Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/323830343a373034383a3a2f33322d313238203d3e20323730373137.roa
File:                     323830343a373034383a3a2f33322d313238203d3e20323730373137.roa (raw, json)
Hash identifier:          6kjMp3kU++iAztyjE7B5HOXHg5thOLnUJeEq8WpYlvo=
Subject key identifier:   B3:ED:84:48:2D:A9:69:BB:6B:E2:03:71:5C:CE:73:BA:C9:06:9C:55
Certificate issuer:       /CN=CF1D4ED402F6A7495FF98704F6504616E9CD02FA
Certificate serial:       436A4A628E4DD5EB008E788E55774817C517E8
Authority key identifier: CF:1D:4E:D4:02:F6:A7:49:5F:F9:87:04:F6:50:46:16:E9:CD:02:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF1D4ED402F6A7495FF98704F6504616E9CD02FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/323830343a373034383a3a2f33322d313238203d3e20323730373137.roa
Signing time:             Mon 04 Sep 2023 16:25:45 +0000
ROA not before:           Mon 04 Sep 2023 16:20:45 +0000
ROA not after:            Mon 02 Sep 2024 16:25:45 +0000
asID:                     270717
IP address blocks:        2804:7048::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:6a:4a:62:8e:4d:d5:eb:00:8e:78:8e:55:77:48:17:c5:17:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF1D4ED402F6A7495FF98704F6504616E9CD02FA
        Validity
            Not Before: Sep  4 16:20:45 2023 GMT
            Not After : Sep  2 16:25:45 2024 GMT
        Subject: CN=B3ED84482DA969BB6BE203715CCE73BAC9069C55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ea:dc:29:56:eb:5a:38:be:96:94:d5:70:07:
                    2f:56:74:88:2e:82:79:b1:27:48:e7:5e:0a:15:cf:
                    d4:15:c3:d9:5f:b5:c8:73:e3:39:9f:41:95:71:a0:
                    62:cd:c9:fe:81:06:da:b7:1b:93:00:a0:5d:f2:23:
                    7e:e8:3b:39:3a:be:b5:4d:da:c0:64:59:df:4a:bb:
                    20:4c:64:84:fa:6c:49:de:26:8a:8c:64:13:8c:fa:
                    7a:45:c8:ab:51:55:82:48:26:fb:0e:30:3f:d9:33:
                    2d:dc:5f:ea:87:d1:4c:85:77:b3:dd:f0:c3:ca:a0:
                    90:8e:7c:eb:61:b6:ec:2e:2f:c2:d2:88:43:6e:d2:
                    04:cb:6d:8a:e1:fe:63:d2:3d:34:62:4f:af:23:b1:
                    46:93:23:a1:af:03:bf:da:0c:e0:dc:45:fd:4a:d0:
                    c5:e0:2a:e2:3f:a2:78:bc:f9:b4:11:86:2e:c8:8b:
                    fa:f0:11:cf:a3:a8:01:3a:6b:3b:37:0c:b9:90:5f:
                    2d:53:68:8f:5e:03:2c:f6:b2:ac:70:04:a6:1e:86:
                    67:fc:39:56:78:df:f8:0a:ce:fb:53:31:5d:c6:e1:
                    1d:c7:03:d3:f9:fe:51:01:b6:b0:e6:ec:a4:0f:33:
                    aa:ce:f1:15:63:cb:db:d2:2e:66:6d:6d:2e:66:66:
                    4b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:ED:84:48:2D:A9:69:BB:6B:E2:03:71:5C:CE:73:BA:C9:06:9C:55
            X509v3 Authority Key Identifier:
                keyid:CF:1D:4E:D4:02:F6:A7:49:5F:F9:87:04:F6:50:46:16:E9:CD:02:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/CF1D4ED402F6A7495FF98704F6504616E9CD02FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF1D4ED402F6A7495FF98704F6504616E9CD02FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/323830343a373034383a3a2f33322d313238203d3e20323730373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7048::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:3c:3f:60:5c:3b:59:6e:88:16:9c:3d:07:52:42:10:78:b4:
         1d:27:f7:0f:72:f2:d2:49:90:8d:59:78:dc:5f:b7:37:e8:bb:
         a4:74:08:ad:b7:f4:36:21:fb:13:16:6a:7e:1d:47:28:dd:bb:
         ad:b6:0a:e4:7e:cf:cb:a0:dd:c6:c7:80:52:28:bf:8c:c2:55:
         b6:fc:10:34:3e:29:b5:85:39:ff:08:7a:4f:73:4e:8b:30:53:
         19:3c:9a:03:0a:d0:c6:f3:e8:4f:f8:87:67:68:a8:64:66:8a:
         99:2d:71:73:31:09:e2:1c:bb:b7:0a:cb:dc:3b:ce:f1:d3:45:
         a8:e2:e7:ae:91:05:9a:18:7d:42:cc:71:08:05:8f:57:fa:f7:
         7f:db:0a:24:d1:f9:5e:f6:13:86:93:40:dd:b4:a3:cb:d4:3d:
         db:12:7c:c5:58:18:54:57:ad:29:37:00:82:7d:dd:19:47:aa:
         a6:97:b7:25:cb:0b:41:6c:c9:41:98:1d:7f:61:09:ca:e6:29:
         25:b8:6c:45:41:7d:4a:b7:3b:89:52:d1:38:c0:b0:44:8b:86:
         5f:fd:c0:ab:4c:fa:39:40:3d:38:17:f2:75:2f:03:71:89:39:
         fd:91:3e:62:b3:55:42:86:b8:35:fc:c9:28:80:43:48:ae:13:
         b8:0e:40:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-ams.rpki-client.org