Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/323830343a356263383a3a2f33322d3438203d3e20323638383639.roa
File:                     323830343a356263383a3a2f33322d3438203d3e20323638383639.roa (raw, json)
Hash identifier:          5UEFoJKr82ZKeyHKIHyrmGCqm7az/BzkbMBHnb9C3jY=
Subject key identifier:   D6:65:C6:15:AE:C9:63:11:CE:CA:1D:E1:0A:2E:F7:A6:38:B2:51:06
Certificate issuer:       /CN=F24D082C82FF9E11E84C687D8D35F1210230FA8D
Certificate serial:       0C2677F1F0812258A9F1B0E07613D507ABF7E121
Authority key identifier: F2:4D:08:2C:82:FF:9E:11:E8:4C:68:7D:8D:35:F1:21:02:30:FA:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F24D082C82FF9E11E84C687D8D35F1210230FA8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/323830343a356263383a3a2f33322d3438203d3e20323638383639.roa
Signing time:             Mon 23 Oct 2023 11:00:00 +0000
ROA not before:           Mon 23 Oct 2023 10:55:00 +0000
ROA not after:            Mon 21 Oct 2024 11:00:00 +0000
asID:                     268869
IP address blocks:        2804:5bc8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:26:77:f1:f0:81:22:58:a9:f1:b0:e0:76:13:d5:07:ab:f7:e1:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F24D082C82FF9E11E84C687D8D35F1210230FA8D
        Validity
            Not Before: Oct 23 10:55:00 2023 GMT
            Not After : Oct 21 11:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1e:ea:69:cd:f2:53:39:3a:ef:36:22:bc:6b:
                    fd:e6:de:59:db:f4:af:dc:bf:a2:86:c7:40:0e:50:
                    d9:3c:ea:8e:26:23:87:b0:3e:fa:18:23:75:55:9d:
                    48:60:77:e6:2c:a1:52:8a:e9:77:77:0f:6a:2a:68:
                    b4:6f:32:cc:6e:b0:e5:55:68:d9:12:76:d3:07:14:
                    d8:04:8d:52:b0:6c:c4:19:76:33:83:21:5f:74:be:
                    94:38:86:18:d5:44:e0:d6:06:0f:f6:37:49:83:37:
                    70:61:3b:dc:57:f4:55:df:dc:98:eb:f3:6f:8c:01:
                    97:af:c0:fc:70:a4:98:d4:a7:88:15:bd:c7:9a:da:
                    29:62:ad:c8:43:2c:30:31:3b:f5:dc:de:44:56:17:
                    33:0c:df:c4:20:32:15:45:fb:e4:4b:ed:23:3f:f4:
                    55:da:92:e3:c8:59:37:04:e5:9d:4f:76:48:26:99:
                    62:89:55:1d:5e:40:60:b6:9d:cb:01:aa:b3:bb:f6:
                    02:67:93:b7:f5:b5:fb:76:85:e8:67:45:d8:61:8e:
                    7b:d0:ae:75:50:16:11:98:60:9f:94:9e:00:03:82:
                    ed:8a:db:fa:e7:fc:26:fb:03:51:71:ac:0b:bc:74:
                    4d:20:48:19:04:e3:96:03:c1:9b:9e:8f:6f:51:55:
                    a5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:65:C6:15:AE:C9:63:11:CE:CA:1D:E1:0A:2E:F7:A6:38:B2:51:06
            X509v3 Authority Key Identifier:
                keyid:F2:4D:08:2C:82:FF:9E:11:E8:4C:68:7D:8D:35:F1:21:02:30:FA:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/F24D082C82FF9E11E84C687D8D35F1210230FA8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F24D082C82FF9E11E84C687D8D35F1210230FA8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/323830343a356263383a3a2f33322d3438203d3e20323638383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:b6:85:ef:1d:03:08:d0:f3:6c:f2:15:36:ae:d9:ea:2d:c1:
         26:4c:68:de:be:bc:c0:c4:38:79:bb:47:59:c9:a0:d4:5b:bc:
         cc:f1:bb:7a:00:99:78:cc:5b:bc:74:52:c4:50:fd:27:19:e8:
         97:1a:98:8e:01:46:82:46:6d:d0:5c:bc:5b:13:54:75:83:11:
         5f:72:aa:4c:70:f6:5a:ea:9e:13:a6:6c:40:78:ea:96:29:e2:
         41:d7:ae:84:a2:71:a3:21:b0:b5:ab:5c:9b:25:50:8e:be:aa:
         aa:34:e3:6c:3a:e0:d2:db:7b:44:f0:a1:a6:ea:70:46:be:8d:
         c2:a7:91:7d:59:cc:d2:2f:29:06:99:10:e1:c2:9c:4f:6f:89:
         77:b0:35:bc:fa:a0:18:68:f4:a5:bc:54:6a:af:32:fa:ae:4e:
         da:09:57:e0:12:c6:4b:3f:9e:22:5c:cd:cf:8c:3e:0a:b1:a9:
         1f:98:26:38:fd:e4:ae:6d:72:9c:00:91:63:07:49:34:a2:c1:
         c0:c1:95:14:a5:51:ab:0e:97:65:43:f8:ac:90:1e:98:c5:3d:
         13:74:47:fa:d0:3e:1a:02:be:d0:41:97:09:3a:30:29:4a:89:
         25:15:88:b0:cf:00:0e:62:75:d9:3b:4f:45:a1:6b:ae:43:eb:
         87:33:21:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org