Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/323830343a316532303a393934303a3a2f34382d3438203d3e20323634343039.roa
File:                     323830343a316532303a393934303a3a2f34382d3438203d3e20323634343039.roa (raw, json)
Hash identifier:          rffxKOqXIN5ZS41hoMJTVkYHf26RkfVRUg6AgDigYHM=
Subject key identifier:   B8:DB:E3:65:11:87:F3:84:63:79:1D:C9:D7:BA:B5:52:1E:33:AB:1D
Certificate issuer:       /CN=F6A854F7ADB5F77180FB875F5E7CE73C14AE666D
Certificate serial:       01222280D6391BF2E016BA5D36E02897C922FFCF
Authority key identifier: F6:A8:54:F7:AD:B5:F7:71:80:FB:87:5F:5E:7C:E7:3C:14:AE:66:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6A854F7ADB5F77180FB875F5E7CE73C14AE666D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/323830343a316532303a393934303a3a2f34382d3438203d3e20323634343039.roa
Signing time:             Sun 03 Mar 2024 19:51:51 +0000
ROA not before:           Sun 03 Mar 2024 19:46:51 +0000
ROA not after:            Sun 02 Mar 2025 19:51:51 +0000
asID:                     264409
IP address blocks:        2804:1e20:9940::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:22:22:80:d6:39:1b:f2:e0:16:ba:5d:36:e0:28:97:c9:22:ff:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6A854F7ADB5F77180FB875F5E7CE73C14AE666D
        Validity
            Not Before: Mar  3 19:46:51 2024 GMT
            Not After : Mar  2 19:51:51 2025 GMT
        Subject: CN=B8DBE3651187F38463791DC9D7BAB5521E33AB1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6c:06:1f:fb:01:67:dc:80:cd:5a:8c:6c:09:
                    68:3c:63:dd:7f:0b:8b:29:7b:77:d5:44:a6:47:10:
                    ce:70:a1:45:ab:78:92:f8:69:83:47:18:49:7c:2e:
                    1e:fb:81:ca:3c:ba:af:7c:eb:a9:05:39:a9:ea:cb:
                    84:fe:32:d4:53:11:fd:da:73:34:f1:69:96:c2:7d:
                    8c:64:a5:5e:92:c6:80:49:84:72:24:5c:47:ab:a0:
                    7d:36:26:cc:d5:a0:58:3a:82:9e:14:d8:17:aa:55:
                    29:b7:ba:43:f9:f7:aa:89:01:3a:6a:d1:13:38:8b:
                    a3:ba:59:59:e0:4e:9d:aa:0f:e1:ea:49:fe:81:4d:
                    88:9c:37:d7:08:de:66:93:f0:7b:a9:b8:91:27:41:
                    7b:66:c8:c4:39:91:e0:49:d3:bf:bb:41:77:15:c2:
                    ff:c1:6c:00:68:78:aa:7a:3e:46:25:33:2c:ac:46:
                    86:93:b1:1d:b0:6d:11:a1:44:f3:21:f1:c8:88:09:
                    1a:10:41:95:fe:bb:78:36:03:14:1f:80:22:96:3a:
                    6f:c7:d5:7c:82:01:f9:aa:6d:07:ea:7a:64:58:8f:
                    09:67:77:5f:38:be:ac:da:81:9b:04:28:20:72:5a:
                    aa:ad:69:06:fd:53:40:f2:d0:94:67:33:c5:9c:f1:
                    3b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DB:E3:65:11:87:F3:84:63:79:1D:C9:D7:BA:B5:52:1E:33:AB:1D
            X509v3 Authority Key Identifier:
                keyid:F6:A8:54:F7:AD:B5:F7:71:80:FB:87:5F:5E:7C:E7:3C:14:AE:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/F6A854F7ADB5F77180FB875F5E7CE73C14AE666D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6A854F7ADB5F77180FB875F5E7CE73C14AE666D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/323830343a316532303a393934303a3a2f34382d3438203d3e20323634343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e20:9940::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:e8:88:aa:a3:56:b9:11:f8:a3:ac:16:fa:60:2f:53:89:23:
         51:6a:35:89:66:34:6c:0a:2c:26:a5:3b:45:87:59:e5:34:a5:
         1f:9e:06:7f:fb:91:af:a5:d5:81:56:5f:cf:dd:dd:91:83:ff:
         70:31:56:41:c7:23:61:12:63:ea:f4:eb:26:6b:c8:3a:c9:c9:
         42:c9:7e:f7:d0:b0:03:f5:b3:9d:6d:3a:32:d6:be:b5:3b:c3:
         5c:73:70:a7:91:95:51:bf:96:59:8e:34:4b:59:83:1f:8a:8d:
         d5:f2:35:04:d1:3e:17:ef:00:61:ca:9c:de:e2:a2:bc:7e:be:
         90:35:5a:6c:0f:9f:72:15:bd:ed:3b:03:03:9d:0f:a8:eb:71:
         14:c2:ef:0a:0e:e0:6e:36:d9:d8:22:53:b5:05:0f:48:2a:63:
         c0:90:b4:38:14:4b:a8:70:67:9e:24:d6:dc:4b:96:8a:84:b9:
         f7:e4:67:98:3f:cf:9d:c9:c8:8e:61:e3:8b:40:44:e3:56:4d:
         09:6f:b8:93:d2:2a:4f:87:68:c8:77:18:9f:bb:d6:1a:8b:59:
         27:55:d5:9c:7c:29:10:3d:bb:f4:f6:37:0d:24:41:1c:bc:45:
         9e:68:4b:4a:ea:b0:75:28:28:77:67:03:3d:d1:33:d4:0f:1c:
         0f:7d:79:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org