Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/1/323830343a333833633a3a2f33322d313238203d3e203532363031.roa
File:                     323830343a333833633a3a2f33322d313238203d3e203532363031.roa (raw, json)
Hash identifier:          A8A92IYDEorsYvOn844fCVAuH3Xt8j1A0DFX/Lefelk=
Subject key identifier:   38:93:8D:95:82:CD:34:B8:14:8B:90:9B:7C:97:18:E2:EB:28:86:2A
Certificate issuer:       /CN=FA4740D751D7330E7FE81FB75023D113A8850CD3
Certificate serial:       293705D3ABAC143ECC7620E3A42F7CD9F2936853
Authority key identifier: FA:47:40:D7:51:D7:33:0E:7F:E8:1F:B7:50:23:D1:13:A8:85:0C:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA4740D751D7330E7FE81FB75023D113A8850CD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/1/323830343a333833633a3a2f33322d313238203d3e203532363031.roa
Signing time:             Wed 05 Apr 2023 20:22:26 +0000
ROA not before:           Wed 05 Apr 2023 20:17:26 +0000
ROA not after:            Wed 03 Apr 2024 20:22:26 +0000
asID:                     52601
IP address blocks:        2804:383c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:37:05:d3:ab:ac:14:3e:cc:76:20:e3:a4:2f:7c:d9:f2:93:68:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA4740D751D7330E7FE81FB75023D113A8850CD3
        Validity
            Not Before: Apr  5 20:17:26 2023 GMT
            Not After : Apr  3 20:22:26 2024 GMT
        Subject: CN=38938D9582CD34B8148B909B7C9718E2EB28862A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:23:eb:23:02:f0:84:8f:6e:27:3f:1f:22:db:
                    bb:fb:17:f6:5c:a6:35:1b:82:a7:86:f4:13:f4:84:
                    57:2c:c5:2d:67:6c:50:52:75:e4:02:ed:4c:56:9b:
                    bd:5d:82:a1:a2:68:dd:8c:e6:bd:94:a8:f9:71:f5:
                    6b:c7:0d:47:62:ea:86:dd:37:89:e8:b0:ec:b7:e5:
                    2d:30:22:b1:5e:4a:e0:d1:6a:2c:b5:1a:b6:0c:dd:
                    f5:a3:86:34:f5:a4:7f:80:da:38:85:76:21:ef:65:
                    de:08:23:ac:07:ea:da:9b:f7:dd:7f:7c:10:bd:b8:
                    2d:4c:33:6b:eb:ab:e9:c2:b0:6a:a0:b9:d7:27:d9:
                    38:2b:0f:44:a8:46:f5:60:63:97:7e:d9:e3:74:30:
                    be:eb:53:d6:c8:88:68:0c:33:0d:83:62:6e:b1:ff:
                    37:6c:f2:70:92:86:85:66:8d:f3:e6:f9:03:a9:6a:
                    e3:ab:c7:dc:01:d7:fc:9f:89:c6:94:ee:ca:52:0d:
                    08:46:11:33:03:fe:65:df:69:4a:32:2e:84:d7:c2:
                    2a:a9:25:2a:38:e9:7c:60:01:63:1f:52:f2:2b:c5:
                    68:2c:ab:67:85:a6:fc:37:3b:86:60:6d:da:81:5f:
                    d6:e8:da:df:c8:ef:52:5b:b1:b2:eb:f7:ed:c5:55:
                    d9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:93:8D:95:82:CD:34:B8:14:8B:90:9B:7C:97:18:E2:EB:28:86:2A
            X509v3 Authority Key Identifier:
                keyid:FA:47:40:D7:51:D7:33:0E:7F:E8:1F:B7:50:23:D1:13:A8:85:0C:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/1/FA4740D751D7330E7FE81FB75023D113A8850CD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA4740D751D7330E7FE81FB75023D113A8850CD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/1/323830343a333833633a3a2f33322d313238203d3e203532363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:383c::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:d0:a3:56:af:9e:17:1a:a7:6c:58:20:49:dc:f8:49:cc:ca:
         b1:20:59:ac:dc:06:bf:55:2b:5f:e3:f4:fb:20:9a:eb:99:e7:
         dd:3f:bf:07:84:81:d6:92:17:16:9d:38:a7:bd:f6:90:ae:dd:
         a2:d1:af:b4:ee:70:1f:a1:11:7c:74:41:5e:b1:59:71:5c:0b:
         0e:4c:e2:15:54:20:7d:fe:b2:db:c1:96:c2:44:11:b1:d2:02:
         a8:d3:a3:e1:2d:8f:36:94:64:87:30:33:98:f9:2e:fd:a6:a7:
         7f:e7:ab:f1:54:db:88:ca:bd:56:43:51:27:4d:41:7b:26:1d:
         0f:25:a8:a7:9c:11:8f:3a:fe:02:d1:d0:0f:bd:63:65:33:f2:
         2e:d6:2f:7b:89:85:49:47:5e:c2:94:26:2a:d5:3b:1c:56:2e:
         57:11:19:4c:35:6b:8e:3d:db:62:45:67:83:9d:2b:78:e6:ea:
         f9:5e:33:6c:01:ab:1a:9b:69:8f:6c:11:e4:be:db:de:41:3e:
         14:b3:d7:e9:b2:ca:f6:e7:2b:b5:89:d3:51:63:4a:3e:f2:92:
         25:5b:aa:00:f6:a7:06:29:f0:42:06:1d:85:9f:ad:57:f9:54:
         d5:80:fa:7d:08:b4:8f:e9:27:7e:2a:b7:47:43:37:73:4f:1d:
         45:e4:ac:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:25 2023 by rpki-client on console.sobornost.net