Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/323830343a336639343a383030303a3a2f33332d3333203d3e20323632343532.roa
File:                     323830343a336639343a383030303a3a2f33332d3333203d3e20323632343532.roa (raw, json)
Hash identifier:          CtuzTCcye1L1B5kfJdYLCjluYXWtRR7o90Kk9bJMLAc=
Subject key identifier:   CD:FB:C6:75:E7:8D:81:BE:FC:02:18:67:FE:B9:A8:FC:E5:B1:D6:F1
Certificate issuer:       /CN=7F3B2D35DBD8DD9564A5F7416C348BD449B93A0F
Certificate serial:       20B2D3D832DDEA35B35DAB24F8822D09F7081EA2
Authority key identifier: 7F:3B:2D:35:DB:D8:DD:95:64:A5:F7:41:6C:34:8B:D4:49:B9:3A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F3B2D35DBD8DD9564A5F7416C348BD449B93A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/323830343a336639343a383030303a3a2f33332d3333203d3e20323632343532.roa
Signing time:             Thu 09 Nov 2023 13:54:01 +0000
ROA not before:           Thu 09 Nov 2023 13:49:01 +0000
ROA not after:            Thu 07 Nov 2024 13:54:01 +0000
asID:                     262452
IP address blocks:        2804:3f94:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:b2:d3:d8:32:dd:ea:35:b3:5d:ab:24:f8:82:2d:09:f7:08:1e:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F3B2D35DBD8DD9564A5F7416C348BD449B93A0F
        Validity
            Not Before: Nov  9 13:49:01 2023 GMT
            Not After : Nov  7 13:54:01 2024 GMT
        Subject: CN=CDFBC675E78D81BEFC021867FEB9A8FCE5B1D6F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:63:04:eb:b1:28:6b:1d:74:2b:d3:d2:c1:1a:
                    75:50:f3:d3:12:bd:93:ac:24:67:f0:de:b9:4d:fc:
                    fd:2f:82:56:af:04:07:39:4b:b6:38:54:0b:a3:bd:
                    b2:4c:83:96:bb:9c:57:cf:94:d7:b5:a8:d2:53:37:
                    46:05:06:fc:25:40:b4:61:d5:15:ef:9c:1a:bd:3b:
                    56:14:64:6f:08:1d:82:25:2e:56:b6:02:9b:53:b5:
                    f8:d6:c8:07:26:89:e9:60:74:fd:47:44:66:b8:25:
                    7a:80:57:4d:1c:72:26:3f:37:8d:36:8d:69:d9:3e:
                    31:10:0a:23:a4:a5:a6:ac:6d:72:bb:53:c6:71:21:
                    2b:18:c4:ad:5c:e6:51:fe:a6:c2:ba:3d:c6:cb:23:
                    a2:25:4f:35:2d:d2:cd:b7:68:34:55:af:e1:f5:04:
                    a9:cb:cd:29:36:bd:76:34:53:8e:9c:0a:75:49:f8:
                    42:9a:e6:b1:3e:3d:62:69:84:d2:2d:c1:91:64:e2:
                    e4:f1:2b:94:b3:31:37:22:13:f4:e0:e8:12:9c:3d:
                    8f:9c:68:bd:fd:e3:6a:ac:69:3e:2f:20:7e:69:ef:
                    d7:fc:1b:00:76:c1:a5:1b:30:b2:3f:81:b2:2d:37:
                    c6:db:a8:02:07:36:77:21:7a:53:93:b3:f3:b6:db:
                    00:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:FB:C6:75:E7:8D:81:BE:FC:02:18:67:FE:B9:A8:FC:E5:B1:D6:F1
            X509v3 Authority Key Identifier:
                keyid:7F:3B:2D:35:DB:D8:DD:95:64:A5:F7:41:6C:34:8B:D4:49:B9:3A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/7F3B2D35DBD8DD9564A5F7416C348BD449B93A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F3B2D35DBD8DD9564A5F7416C348BD449B93A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/323830343a336639343a383030303a3a2f33332d3333203d3e20323632343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f94:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         ef:3c:8c:54:87:08:8c:c1:64:97:d9:7e:99:ad:f5:a8:6c:78:
         b6:34:19:67:48:a9:d8:0c:ab:13:5c:f3:bb:c5:40:02:45:52:
         a7:40:0d:83:e5:a8:d6:ba:72:dc:48:76:c0:fa:f4:03:1b:38:
         41:0a:e2:85:6d:2d:53:ef:27:bc:dc:bb:8e:42:04:46:a0:3c:
         ab:e6:b7:56:7f:b4:67:b8:0d:14:35:8a:eb:53:10:86:cb:9f:
         cc:ce:b3:57:72:8a:93:2d:a5:c6:7a:b4:9e:c2:7a:51:af:c1:
         30:ec:53:be:b2:34:84:6e:d0:29:42:01:5c:0b:bf:a1:43:1d:
         14:e7:a8:bd:8b:6e:b8:60:be:d4:f8:b9:93:ff:b4:c3:ce:37:
         83:46:b7:7d:83:37:9c:e5:67:11:9a:00:50:4e:fa:c2:7b:50:
         26:a3:be:6d:b7:bc:0a:8c:33:d6:44:ad:b2:da:78:d2:bd:7b:
         95:c2:ec:53:ee:d8:b9:cb:23:e5:a9:c8:48:e5:77:e4:69:c7:
         a2:a1:54:6f:be:2e:18:82:a5:9a:c5:39:cc:da:ae:c8:7c:3b:
         66:be:e4:4f:19:1e:c7:05:8c:a7:1d:36:b4:3f:a0:3e:68:81:
         67:b0:b7:fb:a0:f6:18:04:f1:fe:f1:b2:2f:c2:67:c3:0a:5d:
         d3:2f:f4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org