Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a37623a3a2f34382d3438203d3e20323632373133.roa
File:                     323830343a3634303a37623a3a2f34382d3438203d3e20323632373133.roa (raw, json)
Hash identifier:          ha7hvveJR9TSZl9Io3dZHh39O+ENoo7ydEviOWAe55I=
Subject key identifier:   DF:0D:F2:A8:50:45:1E:E7:03:3E:2E:E6:96:10:6D:DE:CC:18:20:28
Certificate issuer:       /CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
Certificate serial:       3698141AFC094AC1B33628DFF4F9A5F4DBC39E96
Authority key identifier: F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a37623a3a2f34382d3438203d3e20323632373133.roa
Signing time:             Tue 12 Sep 2023 05:00:04 +0000
ROA not before:           Tue 12 Sep 2023 04:55:04 +0000
ROA not after:            Tue 10 Sep 2024 05:00:04 +0000
asID:                     262713
IP address blocks:        2804:640:7b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:98:14:1a:fc:09:4a:c1:b3:36:28:df:f4:f9:a5:f4:db:c3:9e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
        Validity
            Not Before: Sep 12 04:55:04 2023 GMT
            Not After : Sep 10 05:00:04 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:91:79:4c:3c:08:47:e6:5b:f4:39:41:52:aa:
                    0d:29:ff:4d:9a:d6:c5:9d:57:d0:24:48:1e:42:70:
                    24:3a:50:76:82:b5:83:d1:54:58:c3:e1:8b:94:a7:
                    4f:1a:84:a7:30:87:be:28:5d:cd:a1:55:d5:c8:30:
                    41:0f:dd:fc:11:29:79:a5:1c:a5:90:4f:1b:21:09:
                    11:e5:c5:6a:bb:e9:d5:3b:44:f4:b5:26:7c:36:3d:
                    45:67:98:34:9c:43:37:65:04:78:eb:c6:2c:36:50:
                    47:99:19:86:38:99:1e:03:ff:d5:35:66:d8:48:9c:
                    8a:37:b9:21:96:72:06:e2:e4:6d:57:4b:01:86:5c:
                    d4:9c:c0:9b:67:15:7c:60:0a:41:4a:53:46:8d:a5:
                    8b:ee:e1:80:12:c2:c5:f1:ff:89:ab:26:76:4b:32:
                    9b:4c:7c:57:bf:22:8f:29:33:1e:20:33:ee:54:63:
                    2b:96:26:74:5f:22:70:61:9f:6b:4b:c7:40:09:e8:
                    c2:e8:f6:da:b0:54:d6:a8:82:d0:16:c7:8d:f7:f4:
                    a4:b9:06:6e:54:1e:b3:73:64:2a:f9:2b:17:aa:3c:
                    45:3b:81:c1:0b:63:d4:76:2f:6b:6b:b5:cb:0d:2b:
                    bd:e6:d8:b0:ee:24:0c:00:c9:74:96:f4:0f:69:f3:
                    49:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0D:F2:A8:50:45:1E:E7:03:3E:2E:E6:96:10:6D:DE:CC:18:20:28
            X509v3 Authority Key Identifier:
                keyid:F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a37623a3a2f34382d3438203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:640:7b::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:55:c1:10:7b:c2:d4:a2:26:9d:9a:fb:66:d0:8d:56:e1:47:
         99:32:0b:f4:54:78:ba:16:1f:19:59:8f:82:dc:ba:8e:5d:43:
         73:0c:41:5d:ee:59:e2:5d:de:39:2a:ae:1a:f7:06:92:ef:2f:
         98:28:cd:dc:05:f9:66:b9:23:66:4e:45:a8:1e:fa:16:2c:7c:
         45:9e:b7:be:5f:11:4c:75:63:3d:5d:b8:1f:a5:23:f7:b9:85:
         2b:7a:b5:a5:12:0b:c5:6d:17:41:f3:c6:35:a6:7b:0e:b5:84:
         1b:d4:98:21:39:2b:2b:9e:a5:72:89:33:25:9d:5e:cc:53:96:
         72:cc:35:c0:56:5d:9c:ba:ce:e9:a1:12:01:71:91:86:87:f5:
         2e:5e:10:a6:73:21:b0:7f:a6:c2:3c:3d:4d:e4:2a:76:d9:4c:
         4a:41:32:af:35:b9:c1:37:46:dc:49:cb:80:78:97:6c:bb:a1:
         4d:99:7a:97:71:99:7d:68:ed:0d:9c:3e:5e:e9:57:db:d4:fb:
         3a:aa:d5:7b:95:30:27:c8:a0:71:ed:2d:27:56:0f:bb:0e:4c:
         c3:1f:0d:13:b5:14:68:07:ee:f5:94:85:aa:eb:7b:f4:26:55:
         1b:ea:4a:4c:86:dc:ed:5d:8a:31:bd:19:d0:63:c4:a9:3c:a0:
         9c:23:84:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org