Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/3230312e36322e36342e302f32302d3234203d3e203238363334.roa
File:                     3230312e36322e36342e302f32302d3234203d3e203238363334.roa (raw, json)
Hash identifier:          dmxgH6r7uF4aZJKdktNZcA6Z/ni0LDldtzZulTfTcY8=
Subject key identifier:   F6:FE:F3:77:3E:39:EC:3A:2E:79:E6:D0:E3:03:17:B9:B4:EE:9F:D8
Certificate issuer:       /CN=2A38124DA4255FE32B70B911C7C0AD42921CFCAB
Certificate serial:       7B4E4935ED76D223FFF7008216F4F67F362D3B49
Authority key identifier: 2A:38:12:4D:A4:25:5F:E3:2B:70:B9:11:C7:C0:AD:42:92:1C:FC:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A38124DA4255FE32B70B911C7C0AD42921CFCAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/3230312e36322e36342e302f32302d3234203d3e203238363334.roa
Signing time:             Thu 09 Feb 2023 20:00:00 +0000
ROA not before:           Thu 09 Feb 2023 19:55:00 +0000
ROA not after:            Thu 08 Feb 2024 20:00:00 +0000
asID:                     28634
IP address blocks:        201.62.64.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4e:49:35:ed:76:d2:23:ff:f7:00:82:16:f4:f6:7f:36:2d:3b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A38124DA4255FE32B70B911C7C0AD42921CFCAB
        Validity
            Not Before: Feb  9 19:55:00 2023 GMT
            Not After : Feb  8 20:00:00 2024 GMT
        Subject: CN=F6FEF3773E39EC3A2E79E6D0E30317B9B4EE9FD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d0:8b:f2:4c:20:88:11:2e:be:2a:b0:8e:0a:
                    09:81:da:b9:73:7c:ca:df:78:b6:32:f9:e4:41:14:
                    d6:9a:96:28:7a:e9:20:73:18:13:16:b2:45:fa:f0:
                    9c:7c:dd:6a:c5:6f:fc:e2:59:23:e1:e0:5b:03:ef:
                    e6:d2:c5:aa:85:5b:d3:7e:7d:b6:e2:f6:ba:5a:7a:
                    72:81:98:b0:87:27:28:58:fe:c2:39:18:7a:fb:c7:
                    92:cb:19:2f:58:24:34:19:d4:a6:18:57:3a:16:e2:
                    78:4b:d2:6a:4d:2d:a9:bb:4e:40:4d:88:4b:f1:85:
                    d6:ed:59:dd:81:60:b8:f2:0a:86:7e:cd:ee:42:35:
                    af:1d:c2:f4:c0:75:e5:f1:0f:f3:bb:a9:27:88:11:
                    89:19:ae:03:ef:f6:54:4f:20:59:47:a1:82:21:53:
                    42:0c:c8:4d:ad:88:8b:e7:f9:6d:48:5b:7f:5d:c9:
                    ed:71:b8:fa:82:a3:5c:45:8b:07:83:8a:e2:1c:d0:
                    35:00:b2:e7:7f:31:82:37:b5:82:ac:c9:76:9d:99:
                    77:d5:1c:df:78:69:a2:72:51:25:65:90:f3:6f:5a:
                    a3:ca:6e:f7:68:cd:72:40:7a:da:37:4f:2a:f6:d4:
                    ca:f4:3b:66:9b:52:a5:c7:0a:cc:b4:cb:74:96:bc:
                    f7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FE:F3:77:3E:39:EC:3A:2E:79:E6:D0:E3:03:17:B9:B4:EE:9F:D8
            X509v3 Authority Key Identifier:
                keyid:2A:38:12:4D:A4:25:5F:E3:2B:70:B9:11:C7:C0:AD:42:92:1C:FC:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/2A38124DA4255FE32B70B911C7C0AD42921CFCAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A38124DA4255FE32B70B911C7C0AD42921CFCAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/3230312e36322e36342e302f32302d3234203d3e203238363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.62.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         27:c3:9b:e9:8a:dc:39:a3:b9:26:dd:d4:c1:72:aa:2d:b0:22:
         16:3a:c5:41:b6:e6:71:af:50:c4:34:6b:27:14:2f:72:e2:6f:
         1d:92:86:34:23:7e:a0:2b:0e:49:ac:d8:9c:bb:b2:07:85:9d:
         5d:92:71:16:49:3e:dc:3d:28:b3:1e:91:24:ef:e7:f9:25:18:
         71:c0:df:80:fb:73:f3:24:ee:59:01:99:bb:e2:07:93:15:d5:
         ff:ae:77:a0:1f:c0:2f:97:3e:d1:28:fc:a5:5c:a6:19:83:d1:
         18:87:63:50:e1:ff:86:76:12:bb:ef:da:37:59:f6:f8:35:88:
         2d:fd:d3:21:2f:ab:2a:2d:36:c3:28:cc:7c:81:03:19:7e:94:
         59:d7:43:f9:8d:2e:15:69:a9:9a:a8:e5:f0:11:67:60:81:0d:
         34:a4:c6:10:3e:0a:2b:f1:cc:49:ce:96:f9:e4:30:7c:64:ab:
         c5:45:34:89:3f:ad:4f:6f:0c:c3:2f:0e:e9:05:6a:19:b2:38:
         72:c7:8f:43:f2:04:6f:4e:72:0c:ad:e7:c8:b0:e8:d8:bb:e5:
         16:e2:44:fc:b6:d8:23:9c:f3:b6:bc:34:b5:01:e9:95:bb:6c:
         32:28:78:e4:6b:5b:cb:10:cb:96:02:15:98:ed:34:a1:16:ae:
         6b:56:bb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:39 2023 by rpki-client on console.sobornost.net