Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/323830343a373363303a383030303a3a2f33342d3334203d3e20323730393335.roa
File:                     323830343a373363303a383030303a3a2f33342d3334203d3e20323730393335.roa (raw, json)
Hash identifier:          5eFXtsuNfG790UkKZ09HKhCBhqFr9t70w5kxWJASVzg=
Subject key identifier:   CA:A4:40:B3:29:11:36:34:D9:77:63:77:A1:8F:05:58:F7:B3:5F:91
Certificate issuer:       /CN=F2CB4D8C555C5C75560EAC12733A3547001E9332
Certificate serial:       71A3E0DE8E4087B3058D16D76FC25AF67BB8BEE1
Authority key identifier: F2:CB:4D:8C:55:5C:5C:75:56:0E:AC:12:73:3A:35:47:00:1E:93:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CB4D8C555C5C75560EAC12733A3547001E9332.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/323830343a373363303a383030303a3a2f33342d3334203d3e20323730393335.roa
Signing time:             Fri 02 Jun 2023 14:54:01 +0000
ROA not before:           Fri 02 Jun 2023 14:49:01 +0000
ROA not after:            Fri 31 May 2024 14:54:01 +0000
asID:                     270935
IP address blocks:        2804:73c0:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a3:e0:de:8e:40:87:b3:05:8d:16:d7:6f:c2:5a:f6:7b:b8:be:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CB4D8C555C5C75560EAC12733A3547001E9332
        Validity
            Not Before: Jun  2 14:49:01 2023 GMT
            Not After : May 31 14:54:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b7:e0:00:e5:3d:87:8b:33:c9:cc:dd:5d:dc:
                    3d:af:1f:53:f0:43:5b:db:9e:e5:b4:56:98:0d:fa:
                    72:6a:a2:ae:dd:00:9d:97:a0:d0:4a:37:17:1c:a6:
                    78:8e:5f:29:8d:4a:5d:39:e7:99:c4:10:70:7e:bf:
                    6c:16:8e:50:32:aa:4f:45:ca:d1:c9:cc:7b:f4:75:
                    ee:2d:6b:9f:bf:80:b7:6a:50:b0:d3:0d:89:43:66:
                    07:32:6a:5a:4f:dd:e5:4f:93:8a:4e:6c:fe:e5:21:
                    36:08:21:88:4c:09:67:71:28:27:49:2e:ba:11:58:
                    29:ee:8a:2a:45:c2:55:bd:fc:0b:fa:c9:26:c2:37:
                    3d:8a:4c:1e:13:20:cd:af:13:54:26:67:21:0a:a4:
                    2a:3c:f3:d7:15:d3:0a:9a:81:66:6d:7e:4e:eb:23:
                    1c:dd:a2:f3:21:0f:69:24:f7:7e:89:33:38:6a:8f:
                    12:3b:52:8a:8b:70:b4:56:df:70:24:83:f2:49:20:
                    52:c4:e8:9a:eb:cf:75:5b:78:12:3a:77:7c:16:49:
                    72:72:d4:8d:e1:be:9f:75:9c:ee:bf:dd:31:e2:69:
                    5a:73:68:31:09:7e:bc:54:1a:b7:45:6a:ee:19:1a:
                    51:69:4b:2f:59:e1:42:c3:21:2a:13:3a:6b:3e:ae:
                    7a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A4:40:B3:29:11:36:34:D9:77:63:77:A1:8F:05:58:F7:B3:5F:91
            X509v3 Authority Key Identifier:
                keyid:F2:CB:4D:8C:55:5C:5C:75:56:0E:AC:12:73:3A:35:47:00:1E:93:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/F2CB4D8C555C5C75560EAC12733A3547001E9332.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CB4D8C555C5C75560EAC12733A3547001E9332.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/323830343a373363303a383030303a3a2f33342d3334203d3e20323730393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73c0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         84:3c:4a:fa:08:44:7c:b0:8c:00:3a:de:a1:8b:53:51:54:8a:
         f6:44:18:c1:50:82:d6:fd:a1:9d:22:62:c4:cb:3f:74:6f:05:
         dc:8a:b9:f2:08:e3:02:07:f9:cf:b5:b4:ec:ee:4f:4e:3b:77:
         34:fc:12:af:99:72:27:ec:b4:f5:0f:d2:32:90:54:ef:71:03:
         47:21:b0:f2:1e:0b:02:bf:46:86:1b:b7:1e:df:b7:ca:e8:dd:
         f3:9d:6e:d8:be:bf:e8:f4:cd:53:dc:bc:24:79:e4:64:e0:a8:
         aa:a1:a6:61:d2:e8:56:9a:b1:04:a2:d9:e2:8f:9f:a5:70:f2:
         b1:50:14:28:f4:ac:e7:eb:19:c9:d8:7b:f9:35:80:f7:d8:96:
         11:db:a3:af:92:c9:ca:a5:b2:f4:34:33:1a:63:75:a4:53:c1:
         9c:49:aa:e4:39:7c:1a:4d:6e:a0:cb:b6:67:4d:b1:58:b5:f6:
         1a:ca:3a:7c:eb:8c:8f:77:6e:86:35:47:d1:9f:e2:51:af:c4:
         82:fe:72:f1:ce:cf:67:7c:01:6a:f6:7d:83:c3:3b:7c:c0:33:
         da:97:f0:b9:da:65:eb:2d:1f:57:fd:d7:6c:61:b4:f1:2b:6b:
         74:ca:ee:da:6c:97:d7:3e:2d:36:60:1a:0d:85:c8:24:ab:aa:
         b1:20:af:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org