Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/1/323830343a383333633a383030303a3a2f33332d3333203d3e20323732313835.roa
File:                     323830343a383333633a383030303a3a2f33332d3333203d3e20323732313835.roa (raw, json)
Hash identifier:          SPIesmo4ALU8BZ0AOdhSb8ZY5LV9MPfRoSNFvYWJ1jQ=
Subject key identifier:   AD:DF:CA:0F:A8:C6:F3:02:49:F8:32:10:A9:1B:79:1E:42:38:8C:AC
Certificate issuer:       /CN=06F41C467498C83DCD58365909CB1B1CDF4E4E34
Certificate serial:       7AB26AEB53867C418A27B1401FDEA147B3003377
Authority key identifier: 06:F4:1C:46:74:98:C8:3D:CD:58:36:59:09:CB:1B:1C:DF:4E:4E:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06F41C467498C83DCD58365909CB1B1CDF4E4E34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/1/323830343a383333633a383030303a3a2f33332d3333203d3e20323732313835.roa
Signing time:             Mon 19 Jun 2023 18:41:38 +0000
ROA not before:           Mon 19 Jun 2023 18:36:38 +0000
ROA not after:            Mon 17 Jun 2024 18:41:38 +0000
asID:                     272185
IP address blocks:        2804:833c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b2:6a:eb:53:86:7c:41:8a:27:b1:40:1f:de:a1:47:b3:00:33:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06F41C467498C83DCD58365909CB1B1CDF4E4E34
        Validity
            Not Before: Jun 19 18:36:38 2023 GMT
            Not After : Jun 17 18:41:38 2024 GMT
        Subject: CN=3082010A0282010100F21B59DFBA3ABB55EF8D246B622D55E9E89A0D82C2B18C84FBF779B9C71E77DDEE6E51A8A74231E1784378EC3DC5855C80C50781829C0B0261020C2B3F15FBBB3F2E750E09FE601C68232E20247C6802EFA85D531D30C9C4DFE662ABD8AC12D53CF7A17541DB02367BA5D93A8CF531AA93133F4111EAEBCA58A95A49212CA6547F0A44608C9957CF365B7EDE4915352CDDA6A72A6019ABD3F8E54F6518F06E6110885CE988657A5E0A234DE287FB09BD0D049621CC707817559B2845C566255F65238586EBE1F07F4D8638C317922F1715E3C21F68D0F5D98DBFF58763EDFC64CD11696A68D8AE8659D10F72DA0564EF2ABF2AE2BA1BCFD0107073535502F0290203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:1b:59:df:ba:3a:bb:55:ef:8d:24:6b:62:2d:
                    55:e9:e8:9a:0d:82:c2:b1:8c:84:fb:f7:79:b9:c7:
                    1e:77:dd:ee:6e:51:a8:a7:42:31:e1:78:43:78:ec:
                    3d:c5:85:5c:80:c5:07:81:82:9c:0b:02:61:02:0c:
                    2b:3f:15:fb:bb:3f:2e:75:0e:09:fe:60:1c:68:23:
                    2e:20:24:7c:68:02:ef:a8:5d:53:1d:30:c9:c4:df:
                    e6:62:ab:d8:ac:12:d5:3c:f7:a1:75:41:db:02:36:
                    7b:a5:d9:3a:8c:f5:31:aa:93:13:3f:41:11:ea:eb:
                    ca:58:a9:5a:49:21:2c:a6:54:7f:0a:44:60:8c:99:
                    57:cf:36:5b:7e:de:49:15:35:2c:dd:a6:a7:2a:60:
                    19:ab:d3:f8:e5:4f:65:18:f0:6e:61:10:88:5c:e9:
                    88:65:7a:5e:0a:23:4d:e2:87:fb:09:bd:0d:04:96:
                    21:cc:70:78:17:55:9b:28:45:c5:66:25:5f:65:23:
                    85:86:eb:e1:f0:7f:4d:86:38:c3:17:92:2f:17:15:
                    e3:c2:1f:68:d0:f5:d9:8d:bf:f5:87:63:ed:fc:64:
                    cd:11:69:6a:68:d8:ae:86:59:d1:0f:72:da:05:64:
                    ef:2a:bf:2a:e2:ba:1b:cf:d0:10:70:73:53:55:02:
                    f0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DF:CA:0F:A8:C6:F3:02:49:F8:32:10:A9:1B:79:1E:42:38:8C:AC
            X509v3 Authority Key Identifier:
                keyid:06:F4:1C:46:74:98:C8:3D:CD:58:36:59:09:CB:1B:1C:DF:4E:4E:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/1/06F41C467498C83DCD58365909CB1B1CDF4E4E34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06F41C467498C83DCD58365909CB1B1CDF4E4E34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/1/323830343a383333633a383030303a3a2f33332d3333203d3e20323732313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:833c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         c0:4e:9f:ae:98:f9:34:7f:b8:b8:09:67:b0:5e:71:09:db:50:
         11:d1:40:94:d0:eb:2a:e1:d2:0f:a6:4b:63:a8:50:40:ac:a3:
         20:02:3a:b8:50:ec:e9:14:eb:67:ae:b4:7b:7b:31:c7:79:e0:
         ce:38:77:90:e8:27:e8:36:d8:b9:19:85:09:1d:f8:9d:ae:da:
         39:5d:50:f0:7b:1d:e4:10:d1:a4:11:31:c0:bd:cd:99:79:c4:
         33:47:d8:b4:6e:0b:8b:9d:56:6a:cf:f9:35:37:0b:d9:09:ba:
         43:fa:ec:2a:47:31:9f:97:4b:2d:75:1e:b9:5d:ce:d6:fb:6f:
         da:bc:55:03:f6:f5:a6:fa:9c:c2:e3:44:b4:4e:6b:fd:fd:01:
         ab:74:dd:16:7c:31:c7:ea:0b:06:1d:9a:f1:d0:cb:73:4c:9b:
         26:32:af:30:f4:11:54:e9:0c:99:72:94:df:bf:da:3d:43:d7:
         50:07:65:5c:d8:b2:f9:66:0e:4f:e7:97:83:84:cc:32:e5:c9:
         50:0b:30:ee:9c:ba:0d:a3:6c:16:5d:9a:6a:d0:a5:ea:16:c3:
         63:b7:82:1b:f7:58:de:7e:40:e1:0b:1a:1a:1a:3b:ab:98:b3:
         36:36:3b:ab:30:16:a1:b0:1e:d9:58:e9:74:ac:c4:39:f8:c9:
         d8:18:b9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org