Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/323830343a333534633a343530303a3a2f34302d3438203d3e203533303138.roa
File:                     323830343a333534633a343530303a3a2f34302d3438203d3e203533303138.roa (raw, json)
Hash identifier:          rlJ+l/uRF2MtiRpDwMUaVdeowPhfdoKswm7PPd5KVRE=
Subject key identifier:   F6:10:A5:E9:4A:7F:85:9A:F6:94:CD:EA:50:73:11:5E:30:D7:D7:E2
Certificate issuer:       /CN=FF200E4C71F382D87AE431559DD6BD74D192236B
Certificate serial:       7BC286D1FCF1EDACF75D766792254DD83C9E17BB
Authority key identifier: FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/323830343a333534633a343530303a3a2f34302d3438203d3e203533303138.roa
Signing time:             Tue 12 Mar 2024 18:14:53 +0000
ROA not before:           Tue 12 Mar 2024 18:09:53 +0000
ROA not after:            Tue 11 Mar 2025 18:14:53 +0000
asID:                     53018
IP address blocks:        2804:354c:4500::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c2:86:d1:fc:f1:ed:ac:f7:5d:76:67:92:25:4d:d8:3c:9e:17:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF200E4C71F382D87AE431559DD6BD74D192236B
        Validity
            Not Before: Mar 12 18:09:53 2024 GMT
            Not After : Mar 11 18:14:53 2025 GMT
        Subject: CN=F610A5E94A7F859AF694CDEA5073115E30D7D7E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fe:c2:ed:f0:5a:af:7d:af:6b:47:7a:2f:e8:
                    84:7e:07:56:3f:71:47:3b:1e:91:e9:47:5a:0c:fc:
                    5e:d7:bb:49:f4:35:5a:a4:3f:14:c7:14:8f:89:49:
                    b7:ab:cd:c3:21:2d:c2:08:35:63:ff:27:a8:44:c4:
                    3c:21:89:51:e0:37:7c:84:02:65:05:ea:70:d7:d1:
                    85:0e:5c:e9:87:60:79:16:d1:ee:c2:dc:33:33:c4:
                    f5:98:c5:48:20:5b:f2:fd:ac:40:d0:ff:a3:b3:e8:
                    a3:53:a7:bc:b9:0c:9c:81:48:9f:fc:6d:5c:ad:2a:
                    73:ac:2b:d0:f9:39:96:52:ca:49:30:e1:0e:7b:97:
                    d1:60:25:c4:97:b3:1a:0f:bf:cd:26:8f:1c:c1:58:
                    bf:ee:5e:a1:af:0c:47:77:8e:04:44:90:10:37:e5:
                    3a:ba:a7:67:58:1e:ed:7e:32:c8:96:d1:24:55:29:
                    e3:93:78:85:cd:36:e5:84:e1:e2:cd:03:dc:1e:56:
                    48:89:ff:a7:17:24:6e:88:ee:7d:7c:91:fd:fb:04:
                    8a:50:d5:cb:15:da:21:80:a8:fc:51:88:a3:7a:f9:
                    7b:49:6c:b3:6e:90:03:5a:29:4e:45:5c:50:13:95:
                    df:f0:45:e1:1e:4b:ce:fe:27:05:5c:4c:d5:ee:e4:
                    1e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:10:A5:E9:4A:7F:85:9A:F6:94:CD:EA:50:73:11:5E:30:D7:D7:E2
            X509v3 Authority Key Identifier:
                keyid:FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/FF200E4C71F382D87AE431559DD6BD74D192236B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/323830343a333534633a343530303a3a2f34302d3438203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:354c:4500::/40

    Signature Algorithm: sha256WithRSAEncryption
         81:b2:49:cd:31:df:13:d7:64:81:1e:a3:d2:f8:e1:33:4d:6f:
         df:df:03:90:ed:85:6f:8c:04:f4:67:ef:bb:15:3e:90:7f:d6:
         ea:de:ca:c0:d7:0f:84:88:97:f7:b4:02:db:91:8e:76:2d:79:
         8a:a5:1c:e8:1f:e6:56:c6:59:0f:06:81:df:4e:89:20:57:bd:
         f4:23:df:cc:ec:24:ec:24:f2:86:2a:32:72:1a:25:dc:81:9a:
         bc:a5:e9:49:dc:d5:c8:00:32:35:43:d8:e7:cb:9e:05:f4:a2:
         7a:41:bb:9c:e6:ac:24:50:4c:7f:3d:09:f4:74:ff:f2:9e:61:
         eb:e1:30:08:67:2b:39:ff:a5:13:81:bf:6e:ad:a2:f5:30:b5:
         91:94:c5:eb:ed:ba:64:eb:9b:74:6a:7c:45:91:24:71:cc:5d:
         86:21:cd:d3:7e:af:8f:6b:1e:d0:5a:6d:ed:11:93:36:e7:9c:
         af:bd:bf:a2:3c:70:6a:a4:1c:31:4c:46:d9:a8:5e:39:55:2b:
         75:0a:06:41:94:fd:dc:23:8d:84:4f:a8:56:89:9c:53:bf:99:
         6c:86:c2:f7:17:fa:69:17:e3:77:0d:f4:2b:26:b7:69:00:07:
         29:fe:3e:ef:ac:67:88:26:7f:f8:bc:5c:d0:9c:f9:fe:ef:bc:
         a4:b5:76:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org