Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cs7MLsKNVrMsfGhBAeeDuNJmVG6gYi1T58iWyCUzDZX/0/323830343a313062343a3a2f33322d313238203d3e20323633363435.roa
File:                     323830343a313062343a3a2f33322d313238203d3e20323633363435.roa (raw, json)
Hash identifier:          P49A4kh24st0SPDbQOTH2sgoeTksOeK3eqMVCa7CbWk=
Subject key identifier:   8A:C1:24:29:44:3D:C8:7D:C1:F5:B5:BF:57:DE:9B:F9:A4:FF:59:DF
Certificate issuer:       /CN=F29AFCEEECA608E1BCB2DEC93EC96356DB7FC31A
Certificate serial:       2EAA1C2CFC8EBB4D6CD1E7D3878ACEA7150CC37E
Authority key identifier: F2:9A:FC:EE:EC:A6:08:E1:BC:B2:DE:C9:3E:C9:63:56:DB:7F:C3:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F29AFCEEECA608E1BCB2DEC93EC96356DB7FC31A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cs7MLsKNVrMsfGhBAeeDuNJmVG6gYi1T58iWyCUzDZX/0/323830343a313062343a3a2f33322d313238203d3e20323633363435.roa
Signing time:             Tue 08 Nov 2022 16:00:25 +0000
ROA not before:           Tue 08 Nov 2022 15:55:25 +0000
ROA not after:            Tue 07 Nov 2023 16:00:25 +0000
asID:                     263645
IP address blocks:        2804:10b4::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:aa:1c:2c:fc:8e:bb:4d:6c:d1:e7:d3:87:8a:ce:a7:15:0c:c3:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F29AFCEEECA608E1BCB2DEC93EC96356DB7FC31A
        Validity
            Not Before: Nov  8 15:55:25 2022 GMT
            Not After : Nov  7 16:00:25 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d5:2d:3f:0b:5c:56:9c:70:54:e7:05:9a:22:
                    b2:67:fc:f7:ef:38:58:bb:3b:eb:7f:62:83:3a:82:
                    d0:43:f1:15:ff:8d:d6:8f:e5:f4:cc:7d:11:61:7f:
                    6a:f2:df:06:26:38:36:b1:e0:85:e5:eb:ed:fd:ae:
                    c7:85:9d:37:4c:15:c9:f1:e8:4e:c0:d2:cc:54:08:
                    f4:57:c7:5f:3c:e9:31:d0:a4:9e:98:6c:4f:1c:e1:
                    45:e5:43:e0:7d:24:88:e6:6b:e6:b9:38:a6:22:06:
                    7d:ac:42:68:9f:b3:5a:8c:d3:ba:93:62:91:7d:6b:
                    82:33:db:6b:13:02:d8:58:73:8e:66:1f:93:f2:2d:
                    04:72:cc:46:e5:a5:90:d4:6f:53:cb:4b:5a:2b:6e:
                    f3:53:30:2f:80:6a:19:07:52:64:9c:6e:ba:93:ee:
                    8d:49:ac:48:d7:1c:22:06:c1:12:c6:41:71:fc:2f:
                    fc:2b:d8:74:61:36:ec:64:b7:4e:0a:42:17:cc:ee:
                    8c:ce:31:a8:4b:c6:87:b8:ae:c9:6f:41:19:70:62:
                    63:2f:68:5e:cf:fa:99:a7:8f:7c:81:e2:eb:d7:a6:
                    ce:99:77:8a:41:f2:b6:80:1e:95:f0:ff:14:35:5c:
                    5d:79:49:33:32:62:04:69:94:ef:ab:7b:ca:85:35:
                    d8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C1:24:29:44:3D:C8:7D:C1:F5:B5:BF:57:DE:9B:F9:A4:FF:59:DF
            X509v3 Authority Key Identifier:
                keyid:F2:9A:FC:EE:EC:A6:08:E1:BC:B2:DE:C9:3E:C9:63:56:DB:7F:C3:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cs7MLsKNVrMsfGhBAeeDuNJmVG6gYi1T58iWyCUzDZX/0/F29AFCEEECA608E1BCB2DEC93EC96356DB7FC31A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F29AFCEEECA608E1BCB2DEC93EC96356DB7FC31A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cs7MLsKNVrMsfGhBAeeDuNJmVG6gYi1T58iWyCUzDZX/0/323830343a313062343a3a2f33322d313238203d3e20323633363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:34:d6:70:48:d1:97:47:1f:37:71:77:2b:19:68:55:d0:2b:
         ad:6e:ee:50:99:ac:b0:2d:05:2e:f2:d5:09:4a:16:2b:b0:dc:
         92:f6:00:ce:5d:f1:77:e5:12:3b:0b:73:8a:25:a2:06:2e:16:
         b5:64:13:c2:2e:fa:02:43:d2:4d:e1:be:65:b1:7a:2e:9e:42:
         38:0a:d0:0c:10:f3:31:0b:98:15:bb:e0:bf:cf:ff:a2:8f:c4:
         44:2b:df:48:52:75:fe:e2:b6:1d:eb:59:65:d4:54:2b:66:59:
         d9:50:ee:31:45:c7:12:60:3b:27:bb:40:fa:6a:7d:75:2d:fa:
         3e:3e:c5:77:5c:8a:7e:81:65:7c:81:fe:36:aa:90:b4:ea:63:
         cf:01:2f:a8:e7:44:43:9f:3d:7a:07:78:88:d4:52:ea:5d:6a:
         ce:a3:cf:41:a4:5e:a7:d3:e5:c7:4a:02:bd:ef:92:3b:93:c6:
         1e:cf:98:11:c8:4d:31:f5:52:ad:bf:dc:4d:44:ca:44:60:05:
         85:7b:a5:1b:f1:b3:6c:d0:28:28:2a:5e:7e:b8:82:46:aa:db:
         12:73:0a:cc:57:9c:b8:57:73:6d:a4:64:52:f2:64:d8:d2:07:
         1d:dc:d3:05:51:7c:d6:81:15:24:86:85:66:d6:42:d7:05:66:
         49:32:96:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org