Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6213qiFXd9Eewa92b9fKD1ezJ3hrqXep6SBPuMva4V5f/1/323830343a323764633a3a2f33322d3438203d3e20323633393236.roa
File:                     323830343a323764633a3a2f33322d3438203d3e20323633393236.roa (raw, json)
Hash identifier:          R44kZUzVDnl7n34NUhybqYtZwldGlSgplaxezVHEWCE=
Subject key identifier:   91:D9:89:F9:AE:A2:18:50:D6:0E:68:2D:8A:9D:2A:3D:9C:CE:52:5F
Certificate issuer:       /CN=F2F9AC7268555302AF30F54A7F45D44170882390
Certificate serial:       6009AB1DB28E4244A8DC5EBE370F6DB98D820DF2
Authority key identifier: F2:F9:AC:72:68:55:53:02:AF:30:F5:4A:7F:45:D4:41:70:88:23:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2F9AC7268555302AF30F54A7F45D44170882390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6213qiFXd9Eewa92b9fKD1ezJ3hrqXep6SBPuMva4V5f/1/323830343a323764633a3a2f33322d3438203d3e20323633393236.roa
Signing time:             Thu 04 Apr 2024 10:37:57 +0000
ROA not before:           Thu 04 Apr 2024 10:32:57 +0000
ROA not after:            Thu 03 Apr 2025 10:37:57 +0000
asID:                     263926
IP address blocks:        2804:27dc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:09:ab:1d:b2:8e:42:44:a8:dc:5e:be:37:0f:6d:b9:8d:82:0d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2F9AC7268555302AF30F54A7F45D44170882390
        Validity
            Not Before: Apr  4 10:32:57 2024 GMT
            Not After : Apr  3 10:37:57 2025 GMT
        Subject: CN=91D989F9AEA21850D60E682D8A9D2A3D9CCE525F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:eb:cd:61:d0:36:6c:3f:b6:4f:06:1c:06:d8:
                    6c:03:ef:10:ec:3a:63:f2:8e:20:41:de:a9:9a:e1:
                    f5:19:45:f4:be:61:7e:7b:24:9a:c6:71:de:57:fb:
                    c3:1e:bc:e8:d5:84:2d:a0:4b:29:bf:19:4e:da:8a:
                    0e:03:32:51:dd:24:5b:8e:b8:28:46:5f:7e:45:0e:
                    e0:60:2b:fd:80:81:0d:67:9d:7b:a4:54:34:18:6e:
                    72:ba:f0:14:63:26:6c:d5:46:53:21:9a:50:01:72:
                    00:4b:fe:11:db:18:b0:b8:4b:e6:f4:dd:25:79:67:
                    8d:e4:5f:4c:14:71:bd:68:43:22:83:0e:20:a6:17:
                    9a:58:76:71:e7:ae:d6:c1:67:ae:31:49:a9:fa:52:
                    1c:03:ab:64:c6:ba:74:6b:45:15:f8:5b:71:4c:9f:
                    48:53:0b:ff:61:20:3c:bf:35:09:2e:df:0e:f2:49:
                    fe:68:70:0c:b6:1a:82:39:93:61:d6:c0:89:62:bb:
                    09:b0:d8:b6:27:d6:bf:d0:c5:d0:f9:ea:8c:26:c2:
                    ed:15:66:b0:ac:ed:f7:62:4f:f8:0d:a0:c0:46:88:
                    84:bb:09:1f:d9:e9:ed:a8:95:15:54:7e:cc:d1:8e:
                    fb:38:09:65:49:42:0f:ee:04:20:4a:fc:eb:d2:c1:
                    25:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D9:89:F9:AE:A2:18:50:D6:0E:68:2D:8A:9D:2A:3D:9C:CE:52:5F
            X509v3 Authority Key Identifier:
                keyid:F2:F9:AC:72:68:55:53:02:AF:30:F5:4A:7F:45:D4:41:70:88:23:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6213qiFXd9Eewa92b9fKD1ezJ3hrqXep6SBPuMva4V5f/1/F2F9AC7268555302AF30F54A7F45D44170882390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2F9AC7268555302AF30F54A7F45D44170882390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6213qiFXd9Eewa92b9fKD1ezJ3hrqXep6SBPuMva4V5f/1/323830343a323764633a3a2f33322d3438203d3e20323633393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:d2:c8:41:b1:94:a7:72:09:a1:fb:fa:89:a6:1c:b3:e7:5e:
         ef:f7:46:9d:91:53:ed:36:fe:ce:66:a4:93:34:cd:c3:53:ef:
         df:45:8f:9f:48:87:df:78:ca:f2:59:59:ed:04:e4:8f:c8:b4:
         ac:96:a4:42:c2:26:dd:f0:df:00:2b:f3:5b:b3:2b:94:90:37:
         c7:d9:bb:f6:f0:95:18:76:78:5f:74:cc:eb:ce:bc:11:c2:b0:
         eb:11:86:6e:61:53:67:ec:39:b1:f2:a9:32:09:78:d6:f7:76:
         5c:30:83:b5:f1:9c:d2:90:e2:49:75:ed:bc:99:b3:1c:d4:f2:
         76:32:81:fc:d1:c6:1d:c3:fa:a3:64:86:f8:9a:35:07:38:79:
         70:14:14:ae:0c:e5:55:45:cc:9a:44:b5:93:02:11:46:1d:69:
         71:13:b8:ad:72:8c:29:40:aa:57:b2:f5:dd:1c:0c:2e:72:3e:
         04:25:dd:4c:f1:9d:e8:c5:b4:e7:f3:9c:09:b0:39:88:78:b2:
         f5:21:b3:9f:d1:01:86:69:78:f6:1e:a0:a2:56:8a:93:f7:33:
         77:50:74:d8:04:53:15:d1:67:e6:c7:e2:6f:2c:47:6e:0f:4f:
         01:e2:f3:83:0f:40:ed:5e:6b:70:56:40:f1:5a:0b:0a:c7:68:
         30:55:52:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org