Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/323830343a333339383a3a2f33322d3332203d3e20323635343036.roa
File:                     323830343a333339383a3a2f33322d3332203d3e20323635343036.roa (raw, json)
Hash identifier:          ChXFDmqwbfCo+TvtQcNMrzVGi8UuWwsqmf7htjM17O4=
Subject key identifier:   A8:46:DF:80:E8:81:12:A1:66:17:1D:C3:A8:87:48:49:8F:9C:54:DA
Certificate issuer:       /CN=208FFAFD8389347E0A0F0B5521884A995EB099DA
Certificate serial:       7170DEF0579E2C984657143D1C0D8C5B989E609F
Authority key identifier: 20:8F:FA:FD:83:89:34:7E:0A:0F:0B:55:21:88:4A:99:5E:B0:99:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/208FFAFD8389347E0A0F0B5521884A995EB099DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/323830343a333339383a3a2f33322d3332203d3e20323635343036.roa
Signing time:             Fri 13 Jan 2023 15:27:52 +0000
ROA not before:           Fri 13 Jan 2023 15:22:52 +0000
ROA not after:            Fri 12 Jan 2024 15:27:52 +0000
asID:                     265406
IP address blocks:        2804:3398::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:70:de:f0:57:9e:2c:98:46:57:14:3d:1c:0d:8c:5b:98:9e:60:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208FFAFD8389347E0A0F0B5521884A995EB099DA
        Validity
            Not Before: Jan 13 15:22:52 2023 GMT
            Not After : Jan 12 15:27:52 2024 GMT
        Subject: CN=A846DF80E88112A166171DC3A88748498F9C54DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:dd:81:e0:70:96:2f:30:57:53:86:79:eb:b2:
                    39:17:5e:dc:f9:b8:9d:91:ce:3b:a8:2e:5c:00:a2:
                    22:78:2a:26:65:0e:de:5d:dc:c1:a3:3c:d9:08:44:
                    34:a0:44:3e:2f:68:58:3f:da:06:9f:0a:08:26:03:
                    1e:37:d9:4f:11:8c:37:7a:46:d9:94:08:5e:a8:db:
                    ab:c3:20:87:8e:13:2b:c4:6c:02:5b:3a:c0:26:4a:
                    08:09:cf:5b:0a:c6:c9:3b:29:9e:7b:75:4e:6e:20:
                    01:3a:be:68:77:e6:86:6e:6b:58:9d:21:05:35:83:
                    8e:39:cc:a5:d3:74:e0:a9:62:7a:09:4f:4b:43:af:
                    9b:fb:4c:03:95:51:ce:44:6a:d8:1d:8c:8d:30:e1:
                    50:9e:f5:ef:e9:45:db:91:d4:24:7f:c1:ae:d2:b1:
                    a0:84:7d:dc:5f:cd:7b:3e:e8:4e:45:b7:3c:14:74:
                    4d:0f:ab:77:2e:1c:d1:18:5b:62:6e:69:56:da:3b:
                    57:d8:08:69:f1:bf:2d:c3:10:49:7b:40:1b:c6:b3:
                    c4:a4:63:67:6e:d7:58:e4:50:d6:35:de:b1:d8:00:
                    9a:97:46:b7:8b:39:5c:c4:9f:05:1a:b0:7e:88:be:
                    07:ce:dd:db:42:a8:85:31:1f:65:d2:14:6a:f8:39:
                    2f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:46:DF:80:E8:81:12:A1:66:17:1D:C3:A8:87:48:49:8F:9C:54:DA
            X509v3 Authority Key Identifier:
                keyid:20:8F:FA:FD:83:89:34:7E:0A:0F:0B:55:21:88:4A:99:5E:B0:99:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/208FFAFD8389347E0A0F0B5521884A995EB099DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/208FFAFD8389347E0A0F0B5521884A995EB099DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/323830343a333339383a3a2f33322d3332203d3e20323635343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3398::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:92:81:bd:e4:68:e1:eb:a2:c9:d9:96:75:80:00:0a:aa:06:
         6b:58:a0:9d:aa:14:7a:cd:aa:11:b8:d6:e8:ce:41:0d:82:4a:
         8b:85:81:f0:bc:1b:6d:5a:e9:15:2b:72:e1:b3:26:ff:6c:2c:
         fe:48:b2:76:90:33:20:44:96:08:a2:00:cb:71:97:0f:e0:07:
         c9:8d:a2:7d:59:45:34:bb:32:dc:47:36:30:cc:41:67:91:5e:
         d1:81:4a:dc:15:41:de:53:a7:9f:28:bd:63:ef:ac:c4:91:33:
         2f:b2:a8:4a:86:dd:56:d6:4c:95:70:91:46:43:85:43:dd:56:
         40:b9:f9:1d:7f:6c:73:3d:ba:01:60:b2:c0:60:b5:f9:b9:e0:
         45:c9:9f:6b:25:60:d0:41:81:75:cf:37:14:55:c8:8f:70:9e:
         c2:09:41:51:ce:fd:a1:6e:de:1f:a0:4b:9d:b7:ba:75:3f:db:
         0b:12:86:fa:17:78:91:ac:5b:94:8c:28:17:4a:a4:e9:3a:5a:
         37:d8:3a:79:d3:10:bb:89:2c:95:30:a7:48:26:43:d8:1f:bf:
         9d:f2:19:f1:2c:ed:19:23:3a:6b:a9:62:03:2a:d8:52:04:69:
         d2:ab:9d:1d:51:a5:b9:fb:6f:f6:ca:1e:ee:91:87:61:13:72:
         88:ba:77:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org