Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a383030303a3a2f33342d3334203d3e20323731343636.roa
File:                     323830343a376266383a383030303a3a2f33342d3334203d3e20323731343636.roa (raw, json)
Hash identifier:          MvxIqSHkO/GkkTIz3ajhmCtFs86krPnwFsEI3UJ673w=
Subject key identifier:   A2:95:64:57:19:A0:05:FB:E7:E8:03:0F:0C:71:FE:69:11:D0:AD:18
Certificate issuer:       /CN=00F57635F3A650812E4B7FA20D349EEC4B3C25E5
Certificate serial:       2CF772DAB744D4899229613DDA562A802520A0AB
Authority key identifier: 00:F5:76:35:F3:A6:50:81:2E:4B:7F:A2:0D:34:9E:EC:4B:3C:25:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00F57635F3A650812E4B7FA20D349EEC4B3C25E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a383030303a3a2f33342d3334203d3e20323731343636.roa
Signing time:             Wed 28 Feb 2024 20:15:51 +0000
ROA not before:           Wed 28 Feb 2024 20:10:51 +0000
ROA not after:            Wed 26 Feb 2025 20:15:51 +0000
asID:                     271466
IP address blocks:        2804:7bf8:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f7:72:da:b7:44:d4:89:92:29:61:3d:da:56:2a:80:25:20:a0:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00F57635F3A650812E4B7FA20D349EEC4B3C25E5
        Validity
            Not Before: Feb 28 20:10:51 2024 GMT
            Not After : Feb 26 20:15:51 2025 GMT
        Subject: CN=A295645719A005FBE7E8030F0C71FE6911D0AD18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b2:cf:06:4f:9b:9c:1f:f1:7f:b1:da:68:d4:
                    ac:1a:85:61:46:ed:9c:fa:60:23:6e:2d:33:12:d9:
                    0b:e0:7c:cc:7a:e4:50:cd:8d:60:c8:7c:72:bf:ce:
                    e0:72:12:89:07:49:95:b2:d9:18:01:28:82:26:5a:
                    d5:af:04:b5:4e:b2:e6:28:6e:7f:f8:ab:17:91:c0:
                    ae:f3:90:1c:69:16:6d:99:97:b8:a0:dd:c6:01:3f:
                    53:22:35:b2:ca:86:18:2b:aa:ca:86:0c:f8:74:12:
                    36:23:89:3c:a4:99:29:e2:3f:d5:bc:c3:89:a1:79:
                    64:5d:44:ef:82:c5:f7:51:ae:35:98:b8:ba:42:97:
                    4c:b7:83:0d:ac:ca:55:fb:0e:5a:e9:cf:27:66:99:
                    22:ec:ee:3f:48:20:b7:22:07:73:c2:de:cf:7e:16:
                    4e:d0:e6:9c:84:69:8c:68:a1:b9:5c:4e:ad:5d:bc:
                    5d:f2:97:23:06:4d:3d:5a:49:90:b0:fa:00:03:2c:
                    9c:c1:d0:23:a9:17:64:11:be:44:61:4d:e3:ce:2e:
                    3f:ee:d1:f8:8a:6b:6a:fd:bc:62:f4:a9:71:af:8c:
                    9f:81:17:cd:67:c7:43:b3:04:35:73:95:27:85:a6:
                    d5:4c:c0:cb:11:97:97:b5:41:92:3e:44:58:4d:4d:
                    d8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:95:64:57:19:A0:05:FB:E7:E8:03:0F:0C:71:FE:69:11:D0:AD:18
            X509v3 Authority Key Identifier:
                keyid:00:F5:76:35:F3:A6:50:81:2E:4B:7F:A2:0D:34:9E:EC:4B:3C:25:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/00F57635F3A650812E4B7FA20D349EEC4B3C25E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00F57635F3A650812E4B7FA20D349EEC4B3C25E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a383030303a3a2f33342d3334203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bf8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         25:6d:70:20:fa:cf:59:28:7e:55:4b:7d:e8:31:76:00:c8:3b:
         81:2b:d4:91:b7:97:9b:57:c7:09:58:9a:c0:cc:bb:f9:08:5a:
         d4:dc:92:a8:92:78:90:3b:ef:3c:95:df:7b:c2:bf:b9:d7:29:
         b8:3b:62:08:18:44:60:fa:c3:af:34:e3:6f:67:29:14:c8:65:
         83:03:40:fe:d6:86:90:2e:4d:7d:6e:dd:eb:9c:ac:c3:43:33:
         d2:cd:86:ac:80:da:9b:09:3a:79:b9:e5:08:1d:b7:f0:8f:d8:
         e3:ba:7d:0c:2e:54:0f:2d:dc:e2:b7:7e:eb:e1:3a:25:23:bd:
         ca:34:cb:93:83:36:16:5b:a3:65:b3:e9:2a:df:c1:7c:65:08:
         70:7b:f4:9b:f1:42:22:f6:88:59:29:9d:04:97:d5:c8:2e:f6:
         af:30:6d:e6:89:9f:f5:a7:25:c6:70:36:03:34:22:8a:c9:44:
         70:69:ae:de:fc:35:7a:c9:7a:fb:2b:65:7d:09:b6:e2:af:f1:
         a1:58:8e:79:9d:ed:90:13:ae:47:18:64:f0:41:fb:e5:be:99:
         9c:8e:2f:42:f8:67:2c:c9:30:5c:68:36:cd:25:07:d2:62:6d:
         bf:27:e9:9d:c1:d2:75:66:c4:f2:29:41:ac:f8:b6:5d:1f:df:
         84:6d:f4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org