Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/323830343a353235633a383030303a3a2f33362d3336203d3e20323637333839.roa
File:                     323830343a353235633a383030303a3a2f33362d3336203d3e20323637333839.roa (raw, json)
Hash identifier:          JQkoPl9FDl+t90gOdwdMbs8JoxfsZIogS5VQdvJeiag=
Subject key identifier:   FE:3C:86:93:BA:E2:DE:AB:62:73:35:CA:B8:78:AD:A6:D6:78:E6:C4
Certificate issuer:       /CN=7D41250B864CCAC75BADB9B24712630BE0F9C265
Certificate serial:       3E0461CF5ADD186D4B0C9A3A189820981E75F225
Authority key identifier: 7D:41:25:0B:86:4C:CA:C7:5B:AD:B9:B2:47:12:63:0B:E0:F9:C2:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D41250B864CCAC75BADB9B24712630BE0F9C265.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/323830343a353235633a383030303a3a2f33362d3336203d3e20323637333839.roa
Signing time:             Sat 02 Dec 2023 15:46:09 +0000
ROA not before:           Sat 02 Dec 2023 15:41:09 +0000
ROA not after:            Sat 30 Nov 2024 15:46:09 +0000
asID:                     267389
IP address blocks:        2804:525c:8000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:04:61:cf:5a:dd:18:6d:4b:0c:9a:3a:18:98:20:98:1e:75:f2:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D41250B864CCAC75BADB9B24712630BE0F9C265
        Validity
            Not Before: Dec  2 15:41:09 2023 GMT
            Not After : Nov 30 15:46:09 2024 GMT
        Subject: CN=FE3C8693BAE2DEAB627335CAB878ADA6D678E6C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cf:76:40:ac:65:7d:13:e5:be:80:f3:2c:94:
                    e8:22:a0:68:07:b5:03:0a:c7:d9:9a:8c:4d:29:b8:
                    07:ed:c7:63:41:2d:37:d6:9d:e2:04:9a:87:85:3c:
                    76:ff:47:02:93:e2:36:7e:17:fd:88:59:b2:e0:cc:
                    3a:ac:2b:cd:1a:b0:99:cd:82:60:f3:5a:6e:18:dd:
                    09:8a:43:85:02:19:5b:55:d7:1b:23:b6:19:a5:af:
                    ca:e4:7f:0b:3b:77:10:af:c0:9b:38:1b:74:81:54:
                    9d:17:aa:ca:d1:8f:03:7c:71:ec:a6:23:09:48:be:
                    df:cd:90:c7:de:65:6f:43:ac:22:f0:38:aa:aa:40:
                    2a:fb:cc:8d:e2:93:3d:7c:4f:a6:74:d1:7a:38:72:
                    ea:68:99:47:11:34:87:45:89:de:34:b3:bd:b8:57:
                    c6:34:7e:44:f8:9e:47:35:31:e6:e1:e1:bc:f3:c3:
                    51:c8:5f:f5:7c:8d:20:36:fa:bf:b6:83:d3:6c:51:
                    d1:c1:12:15:ad:05:6e:71:a5:a7:14:03:4f:74:1e:
                    bc:e3:c3:dc:41:f3:94:ff:f2:04:13:78:5d:93:81:
                    55:7b:e8:5f:32:3a:44:66:ae:d7:48:a9:ac:39:3c:
                    b2:83:f5:8b:1a:3c:c7:2c:d4:db:4a:29:d6:5b:f4:
                    5e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3C:86:93:BA:E2:DE:AB:62:73:35:CA:B8:78:AD:A6:D6:78:E6:C4
            X509v3 Authority Key Identifier:
                keyid:7D:41:25:0B:86:4C:CA:C7:5B:AD:B9:B2:47:12:63:0B:E0:F9:C2:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/7D41250B864CCAC75BADB9B24712630BE0F9C265.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D41250B864CCAC75BADB9B24712630BE0F9C265.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/323830343a353235633a383030303a3a2f33362d3336203d3e20323637333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:525c:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         19:28:2e:e1:00:4e:4e:76:fb:1c:3d:7e:71:b9:f0:fe:20:fc:
         78:a9:8a:ce:b8:b6:19:e8:8a:65:6e:c0:23:98:9c:60:1e:72:
         07:87:53:08:04:25:61:5c:ff:e7:37:7c:d4:f4:bc:28:13:5c:
         1e:99:8a:3e:34:40:4c:6a:d2:69:a9:66:fb:7b:0e:ee:e4:60:
         bf:31:fe:47:57:2d:af:cc:70:b7:52:e3:d1:c0:19:b1:a5:34:
         10:6a:e4:ed:b4:20:56:d7:b1:36:2a:cf:f2:f2:56:71:72:82:
         68:53:f4:dc:4a:fa:7a:48:3d:46:0c:81:09:cf:0d:11:f7:ce:
         ba:4a:a3:89:df:37:21:16:e8:1a:48:57:ed:29:8b:df:00:09:
         6f:8f:fd:fe:f5:2b:83:17:1b:5d:ce:b2:91:77:35:27:59:8f:
         03:03:1d:54:d9:0c:b1:59:32:62:d9:d7:f1:f0:16:40:0e:29:
         f3:80:4c:3d:56:18:1b:d0:bb:5f:aa:5e:72:99:d1:27:fe:d2:
         0b:f7:17:4e:dd:e7:ff:9d:51:12:9b:74:11:62:77:94:40:9d:
         53:dc:29:76:f0:db:2d:f5:90:33:3e:24:e6:be:70:0c:5a:eb:
         d3:78:60:d8:f4:29:4d:1d:78:18:0e:ac:78:35:38:9d:71:d8:
         09:d9:f6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org