Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a3a2f33332d3333203d3e20323635303830.roa
File:                     323830343a333237383a3a2f33332d3333203d3e20323635303830.roa (raw, json)
Hash identifier:          on4wgmay4JDcsqiCli/aROAr6csr1N4Ec50RBMAyNws=
Subject key identifier:   CF:EF:6A:EA:DE:19:DF:85:97:AD:54:76:96:28:00:44:40:EC:95:AF
Certificate issuer:       /CN=209EFCD0E737A4897116B0C61EAC64613B3DD25C
Certificate serial:       76580748C152899E1E14E8632381E0160AD53F85
Authority key identifier: 20:9E:FC:D0:E7:37:A4:89:71:16:B0:C6:1E:AC:64:61:3B:3D:D2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/209EFCD0E737A4897116B0C61EAC64613B3DD25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a3a2f33332d3333203d3e20323635303830.roa
Signing time:             Thu 14 Dec 2023 12:52:35 +0000
ROA not before:           Thu 14 Dec 2023 12:47:35 +0000
ROA not after:            Thu 12 Dec 2024 12:52:35 +0000
asID:                     265080
IP address blocks:        2804:3278::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:58:07:48:c1:52:89:9e:1e:14:e8:63:23:81:e0:16:0a:d5:3f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209EFCD0E737A4897116B0C61EAC64613B3DD25C
        Validity
            Not Before: Dec 14 12:47:35 2023 GMT
            Not After : Dec 12 12:52:35 2024 GMT
        Subject: CN=CFEF6AEADE19DF8597AD54769628004440EC95AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e0:e8:4b:83:4e:99:35:a1:7b:08:d2:07:54:
                    94:9b:c0:a8:76:c0:5b:13:5f:b8:41:f9:19:fa:e7:
                    b7:62:9b:20:ff:f4:79:dc:ec:fa:e5:6d:b0:c5:ec:
                    21:7b:71:24:93:70:8d:b9:2a:c0:3d:99:ed:45:b9:
                    85:04:7e:e7:b8:08:4e:03:bc:cc:b7:5b:e1:eb:3a:
                    fb:85:b5:f0:b0:bf:e1:83:7a:3d:40:48:d1:1c:5a:
                    8c:68:1d:e0:5d:b2:f3:34:dc:cd:f6:4a:cf:75:0a:
                    48:5c:4f:38:db:9f:2f:0b:c0:72:5d:2b:de:d2:bb:
                    67:1f:08:96:0c:07:ac:b9:db:c3:b2:42:ea:43:10:
                    16:55:2c:a6:fa:0b:36:9a:c2:a6:72:7a:0a:97:18:
                    97:76:32:dd:13:c5:ed:91:9f:be:26:8c:eb:b1:c3:
                    96:ca:47:b1:de:48:be:5f:db:85:58:43:17:4d:81:
                    05:c5:d9:2e:39:05:07:f0:46:12:67:b0:f2:10:50:
                    6b:ef:5b:68:de:c3:49:d0:d7:51:c4:bf:be:57:a9:
                    15:2f:89:f3:17:9d:39:42:b0:47:60:e6:12:8f:e4:
                    28:45:9a:a1:1d:3c:85:65:2e:a6:5e:20:30:4b:a9:
                    6b:98:be:5c:6f:71:61:63:81:4b:50:b7:12:8d:e5:
                    83:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:EF:6A:EA:DE:19:DF:85:97:AD:54:76:96:28:00:44:40:EC:95:AF
            X509v3 Authority Key Identifier:
                keyid:20:9E:FC:D0:E7:37:A4:89:71:16:B0:C6:1E:AC:64:61:3B:3D:D2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/209EFCD0E737A4897116B0C61EAC64613B3DD25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/209EFCD0E737A4897116B0C61EAC64613B3DD25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a3a2f33332d3333203d3e20323635303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3278::/33

    Signature Algorithm: sha256WithRSAEncryption
         4b:3a:28:e1:02:20:31:51:57:66:1d:cd:85:81:09:4f:bf:d1:
         79:92:ec:ac:89:45:e3:fd:16:aa:d9:ef:91:e8:dc:05:da:0b:
         00:15:b6:d7:f4:e5:b9:38:f5:32:8b:c3:1c:ed:88:63:f4:95:
         e6:0b:cf:a4:fe:97:67:7d:b3:fc:31:8a:8a:0a:77:8a:29:78:
         fa:69:fc:7c:8e:d6:a9:25:17:85:9c:61:db:61:3a:73:06:e8:
         d5:e5:dc:3f:b0:b5:e9:b2:21:76:4a:79:e4:d0:65:ab:0e:ad:
         cb:f8:2b:04:c8:bb:be:d4:ed:b8:48:d6:ad:ca:b3:c2:dd:6b:
         fa:c1:db:1e:57:07:df:cc:d3:ac:22:34:4b:c9:ec:ca:18:cb:
         22:1a:d8:c6:73:56:e2:ab:c7:04:2c:4c:2e:a2:96:6d:d1:9d:
         68:c3:7f:28:1f:4f:68:b5:75:a3:39:fe:97:b4:41:ad:b3:5c:
         44:cb:73:90:5d:62:cb:78:a7:4e:73:a7:7c:93:f4:a7:88:12:
         d2:8a:31:b8:70:f4:a8:a2:fb:be:d0:d0:7f:35:64:fc:6f:38:
         74:e2:7a:5d:03:38:4c:98:f0:85:80:3b:f9:4e:ea:01:92:00:
         9b:2f:88:d5:70:43:ad:8c:ac:fc:45:10:24:4e:e5:f7:78:df:
         dc:95:31:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:04 2024 by rpki-client on console-fra.rpki-client.org