Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/323830343a376139343a323030303a3a2f34302d3434203d3e20323731333830.roa
File:                     323830343a376139343a323030303a3a2f34302d3434203d3e20323731333830.roa (raw, json)
Hash identifier:          njkEwtFxG+YRU5hfrcqcSQGmp+mqSbMTKVVIOGgOdNI=
Subject key identifier:   AD:63:3A:2D:4C:B8:07:4F:A1:72:B7:F8:2B:29:51:74:A8:CC:09:B8
Certificate issuer:       /CN=F29CBF3783E5E2250C27F456D15288BD25A3BCC0
Certificate serial:       6A0A2A6606CECEFE9FB49AD22C5B33D7765F70C0
Authority key identifier: F2:9C:BF:37:83:E5:E2:25:0C:27:F4:56:D1:52:88:BD:25:A3:BC:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F29CBF3783E5E2250C27F456D15288BD25A3BCC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/323830343a376139343a323030303a3a2f34302d3434203d3e20323731333830.roa
Signing time:             Thu 07 Mar 2024 13:58:58 +0000
ROA not before:           Thu 07 Mar 2024 13:53:58 +0000
ROA not after:            Thu 06 Mar 2025 13:58:58 +0000
asID:                     271380
IP address blocks:        2804:7a94:2000::/40 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0a:2a:66:06:ce:ce:fe:9f:b4:9a:d2:2c:5b:33:d7:76:5f:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F29CBF3783E5E2250C27F456D15288BD25A3BCC0
        Validity
            Not Before: Mar  7 13:53:58 2024 GMT
            Not After : Mar  6 13:58:58 2025 GMT
        Subject: CN=AD633A2D4CB8074FA172B7F82B295174A8CC09B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:53:fe:7c:22:53:90:a7:06:8a:5b:7b:19:3a:
                    3d:67:e9:7f:5f:e1:f8:e0:e3:d3:53:0c:83:07:f5:
                    60:31:1e:ca:ce:ef:62:64:4e:5b:bf:9a:60:d6:f7:
                    75:31:5a:4e:60:08:20:cf:3d:f4:ab:a0:50:3f:d6:
                    77:41:7e:70:a9:98:19:1a:0b:37:d6:d9:6f:a1:82:
                    4f:fe:a1:f9:3c:a6:20:56:8b:e0:07:fe:2c:d4:41:
                    32:37:6b:86:6a:3c:68:ae:ba:94:4c:c6:ca:d9:98:
                    5d:73:25:05:2c:13:d4:1d:80:9c:1c:94:3c:6d:24:
                    52:9a:8d:bb:28:a7:0b:7d:a5:2b:cb:cb:ad:bd:96:
                    36:18:f9:ef:9c:f5:ba:b2:f3:8c:6e:84:ec:10:55:
                    a3:d1:3d:8d:18:00:48:6a:3f:87:72:2f:2a:09:e0:
                    48:81:d5:fc:1b:b6:06:f8:12:40:6f:63:75:19:43:
                    c2:b8:9a:08:d0:c5:db:55:84:f4:bc:0f:68:a9:62:
                    c0:ba:53:e4:35:ca:cb:de:98:4a:3f:71:25:65:91:
                    25:0f:f2:9e:0f:30:67:ea:94:ff:b9:51:1e:e5:8a:
                    ee:9b:15:11:dd:29:a1:35:b8:5d:52:6d:86:a2:c3:
                    f4:48:47:de:e0:64:68:45:f3:17:a0:dd:56:bb:e2:
                    3b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:63:3A:2D:4C:B8:07:4F:A1:72:B7:F8:2B:29:51:74:A8:CC:09:B8
            X509v3 Authority Key Identifier:
                keyid:F2:9C:BF:37:83:E5:E2:25:0C:27:F4:56:D1:52:88:BD:25:A3:BC:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/F29CBF3783E5E2250C27F456D15288BD25A3BCC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F29CBF3783E5E2250C27F456D15288BD25A3BCC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/323830343a376139343a323030303a3a2f34302d3434203d3e20323731333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a94:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1e:38:5f:27:e3:d9:cb:f9:92:33:4a:24:4f:c2:64:e2:8b:44:
         ee:b1:7f:1e:8c:a7:ba:07:a4:1c:8f:64:53:4b:32:57:78:7a:
         f1:29:46:27:53:34:6e:8d:df:53:e6:a9:a8:94:6a:d8:ea:50:
         6c:55:6d:df:fa:e7:13:3b:7a:f2:ef:26:82:98:ea:f0:d9:32:
         d1:38:9e:61:11:d0:7e:64:7b:c2:24:d6:60:ec:0a:47:6d:eb:
         02:bc:58:e6:7a:31:31:8e:fe:35:d0:e9:cf:38:e7:e1:74:18:
         fc:2a:f4:ee:28:10:65:8b:2d:1f:a1:a7:d2:19:ea:2d:b5:e8:
         a7:60:4e:ec:6d:4a:35:5b:7b:86:ea:ce:a2:10:5a:13:01:af:
         83:97:ae:58:c4:35:57:01:4c:67:c0:96:52:fd:19:d4:59:bf:
         7c:ff:80:fb:a1:70:ba:56:4e:39:e2:ce:aa:9d:6b:96:e5:6a:
         0c:00:64:e9:1f:30:28:a8:57:af:e0:a7:46:dd:dd:35:c0:ff:
         ef:29:b4:29:a6:3f:de:cc:aa:68:9b:3b:0a:83:79:3f:39:45:
         06:3e:d9:66:10:c5:0d:08:0e:a5:37:55:76:35:ef:a8:12:fb:
         d6:02:75:7b:b9:62:71:ef:e6:94:f1:75:e8:0d:8f:55:89:9f:
         72:24:ec:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:23 2024 by rpki-client on console-fra.rpki-client.org