Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a37643a3a2f34382d3438203d3e20323632373133.roa
File:                     323830343a3634303a37643a3a2f34382d3438203d3e20323632373133.roa (raw, json)
Hash identifier:          MJdn1R9fU+QZo923eHBp0MInM4vQnIW99JID8hrdOzs=
Subject key identifier:   3C:80:41:12:42:27:B4:71:A0:55:A8:50:89:F1:F0:5A:BB:89:20:E4
Certificate issuer:       /CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
Certificate serial:       0B2C47AD62C44FA89F835499AFA2EBB0046555EC
Authority key identifier: F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a37643a3a2f34382d3438203d3e20323632373133.roa
Signing time:             Tue 12 Sep 2023 05:00:00 +0000
ROA not before:           Tue 12 Sep 2023 04:55:00 +0000
ROA not after:            Tue 10 Sep 2024 05:00:00 +0000
asID:                     262713
IP address blocks:        2804:640:7d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:2c:47:ad:62:c4:4f:a8:9f:83:54:99:af:a2:eb:b0:04:65:55:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
        Validity
            Not Before: Sep 12 04:55:00 2023 GMT
            Not After : Sep 10 05:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8e:39:e5:1b:ba:b4:25:ee:ee:cd:eb:81:59:
                    b7:9a:54:3c:b9:92:d2:b8:3f:a5:29:42:a3:87:58:
                    64:b0:26:4e:13:e1:2b:cc:a2:a6:a1:2e:fb:23:cf:
                    db:21:78:fb:ec:16:c0:98:41:c1:bb:08:ff:3e:b6:
                    f9:9a:d4:dd:e6:45:e9:d4:d5:ea:5f:4e:c7:20:e9:
                    2a:09:ef:2c:42:e1:18:c5:b9:89:ed:94:e5:c2:88:
                    06:0c:77:5d:d8:67:c8:71:67:77:37:70:b4:e9:c8:
                    72:4f:74:b5:0f:19:ad:81:ce:8f:ef:d4:fb:62:dc:
                    26:31:6c:7c:1c:7d:82:75:05:79:49:00:5e:c6:3f:
                    68:9f:aa:92:c8:cb:e7:d4:37:68:b6:f4:7e:f8:17:
                    de:69:01:48:15:d2:6b:a3:cc:5b:70:95:6a:28:7f:
                    d6:32:dc:46:fb:fe:75:a8:2a:fa:d4:0a:eb:e4:1c:
                    51:29:a4:4a:2c:8f:5d:35:4a:80:a1:f1:72:c0:ed:
                    b7:14:66:72:db:95:a7:e0:8e:24:99:d2:52:49:c6:
                    61:50:a0:5e:b8:ed:6d:bc:0b:d4:10:c7:64:a1:da:
                    13:02:43:dd:c2:f3:4b:5a:4e:f1:1f:71:47:3b:36:
                    62:34:06:32:78:56:4f:c0:4e:51:63:2e:44:25:f8:
                    5f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:80:41:12:42:27:B4:71:A0:55:A8:50:89:F1:F0:5A:BB:89:20:E4
            X509v3 Authority Key Identifier:
                keyid:F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a37643a3a2f34382d3438203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:640:7d::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:13:16:41:ad:c6:87:3f:ac:25:a1:af:f0:1c:39:d2:d0:55:
         28:62:7f:66:11:11:7f:97:b5:24:cd:24:3f:4e:db:1a:27:1d:
         e3:98:aa:28:9c:49:f4:5a:79:f7:e9:bf:05:7f:7d:dc:d5:07:
         64:77:5b:d4:85:c9:a1:50:2f:15:17:50:cf:70:f8:bd:78:58:
         ee:32:6d:ad:75:38:82:e4:ed:b0:48:b0:29:e9:17:85:96:b4:
         51:df:21:f6:2a:34:c6:56:06:fe:08:26:ec:32:46:1f:cc:34:
         17:ff:dc:85:54:9a:25:a0:57:91:d9:08:84:06:d7:14:6e:09:
         6d:57:6d:3c:18:12:29:b0:b1:ca:a9:55:33:b6:37:07:61:f2:
         07:dc:e1:dd:bd:22:fd:03:6a:f5:16:46:e8:08:f2:c3:7b:35:
         39:69:88:4e:f9:09:78:b2:5c:5e:29:a9:44:e0:4b:1e:0a:7b:
         f6:82:6a:09:79:79:9b:9e:13:d1:05:1b:5a:27:7e:71:bc:aa:
         8d:34:e9:5a:6a:43:c5:5e:c2:50:5f:6a:54:fb:95:9e:db:88:
         de:04:c1:f3:10:d8:29:66:26:eb:e0:e4:11:77:8d:28:7f:07:
         60:02:02:6c:ed:32:f7:03:32:7a:64:09:75:0c:7b:0c:8f:ec:
         19:3d:ac:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org