Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/323830343a376633343a3a2f33322d3334203d3e20323731363733.roa
File:                     323830343a376633343a3a2f33322d3334203d3e20323731363733.roa (raw, json)
Hash identifier:          wlw2cOzj7hR/KRix60zt4Y2RaPPo7OaqKWpL9Z2PyfA=
Subject key identifier:   B9:2D:BE:CB:3A:FF:56:00:BB:0A:50:78:48:87:BC:AA:88:A4:A8:3B
Certificate issuer:       /CN=F44DF14D562105C13AF41B84E768EEDE439E91A1
Certificate serial:       519B27899CE923EE7328480C352D22016C86DB70
Authority key identifier: F4:4D:F1:4D:56:21:05:C1:3A:F4:1B:84:E7:68:EE:DE:43:9E:91:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F44DF14D562105C13AF41B84E768EEDE439E91A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/323830343a376633343a3a2f33322d3334203d3e20323731363733.roa
Signing time:             Wed 13 Mar 2024 21:10:38 +0000
ROA not before:           Wed 13 Mar 2024 21:05:38 +0000
ROA not after:            Wed 12 Mar 2025 21:10:38 +0000
asID:                     271673
IP address blocks:        2804:7f34::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:9b:27:89:9c:e9:23:ee:73:28:48:0c:35:2d:22:01:6c:86:db:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F44DF14D562105C13AF41B84E768EEDE439E91A1
        Validity
            Not Before: Mar 13 21:05:38 2024 GMT
            Not After : Mar 12 21:10:38 2025 GMT
        Subject: CN=B92DBECB3AFF5600BB0A50784887BCAA88A4A83B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:99:f3:a4:0c:6d:c7:7e:f9:89:32:05:69:bb:
                    13:70:4d:68:60:7b:31:17:ab:ff:bf:fa:cf:ce:83:
                    3a:d1:fb:e2:63:03:3f:ca:66:c9:82:1e:b8:bb:a7:
                    9c:4e:c6:d5:bb:3c:94:b0:15:b9:e9:de:09:92:77:
                    a8:97:09:0a:06:17:a4:ca:87:f7:dc:55:15:e0:d0:
                    d8:64:8b:ac:c6:7c:67:ce:d0:e0:f4:7d:65:00:ef:
                    91:f4:05:c4:c0:83:0c:67:ce:54:af:e8:3a:91:0f:
                    93:dc:fb:dc:7b:c6:79:cc:98:f0:b9:30:04:63:9f:
                    0d:9a:d0:7f:e6:55:31:31:51:8a:ee:75:4d:5e:4a:
                    5d:f7:91:31:d0:c5:f3:a1:4d:d7:e5:c9:ae:aa:24:
                    28:c0:ad:ec:a0:a8:1f:04:a2:85:6e:f4:81:49:a9:
                    3c:d6:7a:24:1b:8b:c7:09:2b:74:dd:97:82:98:a8:
                    a3:fb:b3:f4:f7:d8:0a:69:31:f4:cc:a8:b0:e4:9f:
                    0c:70:40:18:06:85:32:1a:70:73:27:f2:5c:53:49:
                    ae:41:b3:5f:64:3c:7e:c0:a4:8e:a0:b5:00:7a:ab:
                    34:1f:96:d3:e2:43:b7:54:5e:13:0a:bb:67:ea:d7:
                    79:75:ce:12:c6:38:81:71:a7:04:8d:2b:6c:26:5b:
                    f2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2D:BE:CB:3A:FF:56:00:BB:0A:50:78:48:87:BC:AA:88:A4:A8:3B
            X509v3 Authority Key Identifier:
                keyid:F4:4D:F1:4D:56:21:05:C1:3A:F4:1B:84:E7:68:EE:DE:43:9E:91:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/F44DF14D562105C13AF41B84E768EEDE439E91A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F44DF14D562105C13AF41B84E768EEDE439E91A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/323830343a376633343a3a2f33322d3334203d3e20323731363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f34::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:ed:53:5b:91:cc:2d:f2:3c:5b:ee:15:ff:dc:60:0f:2e:30:
         ef:40:26:91:d0:4a:bf:a0:87:7d:c5:00:cd:9f:94:77:25:ea:
         cc:f4:b5:17:cc:6c:15:ed:1e:84:37:0e:4f:c5:e3:6d:f0:7f:
         17:af:2b:e4:4d:77:6b:6f:64:f3:27:63:41:63:24:d2:20:a9:
         7d:5f:70:a6:58:c9:a6:f4:5c:f6:10:7d:40:42:71:37:25:15:
         2e:0a:a4:00:f3:ab:d9:df:34:1d:07:71:9c:af:78:f6:6b:05:
         1e:7c:ee:e4:c9:d0:20:e2:67:de:d1:c3:ea:26:b2:fb:28:ea:
         0a:da:6b:49:41:9c:50:3f:ba:67:28:c6:e0:29:9d:63:e1:0d:
         df:77:55:46:20:ff:4c:4a:aa:84:41:eb:74:f7:a0:06:42:38:
         47:8d:70:fe:b1:75:36:e6:51:50:6a:73:a6:29:bf:ab:17:e0:
         84:f0:8a:04:df:cf:2c:4a:1a:33:57:48:d1:ee:60:5f:b4:d6:
         69:fd:b0:7f:5e:e2:ae:e1:80:62:7a:28:8e:fb:67:41:f7:a5:
         9e:d7:c6:ac:e8:6f:11:87:84:ea:30:dc:f9:ff:b1:70:21:a8:
         29:97:19:80:71:35:78:85:a0:9b:ad:cf:24:51:2f:43:df:b2:
         e9:ac:c4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:30 2024 by rpki-client on console-ams.rpki-client.org