Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a336539333a3a2f34382d3438203d3e20323632373133.roa
File:                     323830343a3634303a336539333a3a2f34382d3438203d3e20323632373133.roa (raw, json)
Hash identifier:          5VLyupWgtzrS0wMLgPM/mdDOv0dKj/yvI32wRClYzE8=
Subject key identifier:   1A:4A:70:14:12:B4:79:B1:7A:F5:7F:94:D5:1E:D2:27:42:FA:42:B2
Certificate issuer:       /CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
Certificate serial:       214759D55DD13904782400E9DD4C56734140AADD
Authority key identifier: F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a336539333a3a2f34382d3438203d3e20323632373133.roa
Signing time:             Tue 12 Sep 2023 05:00:05 +0000
ROA not before:           Tue 12 Sep 2023 04:55:05 +0000
ROA not after:            Tue 10 Sep 2024 05:00:05 +0000
asID:                     262713
IP address blocks:        2804:640:3e93::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:47:59:d5:5d:d1:39:04:78:24:00:e9:dd:4c:56:73:41:40:aa:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
        Validity
            Not Before: Sep 12 04:55:05 2023 GMT
            Not After : Sep 10 05:00:05 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:73:88:90:f5:8d:af:82:b2:46:ea:f9:0a:47:
                    15:5c:a2:37:80:47:2d:e1:6d:7b:16:d3:e7:af:9c:
                    19:cb:98:83:07:16:40:8f:2b:b3:29:99:4c:13:09:
                    2c:47:76:bf:87:7f:07:2c:4f:75:90:15:96:89:75:
                    17:e3:99:33:6f:75:b7:0f:89:05:fb:d1:33:8a:8d:
                    c0:58:fd:bd:83:d3:20:9f:e0:f3:e1:da:58:ed:f7:
                    9d:85:a4:99:22:36:d3:d0:dc:07:98:1b:09:dd:49:
                    97:93:ba:10:eb:f3:fe:d0:df:44:df:92:78:50:81:
                    22:02:c8:83:62:63:d5:7b:dd:37:94:70:ab:a9:97:
                    54:71:cc:f9:3e:64:fb:dd:89:9b:d3:df:c2:bc:41:
                    53:d3:55:44:c6:2e:7f:c5:cb:05:c4:36:a8:a1:a2:
                    01:57:96:13:1f:45:80:d5:38:a8:a4:8e:e6:3b:f3:
                    b6:67:fd:6a:59:57:32:b1:eb:23:2c:cc:a9:3c:e6:
                    41:76:f2:82:3f:69:f4:0b:a7:7d:6a:7e:31:40:d8:
                    eb:5f:d1:84:11:35:7a:7d:23:93:ca:1f:88:37:ae:
                    42:e9:d4:68:20:97:4d:2b:73:e1:32:93:fd:71:0d:
                    0e:f0:54:1c:9e:0e:c6:24:2b:9a:be:ac:76:3c:8f:
                    2e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4A:70:14:12:B4:79:B1:7A:F5:7F:94:D5:1E:D2:27:42:FA:42:B2
            X509v3 Authority Key Identifier:
                keyid:F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a336539333a3a2f34382d3438203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:640:3e93::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:01:3f:1f:25:ef:16:b7:7d:8f:d7:cc:8f:fe:54:94:a5:6a:
         dd:7f:35:6e:36:3d:68:ad:68:6c:3e:34:4e:ef:bf:3e:8f:96:
         c4:ff:0b:21:b8:8e:6c:71:60:2d:b3:6c:e6:f6:11:cc:86:e9:
         b2:ff:68:63:8f:78:0e:94:69:90:05:80:22:59:c0:e3:87:48:
         b8:e1:d5:86:bb:f1:8c:5c:48:13:75:30:9e:bb:a3:df:aa:ec:
         ea:98:5a:14:c8:54:22:a7:81:ad:70:db:60:ca:22:95:2a:cf:
         00:90:29:15:66:f8:a0:e0:f5:b2:a5:1a:44:81:b6:15:55:b4:
         96:c8:3a:0a:78:c3:2c:d2:aa:7c:38:2e:83:87:96:bc:a0:85:
         24:cd:60:22:21:27:d6:0a:5e:2d:b9:b7:40:50:4e:7e:d4:26:
         75:8a:72:45:62:9b:16:7d:0c:3a:74:4a:3a:92:7e:1e:7c:94:
         c1:d0:7e:6e:75:d3:dd:6e:63:13:a7:54:62:b6:ab:83:93:52:
         04:b9:d2:79:b9:62:61:db:92:07:4e:5c:20:0c:4a:76:be:bf:
         ee:ec:dc:4a:b1:07:c3:d6:c3:c3:06:af:a8:78:28:f7:9e:9d:
         00:99:88:ae:de:23:2a:fe:fe:04:c0:f4:0e:bb:db:ec:a0:38:
         b7:2a:e7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org