Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a383030323a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a383030323a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          x1q1MpeEVQ4cpbNs2Cm9kVPBE9oB5z50FB24OZlVmqE=
Subject key identifier:   C3:68:66:86:8E:81:EA:1F:04:42:A5:0E:62:8E:1A:9B:58:F7:24:10
Certificate issuer:       /CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
Certificate serial:       4B5CE349A3A0B050A98FADA6F0B4D012A52F19FE
Authority key identifier: F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a383030323a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Thu 04 Apr 2024 11:34:06 +0000
ROA not before:           Thu 04 Apr 2024 11:29:06 +0000
ROA not after:            Thu 03 Apr 2025 11:34:06 +0000
asID:                     264422
IP address blocks:        2804:1e58:8002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:5c:e3:49:a3:a0:b0:50:a9:8f:ad:a6:f0:b4:d0:12:a5:2f:19:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
        Validity
            Not Before: Apr  4 11:29:06 2024 GMT
            Not After : Apr  3 11:34:06 2025 GMT
        Subject: CN=C36866868E81EA1F0442A50E628E1A9B58F72410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:78:af:05:f1:1d:1a:84:83:40:8e:9b:96:59:
                    55:60:48:75:e9:62:57:84:f2:f9:11:e2:44:2f:9b:
                    6c:5b:d3:c3:48:4e:f1:10:c7:30:37:a2:a6:b7:0c:
                    80:8f:4a:dc:da:d5:36:dd:3d:38:8c:63:3d:b9:04:
                    75:a5:ce:e2:b8:48:34:93:38:9b:13:6e:30:eb:07:
                    a5:2f:37:c0:04:13:d0:fe:91:08:bc:49:2a:ac:ed:
                    51:f7:a7:1b:a6:9a:4f:84:ba:b5:e9:4d:a3:5d:f0:
                    4a:63:54:12:03:c2:ac:4e:34:05:1a:52:67:2b:a0:
                    73:4f:68:df:8e:d8:d0:8f:9a:40:3f:02:af:d8:88:
                    c9:4f:6d:c3:3d:fd:df:7a:40:f7:2e:7d:9a:0e:31:
                    e0:2a:e4:e7:2b:ae:ea:71:7f:40:6c:b4:6d:78:01:
                    d6:66:40:23:b6:ed:6f:60:bf:53:e3:a7:ac:0d:62:
                    47:43:88:82:ef:3e:a2:4f:68:b5:b5:02:36:9e:5d:
                    53:dd:87:b4:e9:82:12:f9:e8:10:3f:64:42:c8:0e:
                    c8:62:83:50:39:d6:6f:46:7e:13:bc:69:3c:64:23:
                    8b:44:9f:82:ca:c5:42:1c:5e:ad:5b:82:ee:49:ee:
                    9a:16:83:fe:13:fd:8c:6a:53:a4:d5:ca:25:72:a1:
                    8f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:68:66:86:8E:81:EA:1F:04:42:A5:0E:62:8E:1A:9B:58:F7:24:10
            X509v3 Authority Key Identifier:
                keyid:F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a383030323a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:8002::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:a6:dd:4f:1b:f2:74:23:04:ea:76:85:6d:f4:76:bc:94:fe:
         f5:31:43:90:e1:40:52:26:f5:50:cd:b9:1f:ff:7c:65:67:96:
         c5:72:00:60:40:a5:9d:f8:c0:18:c3:7e:33:2f:e3:da:75:3e:
         83:b5:30:64:26:70:a2:b3:ad:ee:53:aa:fb:b6:e6:96:48:95:
         e5:3f:08:be:ba:74:93:ec:a7:03:ea:1f:b9:08:f0:99:1c:e1:
         57:11:f4:ca:6d:d1:fc:0e:be:5f:89:ef:73:d7:a4:6b:34:68:
         a4:aa:b7:3e:1c:a4:a6:0a:00:54:3b:d3:21:94:7b:16:dc:a1:
         ad:cf:fe:01:dc:19:f2:f0:80:4c:ea:e3:92:20:20:29:39:14:
         a8:f6:82:75:bd:a1:41:72:43:a7:03:84:22:77:67:1a:84:fa:
         a5:0a:a4:99:13:05:bc:31:51:c2:eb:ce:6e:02:85:77:ca:85:
         e9:d0:fe:8e:a0:ed:64:05:e2:ef:4d:f4:76:e3:49:e6:f2:76:
         7d:cc:f6:6a:58:b8:4d:d5:cd:51:af:7b:53:b1:ef:12:f8:45:
         3a:cc:5c:57:c7:ef:29:e1:c7:58:92:1d:95:48:d7:4b:81:58:
         88:da:b9:c2:bf:0e:ff:a0:68:b6:fc:bb:5a:4d:86:c0:8b:f6:
         16:bc:cf:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org