Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/2/323830343a6139633a3a2f33332d3333203d3e203532383938.roa
File:                     323830343a6139633a3a2f33332d3333203d3e203532383938.roa (raw, json)
Hash identifier:          +rHxGGqti7Mc5CR7OYo5u8P/KLIeyHcsD92AgK+Y0B4=
Subject key identifier:   1E:50:99:22:84:E7:EB:EC:81:8C:C4:65:FB:5F:C2:7C:A9:06:50:F8
Certificate issuer:       /CN=F04C5BE56636FECD8FEB78C2DCA56474B81F818B
Certificate serial:       7022C92DBCF39036955B367B2096FA7A3BD1DE5B
Authority key identifier: F0:4C:5B:E5:66:36:FE:CD:8F:EB:78:C2:DC:A5:64:74:B8:1F:81:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F04C5BE56636FECD8FEB78C2DCA56474B81F818B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/2/323830343a6139633a3a2f33332d3333203d3e203532383938.roa
Signing time:             Thu 04 Apr 2024 00:44:08 +0000
ROA not before:           Thu 04 Apr 2024 00:39:08 +0000
ROA not after:            Thu 03 Apr 2025 00:44:08 +0000
asID:                     52898
IP address blocks:        2804:a9c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:22:c9:2d:bc:f3:90:36:95:5b:36:7b:20:96:fa:7a:3b:d1:de:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F04C5BE56636FECD8FEB78C2DCA56474B81F818B
        Validity
            Not Before: Apr  4 00:39:08 2024 GMT
            Not After : Apr  3 00:44:08 2025 GMT
        Subject: CN=1E50992284E7EBEC818CC465FB5FC27CA90650F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:be:a5:33:97:56:90:4a:ff:d5:a2:06:b4:90:
                    70:c5:78:8c:72:0c:d3:7f:a5:3b:11:3b:a0:fa:67:
                    c1:83:c8:06:36:bc:82:8e:9d:da:84:d6:91:e9:0f:
                    f4:cf:7c:16:35:9a:db:7d:1f:54:20:dd:94:1e:5b:
                    42:b3:f7:b3:49:a4:89:9c:c6:9e:73:db:d7:0f:98:
                    59:f2:c6:6e:c1:ee:17:1b:b4:8b:d5:b5:0c:cb:1a:
                    5d:31:e9:7b:6a:ba:65:29:dc:19:13:00:6c:53:6c:
                    62:71:5c:fe:5d:ae:2c:7d:54:0e:b8:4a:2c:82:e3:
                    77:68:75:29:b9:03:6d:4f:38:92:09:76:33:ec:91:
                    9e:d7:97:e6:6e:28:4d:ec:4a:42:e0:4e:94:a8:14:
                    17:c8:5b:93:44:dd:ab:49:51:f6:3d:ac:37:2a:a5:
                    86:21:7c:c3:28:a4:f5:46:35:02:1d:65:3a:f8:53:
                    ac:cb:5f:3e:fe:c1:99:61:8f:60:cf:fc:c2:29:8c:
                    d3:9e:10:99:9d:11:0e:13:b5:84:54:51:29:ba:c6:
                    c1:8b:aa:59:8c:4b:1a:0a:23:58:12:8b:1e:d7:32:
                    0b:ab:a1:b4:cd:32:69:3f:c6:fb:22:33:20:db:be:
                    dd:06:5c:bc:5f:83:8d:64:4e:79:c4:6b:1d:51:ba:
                    a0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:50:99:22:84:E7:EB:EC:81:8C:C4:65:FB:5F:C2:7C:A9:06:50:F8
            X509v3 Authority Key Identifier:
                keyid:F0:4C:5B:E5:66:36:FE:CD:8F:EB:78:C2:DC:A5:64:74:B8:1F:81:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/2/F04C5BE56636FECD8FEB78C2DCA56474B81F818B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F04C5BE56636FECD8FEB78C2DCA56474B81F818B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/2/323830343a6139633a3a2f33332d3333203d3e203532383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a9c::/33

    Signature Algorithm: sha256WithRSAEncryption
         69:fa:18:b0:42:c6:73:f7:ac:b1:f5:ec:ce:56:61:4c:bd:d0:
         03:d2:93:43:e5:aa:5a:9d:d0:99:e8:3e:4c:8d:f5:6b:c4:0b:
         15:02:7e:c8:bb:5b:c9:98:59:5d:f5:3c:3e:c6:a0:fb:5e:aa:
         8f:27:f6:70:09:2e:36:04:80:58:48:55:f8:03:7d:0b:10:58:
         d2:ce:9a:45:1b:89:a6:c6:01:a7:ef:8e:50:29:fe:45:b8:01:
         df:67:0d:fe:66:6d:36:f8:c7:64:36:75:51:b7:23:2a:ce:3b:
         59:f3:21:d1:c6:56:f9:1f:35:ff:b2:60:ab:eb:44:d6:43:3e:
         6b:a7:24:e2:b7:cc:dc:f4:e4:87:3d:7c:8a:58:50:75:90:05:
         30:3b:11:da:39:40:ae:a2:07:4c:14:e7:e6:9a:33:72:2c:d2:
         8d:44:1b:e9:50:20:38:d3:7a:9d:08:5e:16:c3:43:56:5c:10:
         03:da:5d:c8:7f:0c:6d:2e:74:89:9f:44:34:8c:57:77:d6:a4:
         a3:0a:80:ad:ee:f9:3f:90:75:33:4e:cb:39:57:67:f8:40:73:
         7f:6f:74:a7:13:59:15:ef:9c:cd:e6:9e:aa:73:9a:cb:31:ee:
         d3:d5:e4:0a:e7:60:68:b1:55:ea:5d:65:64:24:9b:34:45:e9:
         5b:04:43:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org