Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/0/323830343a386566343a3a2f33322d313238203d3e20323733343538.roa
File:                     323830343a386566343a3a2f33322d313238203d3e20323733343538.roa (raw, json)
Hash identifier:          SEukqQ5ldYEDMvTnW9OPy8oLNO1X4sEhf2UdmJyYbbQ=
Subject key identifier:   FA:8B:F7:09:CB:32:F3:75:6C:B2:BE:40:A5:69:C1:92:66:CC:2B:3F
Certificate issuer:       /CN=CE6673E4E2D92D342F7617B1A3604FBF01849C9D
Certificate serial:       3536A46B78C5F7C37A85C1B81B36B8203A174095
Authority key identifier: CE:66:73:E4:E2:D9:2D:34:2F:76:17:B1:A3:60:4F:BF:01:84:9C:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE6673E4E2D92D342F7617B1A3604FBF01849C9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/0/323830343a386566343a3a2f33322d313238203d3e20323733343538.roa
Signing time:             Mon 01 Apr 2024 17:57:09 +0000
ROA not before:           Mon 01 Apr 2024 17:52:09 +0000
ROA not after:            Mon 31 Mar 2025 17:57:09 +0000
asID:                     273458
IP address blocks:        2804:8ef4::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:36:a4:6b:78:c5:f7:c3:7a:85:c1:b8:1b:36:b8:20:3a:17:40:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE6673E4E2D92D342F7617B1A3604FBF01849C9D
        Validity
            Not Before: Apr  1 17:52:09 2024 GMT
            Not After : Mar 31 17:57:09 2025 GMT
        Subject: CN=FA8BF709CB32F3756CB2BE40A569C19266CC2B3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fa:ac:75:d4:23:93:68:b0:66:18:67:04:06:
                    c7:40:b8:8e:0c:94:ba:90:dd:8e:7c:45:27:98:e0:
                    77:df:f4:82:2e:c7:34:61:c6:27:99:1b:31:7e:b8:
                    3b:01:08:da:5d:4c:93:13:8b:79:3b:04:31:63:43:
                    11:23:11:24:94:b3:d8:a5:a0:5a:fb:66:9f:92:60:
                    dc:a7:75:c0:30:32:c8:a1:24:52:16:f0:cd:8e:2d:
                    4c:ad:43:54:38:9a:4f:76:74:c9:05:f1:59:99:46:
                    54:e2:bf:fd:ac:d0:38:3e:49:11:c2:4f:90:6d:dd:
                    59:fa:ef:ca:20:a6:20:66:a9:7d:05:16:ac:3e:2a:
                    e0:ea:f6:d8:17:53:66:51:90:a4:92:33:10:49:aa:
                    a9:27:35:40:9d:8a:ec:ac:5f:a3:65:a4:7c:e1:6a:
                    09:25:fe:99:4b:38:44:67:d1:d7:84:b1:5b:3b:f9:
                    31:32:27:cd:b1:e5:9d:08:c9:4f:49:a9:6c:d1:8c:
                    cc:76:c7:d3:30:72:26:1d:59:6f:78:9a:4c:5d:6d:
                    8f:4e:ee:37:1c:7f:9f:fb:39:0e:20:8e:a6:58:60:
                    0f:98:8e:10:ab:dc:e4:ea:54:f5:83:76:81:e8:c3:
                    6b:83:be:d1:ff:a9:91:3a:00:62:a4:46:a0:a4:ce:
                    2e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8B:F7:09:CB:32:F3:75:6C:B2:BE:40:A5:69:C1:92:66:CC:2B:3F
            X509v3 Authority Key Identifier:
                keyid:CE:66:73:E4:E2:D9:2D:34:2F:76:17:B1:A3:60:4F:BF:01:84:9C:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/0/CE6673E4E2D92D342F7617B1A3604FBF01849C9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE6673E4E2D92D342F7617B1A3604FBF01849C9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/0/323830343a386566343a3a2f33322d313238203d3e20323733343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ef4::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:d5:a6:6a:5b:c6:15:26:54:18:9c:7e:09:b3:1d:ae:78:ba:
         69:9d:25:da:b9:d7:62:59:29:b9:e0:9e:e9:49:d6:13:d7:29:
         b5:c1:51:ed:7c:da:1c:13:8c:86:a2:20:0f:9a:02:c4:44:fa:
         28:92:fc:e8:55:75:5c:ba:c1:8f:31:93:1b:80:5c:d4:4c:9c:
         43:73:94:0a:ba:b1:6a:91:11:f2:64:9b:69:63:c0:e0:78:3c:
         9a:58:b7:ab:ba:38:ad:7c:94:5d:96:7c:9d:ac:9f:98:49:31:
         92:04:3f:78:4b:6c:c3:46:08:02:e7:8f:d8:d9:5c:0e:29:84:
         d8:51:10:f1:b6:12:e7:d9:2b:f1:94:b0:00:fa:f3:1f:6f:39:
         3d:80:64:c2:e0:db:f2:d2:b7:a2:bc:8e:81:3b:2b:46:39:38:
         0e:54:71:e3:5c:a7:32:eb:f6:81:eb:c8:c6:a8:38:61:74:b6:
         0b:52:b0:10:49:b6:fa:fa:e8:29:34:2a:bf:d4:4c:25:69:b3:
         88:07:a5:eb:1b:c8:38:b8:78:88:93:12:7a:f9:e1:76:3d:fb:
         24:8a:b1:e8:f4:c5:7a:2d:68:13:9c:45:dc:37:43:3f:a5:e7:
         3b:4d:94:74:f1:f6:b7:b5:81:b0:21:b1:7d:56:9b:ba:1b:f5:
         90:17:38:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org