Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/323830343a383162303a3a2f33322d3438203d3e20323732343730.roa
File:                     323830343a383162303a3a2f33322d3438203d3e20323732343730.roa (raw, json)
Hash identifier:          IBps2glVYGNt6u5qaNkm96BSgrr/KDeln4+HBM4xLhw=
Subject key identifier:   83:53:C8:35:81:EF:3A:D8:A4:67:C1:4B:CF:0A:51:7F:02:0C:07:06
Certificate issuer:       /CN=F7F6A71E49F1F3B065858A411F3D9669A240EA4E
Certificate serial:       3BB2815FAF887BA98409BA66F0A899645609B8CF
Authority key identifier: F7:F6:A7:1E:49:F1:F3:B0:65:85:8A:41:1F:3D:96:69:A2:40:EA:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F7F6A71E49F1F3B065858A411F3D9669A240EA4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/323830343a383162303a3a2f33322d3438203d3e20323732343730.roa
Signing time:             Mon 18 Mar 2024 15:00:44 +0000
ROA not before:           Mon 18 Mar 2024 14:55:44 +0000
ROA not after:            Mon 17 Mar 2025 15:00:44 +0000
asID:                     272470
IP address blocks:        2804:81b0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b2:81:5f:af:88:7b:a9:84:09:ba:66:f0:a8:99:64:56:09:b8:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7F6A71E49F1F3B065858A411F3D9669A240EA4E
        Validity
            Not Before: Mar 18 14:55:44 2024 GMT
            Not After : Mar 17 15:00:44 2025 GMT
        Subject: CN=8353C83581EF3AD8A467C14BCF0A517F020C0706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7a:4d:af:a6:31:c2:e3:70:bf:4f:d2:57:a3:
                    f1:98:f7:c8:61:eb:02:eb:7a:c1:c6:2a:91:46:f8:
                    f5:c3:6e:26:c6:5c:78:32:61:cf:a1:71:3a:41:20:
                    6c:17:06:db:e2:33:86:3e:a5:8b:87:3a:bf:dd:fa:
                    d4:95:a3:69:70:65:6f:77:59:90:d1:e4:7e:4c:a7:
                    c6:24:4b:3c:e2:0a:73:f3:ea:4a:96:90:9a:99:d2:
                    d2:47:91:fb:ac:b8:32:5d:5e:57:b5:aa:54:94:b8:
                    3c:3c:70:8d:3f:b1:2b:cd:43:43:ed:67:aa:48:95:
                    ae:70:30:2a:76:3c:c6:bc:51:45:06:a1:f0:09:67:
                    fd:37:8a:a3:0f:b5:3a:ed:82:1c:c2:d3:17:a7:f6:
                    b9:7f:9f:53:a2:c3:a8:55:d7:7d:dd:0c:58:6f:01:
                    a1:6f:89:d1:95:8d:62:f9:79:eb:e0:f7:73:18:9e:
                    44:d7:31:3b:d9:89:6d:d4:5d:56:d2:5d:4e:28:bc:
                    62:33:8d:88:da:8c:bb:db:bb:64:28:fd:fa:aa:2a:
                    db:98:90:c2:5d:a9:2d:d6:5d:79:45:d7:cf:f4:fa:
                    d7:98:e9:e2:24:b9:bc:3f:a3:37:eb:d6:a7:37:09:
                    2a:32:00:86:24:c2:79:51:c5:c5:c7:e7:4d:03:ee:
                    b1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:53:C8:35:81:EF:3A:D8:A4:67:C1:4B:CF:0A:51:7F:02:0C:07:06
            X509v3 Authority Key Identifier:
                keyid:F7:F6:A7:1E:49:F1:F3:B0:65:85:8A:41:1F:3D:96:69:A2:40:EA:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/F7F6A71E49F1F3B065858A411F3D9669A240EA4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F7F6A71E49F1F3B065858A411F3D9669A240EA4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/323830343a383162303a3a2f33322d3438203d3e20323732343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:81b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:73:0a:5b:c6:ac:da:0e:52:13:3f:c6:bf:f4:a5:71:cc:3b:
         14:50:43:67:57:79:72:64:e2:4d:5e:ab:c2:a0:59:88:72:9f:
         91:44:c2:2a:11:44:5b:5f:df:23:ca:ec:38:c4:91:61:1f:6a:
         aa:72:61:0f:95:d9:a5:2a:d5:f4:16:33:d3:4b:3d:c2:b7:47:
         7f:c3:57:28:af:58:78:b3:f7:e3:f6:8f:c0:4a:88:6c:b4:b4:
         c3:02:71:61:54:63:97:e0:b1:c9:e4:51:45:35:d2:e0:ec:0f:
         dd:0d:6c:65:aa:5b:aa:ee:82:b8:5d:c1:7b:bb:b2:42:79:74:
         3b:c8:3f:21:0d:24:68:a3:1c:c0:f7:3a:62:f1:b7:17:2d:2c:
         5e:d3:fd:db:41:9b:88:ce:aa:16:78:54:71:b0:a0:89:48:6e:
         8f:d2:60:a5:08:f5:e1:4a:97:42:11:f5:2c:f3:0e:c7:5b:49:
         9f:39:a7:81:2f:2f:21:fc:b7:b1:fc:e0:7a:80:0d:37:d6:fc:
         e2:e7:06:4a:2e:c4:f8:1a:51:5d:13:a3:ee:ed:52:c6:86:64:
         bd:93:05:09:b7:0e:6b:92:47:9e:f2:f1:af:e7:19:6b:cc:e6:
         b9:b5:e0:68:e8:1e:80:d6:c0:fb:ec:cb:1a:4a:17:50:6f:c7:
         93:ca:45:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org