Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a393030303a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a393030303a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          92sssUvGXsGRSZN5aIZplJu9N5Vu+qZvnB9ohRujy8w=
Subject key identifier:   89:BF:FC:70:52:89:96:A4:EB:5F:EB:E1:EF:0E:C8:0E:68:C9:0B:10
Certificate issuer:       /CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
Certificate serial:       5A408173D9725EC62C2EF1342895C32991DB67C5
Authority key identifier: F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a393030303a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Thu 04 Apr 2024 11:34:02 +0000
ROA not before:           Thu 04 Apr 2024 11:29:02 +0000
ROA not after:            Thu 03 Apr 2025 11:34:02 +0000
asID:                     264422
IP address blocks:        2804:1e58:9000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:40:81:73:d9:72:5e:c6:2c:2e:f1:34:28:95:c3:29:91:db:67:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
        Validity
            Not Before: Apr  4 11:29:02 2024 GMT
            Not After : Apr  3 11:34:02 2025 GMT
        Subject: CN=89BFFC70528996A4EB5FEBE1EF0EC80E68C90B10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3a:17:8b:9f:5f:34:55:0d:4b:46:a9:18:34:
                    8d:9d:8e:1d:52:01:22:91:cb:26:33:ab:ad:6f:b1:
                    20:00:ae:9b:ec:5a:47:22:14:70:fa:f7:24:d2:de:
                    a3:71:d9:36:91:a3:ed:cc:63:e8:11:13:1a:83:83:
                    bf:06:0b:28:f2:90:01:c2:b5:85:2a:cc:2c:1d:66:
                    67:37:55:10:d1:1c:f5:e6:99:82:91:e2:66:12:ea:
                    1a:89:98:89:6b:49:ef:ea:ba:fd:af:7c:a0:b0:a5:
                    24:71:8e:04:41:83:5f:a6:93:b7:a5:e9:b0:b0:95:
                    8b:98:c1:dd:9d:53:e6:a5:56:75:36:82:26:62:0d:
                    56:27:71:b4:5f:ca:ae:d2:f8:bc:2a:39:ea:d1:fb:
                    83:46:49:54:b1:22:50:eb:38:99:15:5f:68:95:6b:
                    c1:d4:19:8e:95:fd:8b:60:c2:2b:c5:76:98:c0:92:
                    36:44:05:75:50:06:80:22:c1:c4:f2:91:f0:28:21:
                    8a:05:bd:16:12:67:5c:be:60:7f:fb:11:f0:52:6d:
                    49:7d:32:98:bf:5e:cd:1c:0c:e3:27:af:ed:77:1e:
                    d3:69:44:81:97:47:04:7e:0e:53:0c:14:03:96:3b:
                    dd:2d:97:f1:e7:29:c1:ec:d8:9d:6c:e7:2c:7a:8f:
                    b7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BF:FC:70:52:89:96:A4:EB:5F:EB:E1:EF:0E:C8:0E:68:C9:0B:10
            X509v3 Authority Key Identifier:
                keyid:F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a393030303a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:9000::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:ca:5c:b4:ec:43:43:2c:b9:64:13:17:de:9d:17:2e:ea:f7:
         b6:2f:30:f7:09:3c:f7:f7:06:f7:cc:2e:2b:c5:ad:7a:3d:13:
         a5:11:21:8f:a8:c6:06:91:bd:df:0e:0c:cf:24:5f:98:75:67:
         f0:43:01:48:53:1d:dd:97:8d:5c:56:b1:43:64:1b:e5:0f:c8:
         eb:ae:13:69:a0:f7:dc:04:9e:3c:85:bd:41:9b:9d:4d:bb:26:
         7b:f9:10:57:1a:ea:a1:42:f4:9d:d4:f6:6e:70:c2:52:5e:a3:
         b0:f7:03:f9:d2:e2:c4:b3:f0:6e:59:5d:78:e9:00:e7:31:77:
         17:15:1a:9a:76:3d:a7:2a:e2:d1:70:b1:9f:1f:a6:17:4b:e7:
         86:07:d8:21:45:bb:02:c4:25:7c:2c:e6:4e:73:ab:14:56:75:
         96:50:7c:80:81:81:5e:c6:a0:1b:cc:f8:04:43:b2:47:cf:f3:
         28:6e:71:54:4c:ff:83:f1:c3:eb:c2:f6:2d:3f:be:fc:a1:67:
         ce:b1:b8:89:b4:4a:86:40:b1:a0:97:6d:25:86:31:0e:df:4c:
         78:e0:ff:55:38:ca:2d:20:03:b9:a8:3b:ae:df:ed:d7:c1:e3:
         7d:a8:6e:11:65:88:b8:9b:2d:a3:eb:dd:4e:df:99:05:0f:95:
         df:17:c3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org