Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3230303a3a2f34302d3430203d3e20323731343834.roa
File:                     323830343a376334303a3230303a3a2f34302d3430203d3e20323731343834.roa (raw, json)
Hash identifier:          b+HcycsNl4hkdJPKC/AXR+y5uVYf6sfTkxPxn3ebnaI=
Subject key identifier:   12:3B:AA:33:4B:EF:CC:62:A4:3E:D3:BE:AC:28:E7:EF:3E:67:D0:F9
Certificate issuer:       /CN=ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF
Certificate serial:       293409FCE929CE69701EFFF9A45EF88E3D3BB349
Authority key identifier: EC:C2:AB:C9:70:8B:74:7A:EF:EB:7A:F0:5C:21:E5:92:FD:EA:06:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3230303a3a2f34302d3430203d3e20323731343834.roa
Signing time:             Thu 01 Feb 2024 18:09:16 +0000
ROA not before:           Thu 01 Feb 2024 18:04:16 +0000
ROA not after:            Thu 30 Jan 2025 18:09:16 +0000
asID:                     271484
IP address blocks:        2804:7c40:200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:34:09:fc:e9:29:ce:69:70:1e:ff:f9:a4:5e:f8:8e:3d:3b:b3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF
        Validity
            Not Before: Feb  1 18:04:16 2024 GMT
            Not After : Jan 30 18:09:16 2025 GMT
        Subject: CN=123BAA334BEFCC62A43ED3BEAC28E7EF3E67D0F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2f:e5:8f:92:a1:9c:54:59:a2:14:94:36:aa:
                    11:d0:94:0b:36:aa:37:12:df:50:f5:71:2f:17:47:
                    b8:59:88:fc:5a:c7:21:86:5b:9f:c7:e1:17:98:2c:
                    da:19:89:7d:35:05:9e:7b:1e:56:a9:c1:be:ae:7a:
                    47:fb:0c:75:d4:27:b1:3e:25:75:35:63:49:68:eb:
                    73:1a:e6:12:4a:ee:b3:3e:6f:00:2e:e1:b3:31:89:
                    3e:40:d7:8f:d4:06:4a:ae:42:cd:3e:62:99:e5:e1:
                    0e:ca:f2:48:f4:5c:51:af:a5:f8:b3:0e:e2:0f:33:
                    f6:4b:a5:8b:3a:0f:82:9f:fd:7b:33:43:2e:92:da:
                    6a:46:71:21:02:fe:b5:16:27:ef:8e:b7:c7:a1:66:
                    de:8c:09:43:d1:e2:52:e0:75:bc:ef:1d:6b:a3:db:
                    b7:0e:f9:2d:31:91:2a:e1:eb:85:98:db:88:07:f2:
                    45:06:2a:24:69:63:58:1e:9c:85:99:1a:dc:f8:37:
                    45:54:3d:b4:9c:fd:8c:af:ab:8c:18:c8:a0:82:8d:
                    f6:a3:b3:cd:76:68:10:ec:bc:f0:0a:b1:26:77:b8:
                    ee:a8:6b:40:8f:9d:46:1b:6e:c7:5f:77:2d:7d:a8:
                    fe:ba:f1:36:a1:4c:3f:80:ce:07:f4:c6:4a:96:e4:
                    9e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3B:AA:33:4B:EF:CC:62:A4:3E:D3:BE:AC:28:E7:EF:3E:67:D0:F9
            X509v3 Authority Key Identifier:
                keyid:EC:C2:AB:C9:70:8B:74:7A:EF:EB:7A:F0:5C:21:E5:92:FD:EA:06:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3230303a3a2f34302d3430203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c40:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         10:45:07:a0:3c:27:23:33:df:50:d6:19:7c:dc:10:93:56:a3:
         71:d9:cc:05:a8:fe:a6:fa:e3:c7:ac:8b:9c:1e:16:c8:7e:6c:
         1c:3c:eb:ae:9d:01:58:88:09:44:76:0f:1a:c8:33:b6:bb:69:
         e4:50:7f:70:b1:0d:55:df:ed:7f:af:d9:9b:5e:f0:a9:f2:2c:
         0a:6d:c6:28:b5:1b:c1:a8:77:6d:1d:7f:fd:1a:77:53:cc:12:
         1c:a5:16:93:12:ab:b8:61:e6:e4:5d:b9:38:5d:65:42:bc:50:
         8a:72:3d:2a:1a:4d:06:3a:9f:7e:68:b1:b6:e8:21:86:f4:94:
         d8:79:f1:a1:41:b0:cb:b8:24:a3:18:e5:91:37:09:10:13:16:
         7b:cf:d5:2c:6e:37:6a:05:fe:f9:94:d2:90:ff:0f:8f:fc:6d:
         bb:5f:39:a7:8e:cc:07:70:a3:55:94:c4:4b:d7:74:02:70:6d:
         3a:90:07:4c:73:00:3d:89:1a:be:e7:63:1d:20:d5:a2:b7:03:
         35:31:4d:90:71:d2:a5:72:f0:d1:8c:48:b1:e3:f0:78:48:04:
         5c:e1:40:4a:0c:97:55:8b:e1:35:a4:5b:e3:f3:af:0d:c3:89:
         ac:4f:20:f5:a1:08:f4:83:8f:61:44:e3:84:ff:e1:dd:24:8e:
         54:22:cc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org