Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/323830343a3863383a383030303a3a2f33332d3333203d3e20323632333933.roa
File:                     323830343a3863383a383030303a3a2f33332d3333203d3e20323632333933.roa (raw, json)
Hash identifier:          TRc/34vqzzWiJqz9dMGbLEX+WSwwPDF6VY9PaWQtNNQ=
Subject key identifier:   C6:83:54:D3:CB:D9:55:F2:33:A9:7B:FE:0B:89:F3:E7:FF:52:13:D3
Certificate issuer:       /CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
Certificate serial:       42148F8B817F800AF9ACCED1F2C2728596B96B19
Authority key identifier: F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/323830343a3863383a383030303a3a2f33332d3333203d3e20323632333933.roa
Signing time:             Sat 05 Mar 2022 15:38:20 +0000
ROA not before:           Sat 05 Mar 2022 15:33:20 +0000
ROA not after:            Sat 04 Mar 2023 15:38:20 +0000
asID:                     262393
IP address blocks:        2804:8c8:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:14:8f:8b:81:7f:80:0a:f9:ac:ce:d1:f2:c2:72:85:96:b9:6b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
        Validity
            Not Before: Mar  5 15:33:20 2022 GMT
            Not After : Mar  4 15:38:20 2023 GMT
        Subject: CN=C68354D3CBD955F233A97BFE0B89F3E7FF5213D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:87:4e:97:df:1f:ab:3d:b8:a8:65:05:e7:b7:
                    a4:38:85:3e:5c:5e:a2:c6:c4:28:f3:85:e9:65:a1:
                    a4:ff:21:11:39:bd:60:d6:ef:cd:b6:33:97:e6:4c:
                    f0:ba:37:ec:70:cd:9c:99:78:d0:91:5d:60:c2:d8:
                    8c:29:ea:c7:91:7b:0a:0e:6d:b5:62:01:34:e2:c9:
                    be:2c:27:10:a3:c8:ce:5f:6d:06:2d:36:b0:87:84:
                    48:2b:2d:05:e0:7e:1e:68:21:92:84:3e:4d:92:bd:
                    52:85:da:8c:6b:df:ef:c4:79:a7:1c:a1:ae:e8:73:
                    56:65:11:1b:15:29:fd:d8:0d:ef:ad:43:b3:e0:bc:
                    a9:c3:d8:7e:73:90:ad:f5:29:49:88:72:72:de:58:
                    e7:39:d3:71:9c:19:32:d6:2e:1c:7e:fe:5c:b2:c0:
                    aa:84:5b:9b:a1:f1:98:49:8c:ae:bd:bd:43:ca:30:
                    c8:d8:55:d1:52:5c:4d:62:81:f0:6f:4b:87:9d:72:
                    a2:1c:e7:97:aa:7f:3a:3f:44:67:98:97:94:03:e5:
                    af:c8:9b:09:63:fb:d2:97:06:cb:31:6b:82:9f:52:
                    a9:a0:03:a1:e6:41:49:c0:9f:70:b2:73:7d:18:6e:
                    15:df:49:95:ab:2f:ee:1e:c7:96:c5:61:e2:1b:9e:
                    d9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:83:54:D3:CB:D9:55:F2:33:A9:7B:FE:0B:89:F3:E7:FF:52:13:D3
            X509v3 Authority Key Identifier:
                keyid:F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/323830343a3863383a383030303a3a2f33332d3333203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         6b:3c:ef:0a:67:56:1d:59:d4:6f:ff:3a:cc:2d:0d:31:48:1a:
         ed:29:cf:d5:a7:98:93:b0:11:30:db:a6:ce:45:f2:26:17:82:
         6e:42:62:d2:f0:c0:c1:a8:b1:4d:28:f7:f2:35:07:63:1f:e8:
         af:a6:f0:00:7c:1e:50:f9:94:2d:31:90:20:6f:60:0f:28:b1:
         98:30:ab:a6:6f:39:24:dd:30:6e:80:ff:17:8d:c9:ce:e2:06:
         84:a4:d1:a7:51:2b:1b:11:20:96:e9:b3:f0:e8:4e:8d:62:8c:
         0b:65:9f:8b:b9:3e:73:27:37:5a:65:1b:46:ef:e1:a4:bd:c7:
         30:55:2a:60:95:de:20:a5:7e:62:bd:e2:5a:45:54:9b:3f:ff:
         62:8b:e3:78:fd:c0:f7:55:3f:65:9c:f4:bf:74:1a:9c:9f:0c:
         6e:15:3b:78:05:50:12:6d:ab:95:fd:85:1a:70:f4:2f:70:e3:
         2b:25:ed:35:af:4a:27:31:4b:e9:6a:b2:30:0a:8a:49:bd:9f:
         af:76:fb:bc:45:27:e8:98:32:14:1a:d1:49:7e:01:95:cc:5f:
         33:c2:3b:9a:8d:65:b9:a4:1f:b6:5d:5c:a4:86:4c:ee:60:ca:
         5a:e3:ee:22:64:d8:9c:fc:57:88:58:4d:a4:d8:66:d2:cf:04:
         f3:27:cb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org