Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/323830343a356466303a343030303a3a2f33342d3334203d3e20323639303032.roa
File:                     323830343a356466303a343030303a3a2f33342d3334203d3e20323639303032.roa (raw, json)
Hash identifier:          NsvV1vHIUGjx/OOoQoAaBuX8z1VDUfhAU/BhhIPuDOM=
Subject key identifier:   28:C7:3C:47:A6:BB:81:D0:63:EB:0B:7A:89:A9:10:C0:4B:32:80:B7
Certificate issuer:       /CN=F398A83D78DD12A3CD95E521760F978E1F2B8819
Certificate serial:       2F36CC051E8A2A3A485094E2C383A006AA944603
Authority key identifier: F3:98:A8:3D:78:DD:12:A3:CD:95:E5:21:76:0F:97:8E:1F:2B:88:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F398A83D78DD12A3CD95E521760F978E1F2B8819.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/323830343a356466303a343030303a3a2f33342d3334203d3e20323639303032.roa
Signing time:             Thu 15 Feb 2024 21:51:37 +0000
ROA not before:           Thu 15 Feb 2024 21:46:37 +0000
ROA not after:            Thu 13 Feb 2025 21:51:37 +0000
asID:                     269002
IP address blocks:        2804:5df0:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:36:cc:05:1e:8a:2a:3a:48:50:94:e2:c3:83:a0:06:aa:94:46:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F398A83D78DD12A3CD95E521760F978E1F2B8819
        Validity
            Not Before: Feb 15 21:46:37 2024 GMT
            Not After : Feb 13 21:51:37 2025 GMT
        Subject: CN=28C73C47A6BB81D063EB0B7A89A910C04B3280B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:78:2b:43:e0:35:29:9c:88:db:ee:84:28:3a:
                    4d:1c:86:c1:8c:3d:84:7c:c2:9b:41:45:3d:73:5f:
                    f3:1a:ca:f7:00:fc:84:21:94:65:e6:9e:ec:ef:d6:
                    70:24:b7:84:a9:60:1e:f0:22:8b:97:a8:32:3b:5b:
                    56:d6:8b:16:49:22:71:f2:ac:19:4b:12:b7:04:53:
                    e1:30:e5:39:42:8d:7b:06:fd:e7:37:36:54:0f:3a:
                    12:f7:db:d0:5a:94:b6:9d:41:9b:55:9f:6c:db:ec:
                    6c:bb:cf:74:8a:24:8a:6b:60:48:c3:a1:0d:45:6a:
                    16:8e:0a:e5:f8:1c:8b:7c:a6:b5:04:41:a1:ba:44:
                    43:42:66:56:9c:67:c8:30:c9:ee:53:fc:c3:e6:c6:
                    7f:62:e5:b4:b7:ca:39:5d:1d:3b:c7:8d:2c:e4:be:
                    94:d6:1e:92:14:3c:ac:da:c3:be:47:a4:09:9e:64:
                    82:fc:b5:2d:ab:97:f3:bb:cb:11:7f:a6:e4:5a:5c:
                    50:92:bf:ae:e3:32:7e:03:f2:f9:76:25:dc:2a:91:
                    d9:50:0c:f2:72:73:36:6a:c8:9c:54:25:3b:52:62:
                    a0:91:15:b3:2a:a4:6e:d4:7c:45:a6:e1:7d:16:ec:
                    3b:02:65:9c:83:c8:be:06:3a:9a:ca:14:51:33:51:
                    96:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C7:3C:47:A6:BB:81:D0:63:EB:0B:7A:89:A9:10:C0:4B:32:80:B7
            X509v3 Authority Key Identifier:
                keyid:F3:98:A8:3D:78:DD:12:A3:CD:95:E5:21:76:0F:97:8E:1F:2B:88:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/F398A83D78DD12A3CD95E521760F978E1F2B8819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F398A83D78DD12A3CD95E521760F978E1F2B8819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/323830343a356466303a343030303a3a2f33342d3334203d3e20323639303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5df0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         64:df:02:2b:4f:bb:f4:e0:8f:2a:06:26:d8:81:55:37:07:e0:
         9b:5b:d5:09:4b:59:a2:bb:83:e9:18:48:24:14:a9:44:15:6d:
         7b:f6:da:07:f6:e3:b2:c6:fe:d5:72:01:29:b7:68:9d:c0:a4:
         02:7c:c9:1f:e1:79:6e:06:e7:d4:65:68:1d:1c:e9:3f:08:a5:
         9b:0d:d0:0e:1f:cb:e5:9c:38:ec:b5:4d:2b:19:e7:18:81:2c:
         d9:a2:4b:d1:27:77:3a:62:25:7d:d2:36:1d:fd:c1:20:2b:59:
         19:2d:46:de:2c:2a:4e:4a:e3:d7:e3:fa:e0:92:54:40:a3:43:
         e3:ce:17:44:f1:c9:c3:48:d1:88:07:c7:ab:3c:3f:84:ee:c4:
         d1:9d:f6:ad:a5:d2:59:85:cd:e4:76:d6:cf:f4:3f:60:6b:c9:
         0f:e2:71:fa:d7:06:7c:33:8f:61:f6:13:87:0c:ef:12:7f:df:
         6b:2d:c1:6a:51:65:d6:79:29:2e:78:55:79:7c:f1:5e:b1:c0:
         44:25:cb:60:3b:f5:18:b7:1e:a1:4b:e1:e7:c9:74:ec:20:3f:
         3c:4b:d2:98:a1:43:87:05:c3:e8:7f:b5:3d:d2:df:4b:68:eb:
         bc:1e:6b:4e:6c:fb:69:e3:b8:56:78:68:7d:7d:39:37:6e:5d:
         41:f1:a6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:07 2024 by rpki-client on console-ams.rpki-client.org