Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/323830343a3632633a3a2f33322d3332203d3e20323632353639.roa
File:                     323830343a3632633a3a2f33322d3332203d3e20323632353639.roa (raw, json)
Hash identifier:          Ibp1pN3KmOyMZnzuTNXUvQTyemRI3XzGaFUlgT8fZIw=
Subject key identifier:   FE:9F:F2:1B:DC:24:C6:9B:3E:4C:9B:35:64:70:CD:BF:DE:C0:43:CB
Certificate issuer:       /CN=659C0711C58D82CB928680EC1097A12AE8F8C66F
Certificate serial:       67C9A2C001D6BB1685F7A7E0C698B4E4624FC812
Authority key identifier: 65:9C:07:11:C5:8D:82:CB:92:86:80:EC:10:97:A1:2A:E8:F8:C6:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659C0711C58D82CB928680EC1097A12AE8F8C66F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/323830343a3632633a3a2f33322d3332203d3e20323632353639.roa
Signing time:             Tue 29 Oct 2024 19:49:00 +0000
ROA not before:           Tue 29 Oct 2024 19:44:00 +0000
ROA not after:            Tue 28 Oct 2025 19:49:00 +0000
asID:                     262569
IP address blocks:        2804:62c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:c9:a2:c0:01:d6:bb:16:85:f7:a7:e0:c6:98:b4:e4:62:4f:c8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659C0711C58D82CB928680EC1097A12AE8F8C66F
        Validity
            Not Before: Oct 29 19:44:00 2024 GMT
            Not After : Oct 28 19:49:00 2025 GMT
        Subject: CN=FE9FF21BDC24C69B3E4C9B356470CDBFDEC043CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dd:69:37:ec:cf:b6:d9:22:8a:18:c7:91:55:
                    4e:e3:1f:6f:6c:3b:ef:6e:43:b6:2a:e8:b3:98:54:
                    7b:3a:1a:bc:ec:61:a9:fc:33:70:69:6e:0a:86:45:
                    01:41:e3:74:96:56:6d:00:94:cd:d2:f3:5f:e6:54:
                    73:a7:9e:45:90:80:c1:8a:6e:95:a2:32:f8:23:74:
                    17:d7:ac:b9:86:22:53:6d:62:83:b3:c2:57:c5:2a:
                    c6:54:f3:50:92:76:6e:8e:9b:f6:c3:80:cb:67:44:
                    db:4a:89:77:a1:a4:ee:94:85:45:4f:f5:93:e0:97:
                    3d:f3:dd:ef:83:45:ac:44:e4:95:20:87:aa:7c:e4:
                    53:14:c8:8f:d2:ee:76:0f:91:aa:da:5f:5c:c4:e6:
                    d6:76:67:e0:ff:9a:23:9c:ef:ff:28:12:58:87:3a:
                    7f:c2:49:69:a8:eb:73:98:e2:99:a0:e3:77:96:4c:
                    cd:af:9a:94:20:28:d8:c3:89:c6:96:80:db:38:3a:
                    4a:d2:8b:c0:b8:a8:34:42:c9:0c:10:3e:d0:70:fe:
                    2c:b0:e7:12:43:d4:79:29:e7:3a:17:23:ce:12:bb:
                    77:c4:cc:8b:0d:e1:a5:9f:32:c0:00:69:61:34:ea:
                    52:ac:c9:55:c0:d3:83:66:0d:52:53:25:2c:b8:f1:
                    79:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9F:F2:1B:DC:24:C6:9B:3E:4C:9B:35:64:70:CD:BF:DE:C0:43:CB
            X509v3 Authority Key Identifier:
                keyid:65:9C:07:11:C5:8D:82:CB:92:86:80:EC:10:97:A1:2A:E8:F8:C6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/659C0711C58D82CB928680EC1097A12AE8F8C66F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659C0711C58D82CB928680EC1097A12AE8F8C66F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/323830343a3632633a3a2f33322d3332203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:62c::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:1e:f3:79:09:20:94:94:da:c8:0e:93:f2:9c:dc:f4:86:ba:
         30:96:14:e3:a3:82:58:ca:09:28:73:d6:fd:6e:38:0e:51:f9:
         d2:ee:41:87:32:2e:17:ca:11:1b:73:2b:32:b4:c2:28:2a:56:
         f0:a1:ff:ba:3b:d4:38:b4:0c:f3:c4:53:f1:57:b3:57:95:34:
         a3:2c:62:d6:cf:d0:8f:41:60:0c:d4:51:a1:7f:ac:d0:9a:f7:
         2d:47:8f:aa:50:4c:9c:61:e0:ae:69:46:c1:ba:b4:aa:41:aa:
         43:d1:4d:c5:8d:f9:b8:ce:d5:91:eb:4f:d4:cc:76:15:bc:f4:
         35:ad:fe:ab:de:81:c9:89:a0:ad:e8:a9:14:a4:b5:22:f6:57:
         1f:14:89:fd:60:16:89:55:fa:1e:05:eb:78:6e:64:99:f9:aa:
         1c:ad:8c:ea:dd:e6:0a:c4:9d:91:b1:b5:5a:74:f9:7c:18:5c:
         50:43:86:07:35:b9:28:82:c1:e2:87:31:6b:7f:b3:94:a3:e6:
         c5:c6:1a:4f:47:a8:e2:75:7f:27:b4:c1:fd:0e:c0:37:e7:6a:
         95:bf:ce:f2:b2:f8:6b:35:c9:20:d2:68:a6:7f:32:5e:9f:44:
         51:c1:30:1b:ef:53:1a:03:3d:9a:0a:69:c8:fe:64:00:91:e6:
         7f:fa:d2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 13:01:31 2024 by rpki-client on console-ams.rpki-client.org