Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/323830343a326363303a383630303a3a2f34302d3430203d3e20323635323431.roa
File:                     323830343a326363303a383630303a3a2f34302d3430203d3e20323635323431.roa (raw, json)
Hash identifier:          Ix40wW0mHZKYBsQKYeQ4Hmhq1bTvZysaMC9qdyqDFsI=
Subject key identifier:   E0:D2:71:08:B0:A9:7F:3C:DD:32:34:BD:F3:E9:59:3B:18:53:F1:7F
Certificate issuer:       /CN=15F445D08CF8B48A7724CDD35F0A54D5425E3CBA
Certificate serial:       79CCA6CD676AFE52C5023EC517FBCE07F951D289
Authority key identifier: 15:F4:45:D0:8C:F8:B4:8A:77:24:CD:D3:5F:0A:54:D5:42:5E:3C:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/323830343a326363303a383630303a3a2f34302d3430203d3e20323635323431.roa
Signing time:             Thu 04 Apr 2024 23:07:38 +0000
ROA not before:           Thu 04 Apr 2024 23:02:38 +0000
ROA not after:            Thu 03 Apr 2025 23:07:38 +0000
asID:                     265241
IP address blocks:        2804:2cc0:8600::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:cc:a6:cd:67:6a:fe:52:c5:02:3e:c5:17:fb:ce:07:f9:51:d2:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15F445D08CF8B48A7724CDD35F0A54D5425E3CBA
        Validity
            Not Before: Apr  4 23:02:38 2024 GMT
            Not After : Apr  3 23:07:38 2025 GMT
        Subject: CN=E0D27108B0A97F3CDD3234BDF3E9593B1853F17F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8c:0e:0d:6f:e3:4f:74:26:7d:0f:f1:b6:1a:
                    f6:d3:b5:2a:7a:97:c1:db:b7:82:3e:75:c2:c8:21:
                    c4:ae:e9:37:66:fa:53:87:80:44:0f:88:56:b5:b6:
                    3c:b3:ea:98:d0:54:55:cc:9a:09:0e:57:07:0d:43:
                    a0:8e:c1:59:e2:4d:7a:02:6d:ee:ef:48:c8:a3:ac:
                    57:75:ca:09:e1:b5:66:56:e4:29:e4:97:fd:61:4c:
                    2b:d4:ee:fb:1b:1d:e2:16:75:23:10:28:65:9e:4c:
                    14:c6:4f:83:3b:1a:8d:56:9d:c2:fe:e2:93:82:a5:
                    44:d7:06:27:0a:e3:44:cb:c5:04:16:7b:fa:94:9c:
                    b7:fe:00:60:00:c7:a5:2c:09:7a:89:20:c3:fa:c8:
                    94:80:80:c3:4e:67:e0:d4:bd:31:5b:42:7f:06:1b:
                    6a:e6:ce:cf:e5:6d:0e:bd:9d:f4:22:90:b3:0c:82:
                    4c:0b:00:24:f5:38:47:1c:66:d8:9d:12:a6:3b:83:
                    8e:d3:5a:07:bc:93:ba:73:df:7f:c8:26:c5:0e:56:
                    c2:9e:ae:28:be:a5:f5:0f:8a:49:37:92:02:37:29:
                    e9:a6:39:37:3c:9a:f6:87:a4:b1:0a:c4:d8:34:a8:
                    b9:8d:cb:e7:0f:2e:23:37:e4:dc:f9:e6:29:24:21:
                    c7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D2:71:08:B0:A9:7F:3C:DD:32:34:BD:F3:E9:59:3B:18:53:F1:7F
            X509v3 Authority Key Identifier:
                keyid:15:F4:45:D0:8C:F8:B4:8A:77:24:CD:D3:5F:0A:54:D5:42:5E:3C:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/323830343a326363303a383630303a3a2f34302d3430203d3e20323635323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cc0:8600::/40

    Signature Algorithm: sha256WithRSAEncryption
         82:96:69:05:e3:33:fb:3a:bd:f9:62:83:80:c2:cd:8e:2b:15:
         41:c2:91:76:cf:7d:77:f3:d0:fe:1e:82:ca:7c:1e:bf:3d:80:
         19:64:46:be:ca:93:5a:35:8c:d5:f5:51:2c:53:de:b5:59:c3:
         c7:a7:72:1b:b8:0f:a0:31:4d:0b:3b:ea:2c:31:eb:f8:ee:9e:
         89:20:84:b1:f3:8c:d2:8a:6e:35:9e:13:17:24:b2:9e:a9:ff:
         12:a8:fd:98:45:b6:e4:86:4e:8e:e0:3e:fe:3a:cf:4d:28:a8:
         da:3b:b5:43:86:d5:2b:ea:5f:0a:f6:49:6f:3a:d4:65:b5:6f:
         40:15:af:54:ee:13:0a:79:d9:07:4a:8d:82:a1:b8:e0:b2:fe:
         e9:33:70:42:72:9e:4f:51:27:0a:3f:22:6b:16:1f:83:46:86:
         bc:9d:ee:e2:84:c6:53:b8:aa:95:8c:a3:44:f8:fa:2f:8c:ad:
         04:26:9a:30:fe:13:be:a9:71:04:ba:db:ee:e1:f1:21:79:19:
         a4:a6:46:e1:98:08:1b:d9:75:ad:21:b9:79:c7:9d:db:0e:44:
         ae:d3:18:e0:23:63:69:8b:10:51:03:02:ab:61:45:7a:ae:d9:
         2d:0a:dc:d1:81:3c:fe:f6:80:38:69:7c:88:bf:46:6b:78:61:
         00:73:09:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org