Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a373030323a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a373030323a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          mhpOw4Ovv9VdqamGgdoVPVuumVlL5BlBbAInA2bVvE4=
Subject key identifier:   71:6A:A7:28:22:BC:21:B1:15:99:CC:B2:23:EB:70:C4:E9:90:A0:E1
Certificate issuer:       /CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
Certificate serial:       51993AB328B58E69CE669B508A6D46F025CAB8AC
Authority key identifier: F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a373030323a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Thu 04 Apr 2024 11:34:03 +0000
ROA not before:           Thu 04 Apr 2024 11:29:03 +0000
ROA not after:            Thu 03 Apr 2025 11:34:03 +0000
asID:                     264422
IP address blocks:        2804:1e58:7002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:99:3a:b3:28:b5:8e:69:ce:66:9b:50:8a:6d:46:f0:25:ca:b8:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
        Validity
            Not Before: Apr  4 11:29:03 2024 GMT
            Not After : Apr  3 11:34:03 2025 GMT
        Subject: CN=716AA72822BC21B11599CCB223EB70C4E990A0E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fa:ee:ae:88:5d:7e:74:53:56:95:c5:d3:8b:
                    37:ee:b2:74:31:4c:86:cf:39:c5:7c:e6:8e:49:b6:
                    c1:7a:7b:14:8e:9b:bc:2d:27:3a:5a:8a:ae:81:d1:
                    52:b7:21:d7:04:b5:3d:fb:70:59:df:1b:1d:d9:81:
                    bd:e3:60:85:7d:af:2c:98:b2:59:b3:bf:a1:c3:2b:
                    e8:44:fd:9b:1b:74:cf:7d:88:09:2d:60:9e:a6:19:
                    7c:92:63:f2:e1:eb:68:6b:c9:cb:de:78:fc:76:f8:
                    39:5e:7a:66:f7:64:f2:2b:b2:b7:40:cb:e6:f2:7e:
                    ab:92:58:f8:77:16:33:68:3d:a4:21:3f:6a:07:9d:
                    9a:c1:df:38:13:1f:76:ab:dc:14:74:29:db:03:f5:
                    e3:9c:4a:67:1e:18:e4:d5:4e:2f:78:91:30:d2:98:
                    73:f5:af:93:6a:68:a9:ac:63:6c:b8:7c:f8:ee:e8:
                    dc:34:bf:00:86:3a:93:ab:49:ea:3e:c5:21:47:a8:
                    0c:a2:e8:11:56:b0:22:63:3b:ba:99:e2:a2:31:19:
                    95:e4:04:b0:8a:fc:51:c4:43:45:c3:a7:12:14:76:
                    78:87:39:39:a5:00:81:dc:ee:b4:27:0f:35:ee:2d:
                    91:f1:c5:f9:d3:2e:82:a3:c2:40:38:61:e2:82:36:
                    4d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:6A:A7:28:22:BC:21:B1:15:99:CC:B2:23:EB:70:C4:E9:90:A0:E1
            X509v3 Authority Key Identifier:
                keyid:F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a373030323a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:7002::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:90:6c:13:f9:cc:c7:04:9f:ff:2d:34:f0:82:95:fb:7a:c0:
         a2:65:38:38:74:e0:4a:c9:98:de:5b:ad:6b:87:f8:cb:a0:5b:
         da:8e:d0:db:9e:60:9e:80:f8:ec:eb:c6:53:05:df:fe:d6:98:
         64:00:a2:5d:e8:8b:7c:fa:d8:32:39:39:29:39:a2:55:5d:b9:
         23:3a:7f:79:05:a0:50:1e:41:9c:f4:5e:71:29:39:28:fe:b0:
         d8:0c:99:40:e7:a8:b6:6d:f0:1e:f8:fd:76:c7:0a:9c:75:e7:
         fd:30:db:b8:74:b9:d1:59:61:ff:d8:93:8b:d6:18:11:0d:e5:
         a7:fe:7f:25:0e:58:5d:cb:c9:de:37:83:41:fe:aa:6a:de:37:
         e2:ee:1f:56:14:e2:5b:31:10:20:66:bf:a7:0a:62:96:11:6c:
         07:a1:cd:59:ce:43:37:e9:93:15:4e:d4:be:67:3c:a7:b9:4e:
         67:f7:f2:d2:5e:24:01:d8:44:08:ab:71:ff:72:e1:e8:43:6b:
         fe:1f:c1:b3:90:de:76:b9:88:2b:d8:ca:d5:4f:e3:88:46:06:
         d1:b4:75:c1:87:47:f0:6a:a9:aa:6e:ef:14:67:d1:5c:45:d8:
         52:b6:82:84:70:13:23:30:b3:52:72:63:d9:fb:fc:37:9f:ea:
         ce:f2:fe:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org