Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa
File:                     323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa (raw, json)
Hash identifier:          JnPSlklNDueZU62F6v6Ho+JfCtNZ72KkPZi0e3DnC6w=
Subject key identifier:   A9:91:35:66:0D:46:1D:4A:46:79:52:FF:62:E5:0F:7B:CE:C3:74:88
Certificate issuer:       /CN=CF829EB0B35DA29B497042D7E790F0EEC35512E4
Certificate serial:       7FE4E92A29706939F8B6936AF9D61D95C42C8287
Authority key identifier: CF:82:9E:B0:B3:5D:A2:9B:49:70:42:D7:E7:90:F0:EE:C3:55:12:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF829EB0B35DA29B497042D7E790F0EEC35512E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa
Signing time:             Mon 18 Dec 2023 19:37:14 +0000
ROA not before:           Mon 18 Dec 2023 19:32:14 +0000
ROA not after:            Mon 16 Dec 2024 19:37:14 +0000
asID:                     268746
IP address blocks:        2804:5a10:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e4:e9:2a:29:70:69:39:f8:b6:93:6a:f9:d6:1d:95:c4:2c:82:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF829EB0B35DA29B497042D7E790F0EEC35512E4
        Validity
            Not Before: Dec 18 19:32:14 2023 GMT
            Not After : Dec 16 19:37:14 2024 GMT
        Subject: CN=A99135660D461D4A467952FF62E50F7BCEC37488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9e:1a:62:ee:6f:84:0a:36:9d:c0:53:1b:d6:
                    81:ff:02:c2:02:c8:4a:14:19:f0:70:aa:7a:94:69:
                    8e:ff:92:a2:38:03:b1:59:07:e1:79:46:10:ec:1c:
                    bf:2b:92:a0:e8:bf:60:85:14:88:5d:b6:f2:41:10:
                    75:4a:46:fa:dc:be:3f:3c:09:e7:ce:d9:c3:fb:d9:
                    e5:15:f8:32:db:92:51:ac:b2:13:18:f1:93:fb:39:
                    f3:7b:6b:85:de:31:15:13:bb:08:4d:47:0e:1a:d6:
                    0c:b6:2b:5e:09:98:9e:bc:17:10:61:05:8a:03:88:
                    22:fe:07:a6:dc:ce:9d:a6:84:23:f4:64:41:40:3c:
                    84:4d:5f:a7:0e:d4:94:72:35:71:9e:f9:36:ee:95:
                    54:15:5d:ec:79:0e:8d:d2:cd:34:e1:45:66:49:3b:
                    6f:83:72:29:42:69:c2:c6:12:08:04:86:b3:02:91:
                    50:88:8a:3e:84:08:93:de:a5:25:9c:6d:21:08:73:
                    7f:48:c1:f2:77:ba:dc:57:9e:01:c7:85:c1:37:f8:
                    b5:fc:2b:84:ce:f0:ef:27:08:76:69:dc:f0:cc:cf:
                    03:8b:68:d4:27:ac:13:66:65:c0:6d:8f:f4:f9:01:
                    0f:f9:90:d4:a3:47:3a:a0:3c:34:2e:3f:63:81:cc:
                    5d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:91:35:66:0D:46:1D:4A:46:79:52:FF:62:E5:0F:7B:CE:C3:74:88
            X509v3 Authority Key Identifier:
                keyid:CF:82:9E:B0:B3:5D:A2:9B:49:70:42:D7:E7:90:F0:EE:C3:55:12:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/CF829EB0B35DA29B497042D7E790F0EEC35512E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF829EB0B35DA29B497042D7E790F0EEC35512E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a10:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         10:ac:c9:eb:d7:3e:8a:48:fb:5d:4c:98:67:e3:97:66:61:19:
         91:e1:ff:78:03:65:bf:af:28:e8:65:68:e1:2b:82:c1:4a:42:
         10:4a:55:41:1c:3b:1d:d9:ad:0c:c7:0a:1f:f3:c5:4e:c4:33:
         96:92:27:42:ac:05:49:7f:f7:79:50:ba:56:5d:8c:f1:af:90:
         35:37:df:94:3b:63:ef:45:fa:bc:ae:4b:4c:9f:6c:34:36:ff:
         0b:fe:60:de:2a:4c:c1:06:21:10:6b:b3:1a:ca:fd:37:75:cf:
         96:52:be:88:dd:fb:5f:85:c5:f2:01:d9:4e:80:f4:cb:e4:cf:
         6f:b7:ca:10:1a:ab:0f:54:8d:0f:9f:e8:2c:c8:bc:ab:9c:06:
         09:56:ff:22:28:f3:5e:86:ea:ba:ff:e5:a8:aa:7d:c1:16:42:
         74:7e:a7:38:4c:e2:e0:97:f4:16:6b:e9:56:c6:a8:1c:02:da:
         f9:e1:b6:57:4a:cf:f2:23:95:b3:d7:63:36:fd:e0:40:99:9f:
         6c:2b:0c:7c:49:11:88:76:c3:d7:6a:36:29:d4:bd:56:bf:53:
         41:64:a2:c6:e4:61:e5:da:8e:f5:29:d9:e0:48:d6:f8:64:f6:
         75:6d:b4:08:b5:58:52:7e:9c:8e:c9:e2:0f:96:0b:cb:b0:ef:
         72:60:1f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:46 2024 by rpki-client on console-ams.rpki-client.org