:41:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/FB77F49574CBE0843961A23238230FA3417E4159.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB77F49574CBE0843961A23238230FA3417E4159.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/323830343a6430633a3a2f33322d3432203d3e203533313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:3a:d4:8f:73:f3:65:52:be:fb:67:a2:eb:ab:b3:ff:b3:61:
         18:3e:2c:a3:46:d6:58:6f:d2:bb:c1:dd:c2:f7:16:5d:7c:00:
         f6:f3:b2:77:99:44:6d:c0:5c:d4:23:29:14:d0:3d:13:1c:e6:
         96:60:3d:e0:15:83:c1:35:2b:df:0c:04:91:76:c5:20:03:c9:
         ed:62:f2:26:4e:ed:42:7c:7f:4c:a4:a8:70:62:64:bb:c1:71:
         b1:77:d9:a4:d4:a9:87:22:a4:e9:35:97:07:c7:2c:b0:b8:7c:
         4f:73:bb:78:52:57:91:6f:60:65:df:56:83:f0:9f:fb:c2:9f:
         1c:42:39:1b:ad:65:fe:7a:09:92:64:4c:fb:ad:be:3e:0b:d4:
         e9:7c:32:29:16:c1:f4:cd:4c:1c:e1:7d:7f:72:7e:e9:09:38:
         24:4d:a3:98:e7:c0:1f:b8:c5:40:a6:c8:8c:51:c1:85:af:94:
         ff:5c:43:c0:15:0d:a3:ea:74:b0:93:a9:5f:50:25:4d:95:0d:
         48:5a:2a:01:46:42:9e:4d:6e:14:0e:9b:ec:f7:be:00:8f:c4:
         17:ff:74:2e:91:9d:77:d9:6f:c5:47:ee:4e:e9:52:4c:53:81:
         aa:98:83:72:13:32:2d:e4:d9:ce:bd:96:59:7c:63:60:17:e2:
         49:19:5d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org