Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/323830343a373034343a3a2f33322d3334203d3e20323730373136.roa
File:                     323830343a373034343a3a2f33322d3334203d3e20323730373136.roa (raw, json)
Hash identifier:          DJRhYpGsfYun0HM1jaolW/9+maDfMiJaWPXFOCntrkg=
Subject key identifier:   1F:BF:C5:36:4E:11:3E:3F:D1:6D:7E:43:9E:15:D0:E2:ED:06:EC:42
Certificate issuer:       /CN=2F014380139A8673C23E2CF9AF6EDAC4216E1059
Certificate serial:       6B1B4EFF3F4AFB93D6462430840B0360FD8ADAA9
Authority key identifier: 2F:01:43:80:13:9A:86:73:C2:3E:2C:F9:AF:6E:DA:C4:21:6E:10:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F014380139A8673C23E2CF9AF6EDAC4216E1059.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/323830343a373034343a3a2f33322d3334203d3e20323730373136.roa
Signing time:             Thu 31 Aug 2023 16:00:00 +0000
ROA not before:           Thu 31 Aug 2023 15:55:00 +0000
ROA not after:            Thu 29 Aug 2024 16:00:00 +0000
asID:                     270716
IP address blocks:        2804:7044::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:1b:4e:ff:3f:4a:fb:93:d6:46:24:30:84:0b:03:60:fd:8a:da:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F014380139A8673C23E2CF9AF6EDAC4216E1059
        Validity
            Not Before: Aug 31 15:55:00 2023 GMT
            Not After : Aug 29 16:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:de:0d:48:dd:b6:b8:fe:e7:6c:da:ee:89:d5:
                    e4:e3:26:72:96:b0:b1:95:4f:da:7e:17:cd:a0:1a:
                    c1:56:88:d5:02:96:4d:ee:81:07:af:2a:42:69:5a:
                    28:83:06:23:50:ae:ba:0a:d2:ef:7c:57:d2:03:3e:
                    50:7d:e0:a4:c8:d3:1d:ab:27:e8:20:66:4e:bd:0b:
                    fa:2d:59:65:fd:e7:75:b6:d0:28:7b:56:da:46:61:
                    b9:39:5e:9b:33:9c:ba:5f:e6:8b:15:a2:f9:56:7b:
                    54:80:2c:2e:c8:b3:a5:90:a2:6f:7d:fb:37:e0:0b:
                    88:2e:c8:2d:85:f2:01:07:bc:1a:72:48:07:78:57:
                    a4:af:5d:c0:7f:75:11:42:f5:66:5f:8d:18:37:5d:
                    04:19:bd:38:a1:8c:8e:6b:a9:63:74:a0:54:e2:78:
                    7b:18:c8:1d:b2:88:58:00:58:b9:fe:2f:f4:d8:e7:
                    ea:bc:20:9d:22:39:b7:ae:c6:bd:db:3b:c6:e7:b4:
                    71:51:f2:c1:b8:f2:8b:ca:02:e4:1c:64:e3:24:44:
                    da:f9:2a:0d:a0:90:1b:57:69:29:ce:77:db:18:50:
                    d8:2b:8c:10:52:3d:db:47:f6:72:ce:c5:89:7b:ad:
                    58:52:0f:99:34:4d:2f:eb:da:8b:12:18:86:df:c6:
                    44:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BF:C5:36:4E:11:3E:3F:D1:6D:7E:43:9E:15:D0:E2:ED:06:EC:42
            X509v3 Authority Key Identifier:
                keyid:2F:01:43:80:13:9A:86:73:C2:3E:2C:F9:AF:6E:DA:C4:21:6E:10:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/2F014380139A8673C23E2CF9AF6EDAC4216E1059.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F014380139A8673C23E2CF9AF6EDAC4216E1059.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/323830343a373034343a3a2f33322d3334203d3e20323730373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7044::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:75:68:80:09:9b:a8:ae:4e:1d:b8:aa:15:42:04:52:6f:9d:
         c5:b4:39:80:69:4a:cc:82:c7:bd:99:f5:ac:f4:8f:d8:ca:db:
         0f:5a:16:c1:42:b3:37:f4:63:34:e2:d1:09:00:82:1f:cd:04:
         b2:75:35:56:5d:cd:34:11:1b:7d:88:3e:33:9d:92:21:7b:26:
         c2:d5:77:68:be:56:11:73:80:56:7c:ee:11:d3:23:85:66:d8:
         58:f6:cb:e6:6a:6c:67:8a:15:86:8f:0f:0c:7b:83:34:f6:a1:
         75:1e:2b:ff:d8:c6:b2:02:47:1b:a4:bb:2d:37:e9:04:9c:93:
         7c:ac:82:8a:ad:a1:e2:83:9c:32:b5:d4:b2:02:19:87:18:c3:
         e3:4d:42:e9:0d:ce:0e:04:e3:ef:5d:c9:dd:9f:98:e6:3c:ee:
         84:ec:be:79:89:6c:a2:95:7c:1b:a9:e1:78:26:85:d9:40:eb:
         38:49:f6:9e:87:6a:d3:a8:fd:f5:54:b4:4f:63:65:3f:43:cc:
         1c:ba:93:c5:70:d7:f5:23:ec:64:18:1a:25:1a:f4:fd:ea:dd:
         09:25:90:a1:2d:3a:39:dd:5d:a3:24:df:43:4c:e7:97:e9:a8:
         e9:e6:ec:b3:4b:02:bc:4f:1c:1d:e5:74:67:35:fb:aa:e6:1e:
         c3:33:98:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org