Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/323830343a376435633a343030303a3a2f33342d3334203d3e20323632373338.roa
File:                     323830343a376435633a343030303a3a2f33342d3334203d3e20323632373338.roa (raw, json)
Hash identifier:          q80agDC5JRg0gqzNU2M78fZgTXv81j7WnhbEh8G31y0=
Subject key identifier:   59:78:68:EB:E3:7B:B0:B2:F6:3D:5F:98:90:FE:0A:6A:12:61:1B:2D
Certificate issuer:       /CN=849EDC8B01488DAA924378D7A31D412647B39B67
Certificate serial:       7F2BC366AD746096A757924FDB9AD9D10DA7846B
Authority key identifier: 84:9E:DC:8B:01:48:8D:AA:92:43:78:D7:A3:1D:41:26:47:B3:9B:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/849EDC8B01488DAA924378D7A31D412647B39B67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/323830343a376435633a343030303a3a2f33342d3334203d3e20323632373338.roa
Signing time:             Mon 04 Mar 2024 23:47:09 +0000
ROA not before:           Mon 04 Mar 2024 23:42:09 +0000
ROA not after:            Mon 03 Mar 2025 23:47:09 +0000
asID:                     262738
IP address blocks:        2804:7d5c:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:2b:c3:66:ad:74:60:96:a7:57:92:4f:db:9a:d9:d1:0d:a7:84:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849EDC8B01488DAA924378D7A31D412647B39B67
        Validity
            Not Before: Mar  4 23:42:09 2024 GMT
            Not After : Mar  3 23:47:09 2025 GMT
        Subject: CN=597868EBE37BB0B2F63D5F9890FE0A6A12611B2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:73:bc:34:8a:38:88:34:a4:27:7a:71:38:13:
                    bf:fc:f3:24:b3:44:10:24:4a:ee:34:bf:9a:ba:27:
                    87:af:2c:27:a6:5a:ec:31:3b:29:4b:1f:18:86:c9:
                    86:e1:da:04:32:a0:2d:47:53:f1:19:b4:13:9c:96:
                    4f:b2:84:68:16:5a:9c:16:f0:3d:03:e5:b5:8a:34:
                    a5:e6:ee:bc:cf:63:0c:69:ae:4c:0d:b7:0b:01:40:
                    95:de:25:e3:0c:5f:41:fa:63:0c:77:a0:61:73:b4:
                    27:da:1b:8e:36:e4:18:cd:ef:31:07:88:b8:76:d1:
                    48:33:e4:0d:2e:f4:06:ba:f5:05:4f:f4:52:eb:b6:
                    92:54:b3:32:db:1d:0e:14:0a:27:af:7a:be:ca:e6:
                    7d:ad:20:09:60:b3:09:65:06:d1:3e:b0:fc:55:cb:
                    45:4e:f2:ff:14:2d:1b:e9:fd:95:ce:a1:26:a0:84:
                    44:84:77:18:b9:f4:f8:7c:73:7d:8e:c6:2b:79:14:
                    3e:3b:78:12:77:0d:f9:99:93:68:19:62:ad:8a:23:
                    65:e2:12:91:47:23:8e:07:67:88:95:27:d5:79:d3:
                    f5:f6:6e:0a:33:05:09:85:98:7e:0c:b0:66:a6:aa:
                    1b:da:e7:18:29:32:10:0d:18:0f:02:1c:31:0d:e5:
                    85:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:78:68:EB:E3:7B:B0:B2:F6:3D:5F:98:90:FE:0A:6A:12:61:1B:2D
            X509v3 Authority Key Identifier:
                keyid:84:9E:DC:8B:01:48:8D:AA:92:43:78:D7:A3:1D:41:26:47:B3:9B:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/849EDC8B01488DAA924378D7A31D412647B39B67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/849EDC8B01488DAA924378D7A31D412647B39B67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/323830343a376435633a343030303a3a2f33342d3334203d3e20323632373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d5c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         02:f0:bc:a7:a8:24:47:e4:00:80:01:80:2e:88:ed:c6:16:2e:
         56:6e:95:a9:ed:d8:16:cd:1e:bc:b1:70:91:34:a0:bd:be:64:
         bd:db:43:a1:ce:fa:23:98:48:ee:0d:01:54:dc:d7:3d:21:9f:
         02:d6:4a:6b:1c:af:04:d1:66:3d:93:7b:ba:d2:31:3b:41:1e:
         ab:c6:26:11:90:d4:51:95:0d:eb:eb:60:85:85:f3:16:1c:7f:
         b0:42:8d:bd:1c:ba:98:cb:a0:b4:82:a9:b1:86:9a:db:40:c0:
         b9:05:5c:47:8d:35:ae:22:de:19:41:6b:de:04:06:fa:e5:6d:
         20:b0:6b:85:e2:bc:ce:3f:02:6d:a9:1b:b7:9f:a6:3c:17:56:
         b3:da:06:01:53:fb:8a:b3:53:58:2e:b1:99:06:e5:4a:a9:7b:
         e0:83:31:1e:e2:9d:2f:70:a0:72:ce:2d:4e:7a:63:19:9f:c7:
         35:0d:00:c0:bb:49:e5:c5:6e:7a:64:e3:98:d2:2e:a5:c5:1e:
         64:c5:ea:26:4e:df:62:2d:a3:74:10:40:de:be:e7:61:c8:64:
         6b:ea:aa:da:02:e0:b9:32:6d:8f:6d:c4:96:de:ac:c8:85:52:
         00:43:83:b7:55:70:58:9a:ed:94:35:3d:be:f1:26:08:ed:e0:
         78:29:25:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org