Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/323830343a323732303a383030303a3a2f33332d3333203d3e20323633383738.roa
File:                     323830343a323732303a383030303a3a2f33332d3333203d3e20323633383738.roa (raw, json)
Hash identifier:          cIR4p5Syd//lXHmMywUn7puJzPdg8L0MEqrMXXE+LYs=
Subject key identifier:   F0:AD:0B:F9:D7:7F:24:6F:36:02:22:AB:5E:92:42:F5:2A:CD:D2:1C
Certificate issuer:       /CN=3479A07990261201A4636EAD12C16D32507ECB61
Certificate serial:       2F5946C529F47A6485454A11EA61E8AAEDFDC6FA
Authority key identifier: 34:79:A0:79:90:26:12:01:A4:63:6E:AD:12:C1:6D:32:50:7E:CB:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3479A07990261201A4636EAD12C16D32507ECB61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/323830343a323732303a383030303a3a2f33332d3333203d3e20323633383738.roa
Signing time:             Tue 12 Dec 2023 14:05:06 +0000
ROA not before:           Tue 12 Dec 2023 14:00:06 +0000
ROA not after:            Tue 10 Dec 2024 14:05:06 +0000
asID:                     263878
IP address blocks:        2804:2720:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:59:46:c5:29:f4:7a:64:85:45:4a:11:ea:61:e8:aa:ed:fd:c6:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3479A07990261201A4636EAD12C16D32507ECB61
        Validity
            Not Before: Dec 12 14:00:06 2023 GMT
            Not After : Dec 10 14:05:06 2024 GMT
        Subject: CN=F0AD0BF9D77F246F360222AB5E9242F52ACDD21C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ea:81:05:ae:92:69:40:77:27:a3:b0:35:c3:
                    d8:56:26:78:5c:63:28:83:6c:87:1b:3d:af:64:fa:
                    a0:bf:51:f4:a4:73:e5:75:ae:eb:b5:32:0d:6c:2f:
                    ff:d6:81:46:d2:18:39:3f:8d:12:f5:00:65:25:83:
                    d7:2d:42:09:cc:8a:e8:3b:8b:b3:64:bd:18:3d:4b:
                    a5:e5:5c:cc:a9:fe:c5:1d:e0:05:c4:88:56:55:3a:
                    4b:06:20:14:85:84:c7:f2:e2:50:1f:4f:5d:e8:86:
                    80:3d:47:79:a5:72:0b:01:e4:34:99:67:27:bf:2b:
                    5d:d5:e6:fc:5d:00:a7:ce:27:2c:d0:2e:cf:47:50:
                    9b:88:3d:9c:94:22:9e:46:b9:ab:21:e1:61:4c:12:
                    51:ea:da:34:b6:e4:fb:5c:36:38:31:f5:fe:5c:9a:
                    7c:b8:14:b4:1a:fe:fb:e3:a9:e5:6b:4b:e5:0b:35:
                    fb:7b:1a:16:55:a2:d4:8b:a0:41:f9:2b:63:df:55:
                    4e:a9:44:56:13:12:ac:47:17:b3:55:8d:c2:0d:db:
                    fd:db:35:0a:a4:65:90:6f:61:a1:0a:f4:3c:4e:d3:
                    d3:e9:bc:07:64:fe:72:43:cc:fc:cb:ad:dd:27:64:
                    bc:be:2a:a2:85:35:85:45:b4:d1:a9:00:a8:ef:0c:
                    c4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:AD:0B:F9:D7:7F:24:6F:36:02:22:AB:5E:92:42:F5:2A:CD:D2:1C
            X509v3 Authority Key Identifier:
                keyid:34:79:A0:79:90:26:12:01:A4:63:6E:AD:12:C1:6D:32:50:7E:CB:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3479A07990261201A4636EAD12C16D32507ECB61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3479A07990261201A4636EAD12C16D32507ECB61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/323830343a323732303a383030303a3a2f33332d3333203d3e20323633383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2720:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         9f:fd:83:bd:04:c2:70:9d:16:49:a9:c2:6f:46:8f:a3:3a:aa:
         65:ae:f7:02:77:bb:92:d9:79:01:a9:87:5f:09:1c:3f:fd:c7:
         cb:79:1f:0c:11:84:3d:11:57:a6:f3:81:4c:89:8a:d0:83:c2:
         6e:9b:b3:e4:32:00:2d:5e:13:ed:7c:8a:99:f8:58:e6:c6:2c:
         97:aa:51:5f:69:57:85:5c:b8:0b:09:4b:fe:7d:b0:21:fe:c6:
         2d:10:37:09:cd:a9:56:af:69:1f:1b:5f:1a:89:78:5c:a2:aa:
         f9:8e:04:14:97:37:d9:fd:6e:c4:b7:c0:21:84:cf:fc:60:ac:
         01:3d:f1:ef:6a:83:a5:20:11:06:93:2c:15:b4:63:97:38:58:
         65:99:16:6d:b6:7b:5c:d7:39:6c:46:d3:b0:11:7b:7b:40:93:
         55:fd:eb:f9:bd:bc:54:a3:f0:90:53:2a:89:8e:70:7c:09:a1:
         45:a7:27:a0:94:e6:33:a4:76:be:fe:92:06:6c:73:83:e9:b1:
         4c:54:3d:79:e3:5c:4a:58:a3:cf:fc:b5:97:3b:d0:6f:5c:58:
         3b:b8:6f:20:7b:c8:12:59:14:b7:26:fe:1f:16:32:4b:fe:91:
         57:c7:97:fc:fd:75:09:51:8b:f8:e4:c7:14:7f:57:26:f5:c3:
         3b:1d:48:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org