Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/323830343a333432343a3a2f33322d3334203d3e20323635343338.roa
File:                     323830343a333432343a3a2f33322d3334203d3e20323635343338.roa (raw, json)
Hash identifier:          1Ap/D43JO9COEYbvnD+DIkEFyPwwI8YBtED+YAhZIZQ=
Subject key identifier:   22:04:7B:33:58:C6:2B:45:DA:63:A1:99:28:E1:0E:76:84:7C:BF:52
Certificate issuer:       /CN=F195F9C596ADB608642A133DA471E40CFD879710
Certificate serial:       3D3253432AA8504FC4D2B32235A5F918FCBB6B25
Authority key identifier: F1:95:F9:C5:96:AD:B6:08:64:2A:13:3D:A4:71:E4:0C:FD:87:97:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F195F9C596ADB608642A133DA471E40CFD879710.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/323830343a333432343a3a2f33322d3334203d3e20323635343338.roa
Signing time:             Mon 27 Mar 2023 13:14:40 +0000
ROA not before:           Mon 27 Mar 2023 13:09:40 +0000
ROA not after:            Mon 25 Mar 2024 13:14:40 +0000
asID:                     265438
IP address blocks:        2804:3424::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:32:53:43:2a:a8:50:4f:c4:d2:b3:22:35:a5:f9:18:fc:bb:6b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F195F9C596ADB608642A133DA471E40CFD879710
        Validity
            Not Before: Mar 27 13:09:40 2023 GMT
            Not After : Mar 25 13:14:40 2024 GMT
        Subject: CN=22047B3358C62B45DA63A19928E10E76847CBF52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:94:69:24:e2:b3:99:fd:0f:c7:6d:e8:d2:6b:
                    a1:29:e1:82:0e:20:37:de:7f:1c:81:e8:75:f1:0d:
                    ab:01:ad:e6:da:fa:07:b2:3e:2b:45:d1:45:46:3a:
                    fe:21:86:e8:4a:0d:6e:6d:f9:9e:9f:0a:81:cc:8b:
                    cd:10:f4:3e:ee:4c:0f:d4:2a:9b:f0:77:45:9b:ae:
                    e5:45:6b:b9:13:0f:63:f8:84:93:92:30:21:1c:9d:
                    7a:48:de:6c:e5:db:59:04:4a:9b:8c:6c:a2:da:f2:
                    82:ad:0a:9e:7c:07:9e:a0:16:ad:85:2e:18:3f:98:
                    26:87:a4:0c:90:03:04:c9:15:c7:17:aa:a8:d3:1c:
                    84:c4:d1:b2:ec:d2:8e:3a:ba:d5:f2:ef:c9:fd:12:
                    1b:1f:a8:71:ed:9b:89:aa:ca:c6:30:88:20:77:86:
                    a1:a8:12:0c:2c:66:e1:e0:0a:43:32:23:e3:5b:c9:
                    40:d0:aa:0e:04:bc:23:52:08:2f:2d:14:bb:94:5e:
                    42:b2:3b:2e:ab:9b:c3:70:22:d5:31:df:dc:c1:c8:
                    f3:04:88:21:60:49:26:e2:c9:17:16:53:f5:c0:2c:
                    e9:3d:7e:c4:d1:6e:9d:64:fc:70:e4:e0:ec:8d:36:
                    d0:ee:1f:9f:a1:80:76:86:97:ff:1e:8e:fb:ef:ad:
                    2c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:04:7B:33:58:C6:2B:45:DA:63:A1:99:28:E1:0E:76:84:7C:BF:52
            X509v3 Authority Key Identifier:
                keyid:F1:95:F9:C5:96:AD:B6:08:64:2A:13:3D:A4:71:E4:0C:FD:87:97:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/F195F9C596ADB608642A133DA471E40CFD879710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F195F9C596ADB608642A133DA471E40CFD879710.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/323830343a333432343a3a2f33322d3334203d3e20323635343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3424::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:a3:d6:cf:ae:c5:4f:ba:f3:67:51:f6:90:a8:23:67:51:6b:
         bd:58:c4:c6:af:1d:41:46:e6:39:1a:96:5d:f6:4a:cf:1a:de:
         78:b0:42:07:8f:66:79:5d:eb:d4:15:86:a4:20:7a:71:56:31:
         2a:24:f7:a9:f4:f8:54:85:2c:61:7d:27:ee:28:49:f5:17:bb:
         38:ca:95:8c:48:ac:81:f8:07:d2:66:00:04:3d:38:c7:36:33:
         bc:3a:1b:93:35:45:dd:c6:b9:c1:a4:9c:77:e6:ea:21:95:6e:
         d0:41:b7:57:9b:1a:e1:31:94:cc:e5:e1:61:5f:83:a7:1a:4e:
         a7:99:ac:1a:52:b4:bf:8d:f4:53:c5:bd:f9:9f:fd:db:a1:2c:
         9a:3d:e7:4c:3e:ed:dc:73:43:6c:43:cb:96:76:15:53:16:ef:
         1e:ab:2c:38:db:f5:ca:8f:6e:10:39:a7:2e:4a:d4:5f:79:74:
         dd:b5:ff:6d:26:d2:89:18:68:5e:b1:bb:18:26:61:1b:d3:56:
         da:d3:05:df:12:f1:22:d7:71:2a:49:6b:47:24:c8:49:f9:5d:
         8a:51:e2:6e:f7:1a:96:3a:57:9c:d2:2c:f9:1d:15:26:87:8c:
         e3:c3:8c:a0:a9:24:8a:2d:2a:15:da:70:ae:73:97:04:14:cc:
         8f:dd:a5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org