Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/2/323830343a6139633a3a2f33322d3332203d3e203532383938.roa
File:                     323830343a6139633a3a2f33322d3332203d3e203532383938.roa (raw, json)
Hash identifier:          sBeYN7Nk88s8JR9CoStLsUWwbfAkX6ydHuRUqIu/LGE=
Subject key identifier:   11:67:48:94:0E:48:62:8B:3A:F0:CF:A3:6D:39:37:B4:5B:4A:16:A2
Certificate issuer:       /CN=F04C5BE56636FECD8FEB78C2DCA56474B81F818B
Certificate serial:       0849D6BE399DAE202DA40C51B66241BACA6893A6
Authority key identifier: F0:4C:5B:E5:66:36:FE:CD:8F:EB:78:C2:DC:A5:64:74:B8:1F:81:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F04C5BE56636FECD8FEB78C2DCA56474B81F818B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/2/323830343a6139633a3a2f33322d3332203d3e203532383938.roa
Signing time:             Thu 04 Apr 2024 00:44:08 +0000
ROA not before:           Thu 04 Apr 2024 00:39:08 +0000
ROA not after:            Thu 03 Apr 2025 00:44:08 +0000
asID:                     52898
IP address blocks:        2804:a9c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:49:d6:be:39:9d:ae:20:2d:a4:0c:51:b6:62:41:ba:ca:68:93:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F04C5BE56636FECD8FEB78C2DCA56474B81F818B
        Validity
            Not Before: Apr  4 00:39:08 2024 GMT
            Not After : Apr  3 00:44:08 2025 GMT
        Subject: CN=116748940E48628B3AF0CFA36D3937B45B4A16A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e4:5f:76:3e:2a:91:b9:a8:74:d4:ba:25:4d:
                    32:e0:ae:29:1e:24:9b:25:6e:60:a5:02:99:4e:52:
                    28:f9:a3:3f:15:a3:e6:2c:15:a4:d0:b8:2b:01:98:
                    20:aa:3e:c2:b6:90:cb:17:44:85:d7:55:d8:4c:13:
                    31:4a:7b:27:02:54:ea:8f:e6:49:4c:c2:51:97:f7:
                    03:70:4c:e0:6c:53:8b:dd:01:69:fc:84:4e:68:38:
                    a6:73:0f:33:0b:cd:69:24:1c:38:e2:7b:0c:21:bd:
                    71:93:0f:56:08:e2:c4:35:8a:c8:97:33:af:5d:1d:
                    11:2c:e6:0c:11:29:27:fe:f5:e5:cc:8c:88:6a:a2:
                    79:64:59:54:c9:97:51:09:14:9b:6c:33:55:9d:83:
                    82:61:51:b2:8a:fa:ab:d2:60:b0:f0:ba:8d:95:f5:
                    52:24:ea:5e:06:06:37:09:be:74:95:40:b9:1a:fa:
                    90:01:70:1b:de:32:ee:56:dd:55:df:7b:b2:42:e6:
                    6d:4a:d0:70:06:51:11:de:b5:92:15:29:49:89:49:
                    e1:01:02:86:68:7c:92:80:04:de:c0:11:f0:1d:34:
                    8e:97:3c:6f:85:15:72:b7:f0:c1:25:4d:9a:98:e3:
                    a9:d3:e0:ee:48:9f:f1:9d:e1:a8:55:94:1e:29:c3:
                    d7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:67:48:94:0E:48:62:8B:3A:F0:CF:A3:6D:39:37:B4:5B:4A:16:A2
            X509v3 Authority Key Identifier:
                keyid:F0:4C:5B:E5:66:36:FE:CD:8F:EB:78:C2:DC:A5:64:74:B8:1F:81:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/2/F04C5BE56636FECD8FEB78C2DCA56474B81F818B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F04C5BE56636FECD8FEB78C2DCA56474B81F818B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/2/323830343a6139633a3a2f33322d3332203d3e203532383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a9c::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:8b:6d:6f:1d:7d:b7:7f:28:f2:10:74:15:7e:5c:df:c7:68:
         c1:d9:59:b8:a6:66:43:b0:ea:b6:c3:d2:96:f8:bc:d9:dc:f9:
         08:61:ff:30:82:a6:7e:03:b1:d6:46:50:45:10:7a:69:ad:83:
         74:3b:53:32:8e:4e:f2:14:73:e1:ef:74:92:bf:c5:95:37:c8:
         e0:34:ce:47:ac:f6:4e:cf:46:69:ab:d7:97:29:0d:01:5f:0e:
         f4:a4:40:20:cf:ee:1f:3f:61:7b:f8:fd:50:ae:d8:e8:6a:74:
         cc:d4:9f:70:ff:c7:f3:41:a7:41:6a:60:36:f5:5d:da:0b:bb:
         d4:55:ec:23:46:5b:93:01:e6:3b:50:e4:e6:80:a0:6d:18:ef:
         21:f3:29:4e:d9:6f:bc:35:b1:98:25:76:76:7b:6f:85:8b:d4:
         35:6d:e7:6d:4e:13:d9:8f:b7:89:12:12:d0:3f:10:93:ba:49:
         28:68:40:37:de:6d:32:71:5f:97:e0:eb:58:17:ff:54:25:2c:
         92:2c:77:56:66:2c:a9:d9:e9:35:41:1a:e2:8f:f2:9d:8d:f6:
         3d:21:68:14:07:23:da:8d:01:f4:6b:74:84:8e:2f:40:74:b8:
         1a:c9:6a:fc:d1:57:c8:f0:01:f7:57:06:73:3a:ff:38:e9:19:
         f6:9a:b7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org