Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/323830343a373363303a6330303a3a2f33382d3338203d3e20323730393335.roa
File:                     323830343a373363303a6330303a3a2f33382d3338203d3e20323730393335.roa (raw, json)
Hash identifier:          LcZlH5IVfqXOQxNqL9KBg+ltUoG9/W/ojApoP6auutg=
Subject key identifier:   7D:1D:4D:A5:C3:F2:7F:4C:A2:BD:69:B8:47:9C:A1:9E:C3:D9:58:74
Certificate issuer:       /CN=F2CB4D8C555C5C75560EAC12733A3547001E9332
Certificate serial:       35CD8CD03A49B877DF13985C4F246CCD9491A730
Authority key identifier: F2:CB:4D:8C:55:5C:5C:75:56:0E:AC:12:73:3A:35:47:00:1E:93:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CB4D8C555C5C75560EAC12733A3547001E9332.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/323830343a373363303a6330303a3a2f33382d3338203d3e20323730393335.roa
Signing time:             Wed 09 Feb 2022 00:40:00 +0000
ROA not before:           Wed 09 Feb 2022 00:35:00 +0000
ROA not after:            Wed 08 Feb 2023 00:40:00 +0000
asID:                     270935
IP address blocks:        2804:73c0:c00::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:cd:8c:d0:3a:49:b8:77:df:13:98:5c:4f:24:6c:cd:94:91:a7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CB4D8C555C5C75560EAC12733A3547001E9332
        Validity
            Not Before: Feb  9 00:35:00 2022 GMT
            Not After : Feb  8 00:40:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:04:ad:fc:48:7e:e9:35:d4:78:b1:d9:88:65:
                    d7:39:cb:dd:10:62:45:b9:e9:d7:cc:69:68:61:4d:
                    8c:63:d3:99:6a:35:97:2e:22:5f:78:9c:38:f5:59:
                    92:45:ca:a6:19:f1:9f:35:eb:3f:4b:87:f5:5c:a9:
                    d4:c7:8c:f4:69:65:48:ba:d5:3a:18:f5:0d:d1:54:
                    80:4e:81:6e:7b:e9:ce:61:4b:17:97:55:f3:37:c4:
                    23:ed:6e:d5:ad:f8:5d:ef:75:c2:dd:fa:19:22:2d:
                    a7:3a:2f:db:1b:56:a0:76:50:3b:02:74:70:6e:2e:
                    c9:87:14:5a:82:4a:c7:61:8b:5c:46:52:c0:60:15:
                    db:4d:21:25:74:d1:0a:7f:fe:7d:a1:4e:ad:20:18:
                    24:cb:4c:5b:16:f4:97:76:04:98:19:af:74:43:1b:
                    3c:21:e2:40:af:e6:87:cb:7a:b0:f0:66:d1:dc:16:
                    27:cc:d6:9d:14:48:19:7d:16:08:cd:35:04:fd:d3:
                    2c:25:ec:5b:2f:51:25:8f:5f:ce:bd:8d:d7:c4:0c:
                    0b:8f:c9:b1:2c:d8:ba:bb:7b:51:d5:ae:8f:90:66:
                    ba:99:b2:10:80:37:e2:72:54:cf:78:d6:ec:29:fa:
                    a0:96:7e:91:4d:34:17:31:91:0f:df:04:5b:0f:58:
                    dc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:1D:4D:A5:C3:F2:7F:4C:A2:BD:69:B8:47:9C:A1:9E:C3:D9:58:74
            X509v3 Authority Key Identifier:
                keyid:F2:CB:4D:8C:55:5C:5C:75:56:0E:AC:12:73:3A:35:47:00:1E:93:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/F2CB4D8C555C5C75560EAC12733A3547001E9332.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CB4D8C555C5C75560EAC12733A3547001E9332.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/323830343a373363303a6330303a3a2f33382d3338203d3e20323730393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73c0:c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         02:e3:c0:5c:4e:30:5d:d3:a0:0a:cc:ab:c4:21:1f:fd:59:6e:
         79:1f:c4:61:df:f6:9c:9b:4d:b5:b0:fd:9c:1e:eb:53:91:22:
         49:2e:7f:e5:c8:80:be:59:b0:04:b9:5e:37:b5:36:36:7d:a3:
         6f:b7:1e:c3:70:aa:97:ec:ad:2b:d8:ef:f3:ab:4a:10:f0:87:
         97:d0:3c:1a:d8:bf:e2:0a:04:a7:fe:1e:7f:d3:29:81:eb:d9:
         e2:d1:7a:a4:ec:11:ac:ef:b8:4d:2c:5b:ac:94:de:72:3e:68:
         7e:4d:b9:aa:5c:c6:e6:14:32:71:d7:22:e5:12:23:10:65:74:
         af:c5:84:5e:87:e3:26:c9:58:00:d8:84:44:b6:db:5a:bb:82:
         19:48:ad:b4:49:81:98:c4:fe:c1:2b:cb:77:be:08:a8:b7:00:
         7d:45:cc:5f:b4:32:ee:ea:54:3a:a5:77:40:2d:d7:c1:8e:9b:
         b4:5b:63:d9:60:8c:df:c7:36:91:d9:2a:fc:f1:8f:9f:2a:b0:
         02:b6:6d:c1:0c:fb:3b:99:08:6e:75:dd:32:ed:e5:5b:38:4a:
         2a:9d:f7:77:30:86:4e:e2:58:e7:4f:b7:bd:c1:60:59:a1:cd:
         66:05:b5:ef:5e:c0:f9:cf:89:7a:5b:99:46:30:ab:93:8d:32:
         36:c1:04:4c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org