Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/323830343a3863383a633030303a3a2f33352d3335203d3e20323632333933.roa
File:                     323830343a3863383a633030303a3a2f33352d3335203d3e20323632333933.roa (raw, json)
Hash identifier:          hJtgQefC0iAb5PKT9amEeFUQoMlM0xY76dxmbfYPjxE=
Subject key identifier:   43:34:FD:F5:A9:C6:B3:AD:10:87:3F:33:98:2C:C1:13:CB:02:E1:86
Certificate issuer:       /CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
Certificate serial:       7FBED36A45BB1B0737B7BE659DBB87C7760BF23F
Authority key identifier: F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/323830343a3863383a633030303a3a2f33352d3335203d3e20323632333933.roa
Signing time:             Wed 10 Jan 2024 19:26:27 +0000
ROA not before:           Wed 10 Jan 2024 19:21:27 +0000
ROA not after:            Wed 08 Jan 2025 19:26:27 +0000
asID:                     262393
IP address blocks:        2804:8c8:c000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:be:d3:6a:45:bb:1b:07:37:b7:be:65:9d:bb:87:c7:76:0b:f2:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
        Validity
            Not Before: Jan 10 19:21:27 2024 GMT
            Not After : Jan  8 19:26:27 2025 GMT
        Subject: CN=4334FDF5A9C6B3AD10873F33982CC113CB02E186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9f:83:21:f6:27:6c:dc:bc:a5:ed:25:a7:aa:
                    78:d0:11:63:16:3b:9c:b0:30:f2:c4:1c:c3:10:65:
                    a4:7d:fe:d9:76:bc:ba:b3:d9:a3:2b:8b:a8:7f:3d:
                    dc:14:ff:f1:46:26:68:8a:6a:e0:f4:df:12:98:80:
                    2f:f3:a9:6d:c7:ea:cb:a6:91:5f:b9:92:0e:26:1b:
                    99:cc:1a:9f:5b:77:ab:87:10:2a:dd:6e:8a:4e:6f:
                    03:f6:37:b2:70:2c:1f:7d:e0:09:03:84:41:85:62:
                    e5:69:6a:d7:96:41:14:60:15:17:57:a8:9d:88:24:
                    58:51:55:fb:dd:10:82:9c:d1:42:e8:52:1f:61:8a:
                    bc:17:47:68:3e:09:14:b8:07:8a:8d:e8:be:08:8d:
                    72:85:56:d0:d9:9c:26:4c:08:dd:57:b5:f4:c6:75:
                    93:f0:a4:b3:0d:dc:09:cf:32:ff:8c:54:69:68:64:
                    20:5d:5e:5d:76:e7:f1:26:92:8b:27:37:3b:b6:21:
                    df:6c:fb:23:f4:42:13:97:55:94:66:7a:9f:50:80:
                    b3:08:92:de:93:5d:b9:27:de:1f:c1:3d:e1:cc:42:
                    96:0e:e9:7e:67:31:d0:d8:fe:a9:d0:e4:2b:af:f7:
                    00:4b:49:ee:c1:ac:40:1f:3b:7b:d9:1f:fc:f1:ff:
                    a7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:34:FD:F5:A9:C6:B3:AD:10:87:3F:33:98:2C:C1:13:CB:02:E1:86
            X509v3 Authority Key Identifier:
                keyid:F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/323830343a3863383a633030303a3a2f33352d3335203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c8:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         62:a4:85:c5:0c:47:6f:00:a2:80:71:a8:8b:bb:4f:6d:42:27:
         c2:b1:39:2f:04:5e:e0:e3:15:4c:bf:7c:12:f1:b5:6b:d5:9f:
         c6:23:5f:7b:1f:ea:ff:de:5b:7a:64:21:d7:eb:c1:aa:7e:1c:
         5a:cc:39:48:26:26:b5:7a:13:dc:cc:b3:2a:75:17:32:40:da:
         03:eb:6d:99:b1:f9:63:e3:ff:bd:84:ac:7d:c4:d1:dd:80:d0:
         7d:f4:49:6d:57:44:58:da:22:36:5c:bf:e1:33:13:63:0b:24:
         02:11:a7:a6:34:02:83:0d:70:1b:af:90:21:ab:b5:7b:48:c2:
         23:b0:58:68:fa:af:09:47:a0:91:a0:b4:43:9a:fc:a8:b4:29:
         4c:ad:64:8b:d2:1f:36:8e:c5:bb:d5:8d:f3:21:03:59:ac:55:
         62:be:03:c3:8c:6e:03:2b:54:59:25:d6:43:86:30:f3:c9:41:
         01:1b:78:68:63:c8:2a:4c:f2:f2:dc:8b:01:d2:4a:5f:b0:e0:
         a6:e8:d2:65:4f:87:16:a2:61:47:fc:5f:01:f5:95:e6:72:24:
         f5:25:e1:98:43:b8:4c:e7:88:07:d5:56:5e:0b:ac:6e:10:e2:
         b3:33:75:ab:13:e9:5f:52:3d:98:e1:c8:82:1f:0c:22:c4:c8:
         fd:b3:a0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org