Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/1/323830343a316366383a3a2f33322d313238203d3e203631363836.roa
File:                     323830343a316366383a3a2f33322d313238203d3e203631363836.roa (raw, json)
Hash identifier:          ZIBrgBG1uKJjTfykbQnCcZS1jXHUekuFWJ8BTxYf7y4=
Subject key identifier:   CE:09:FA:FF:94:51:B6:F3:E0:A4:8D:C4:0F:74:F1:D8:FC:50:CC:AC
Certificate issuer:       /CN=B9E79F5B48E5CE502B6B62B2BEBF137DA301C0D8
Certificate serial:       595F22015B602800CA1DE3CBB8D2666C18D38C9E
Authority key identifier: B9:E7:9F:5B:48:E5:CE:50:2B:6B:62:B2:BE:BF:13:7D:A3:01:C0:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9E79F5B48E5CE502B6B62B2BEBF137DA301C0D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/1/323830343a316366383a3a2f33322d313238203d3e203631363836.roa
Signing time:             Thu 04 Apr 2024 07:43:10 +0000
ROA not before:           Thu 04 Apr 2024 07:38:10 +0000
ROA not after:            Thu 03 Apr 2025 07:43:10 +0000
asID:                     61686
IP address blocks:        2804:1cf8::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:5f:22:01:5b:60:28:00:ca:1d:e3:cb:b8:d2:66:6c:18:d3:8c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9E79F5B48E5CE502B6B62B2BEBF137DA301C0D8
        Validity
            Not Before: Apr  4 07:38:10 2024 GMT
            Not After : Apr  3 07:43:10 2025 GMT
        Subject: CN=CE09FAFF9451B6F3E0A48DC40F74F1D8FC50CCAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:84:94:1e:da:cf:a4:c0:13:6f:dc:ea:2a:3a:
                    37:09:f9:b2:02:c4:10:26:25:3e:ac:8d:cc:13:a3:
                    bc:57:ce:5b:9e:64:a3:6b:a2:5e:8c:2b:d6:f1:e6:
                    e8:32:d3:89:03:b2:04:81:c5:6d:0b:56:e3:f7:50:
                    3b:fa:e5:e7:11:88:ef:25:9e:e6:76:7f:2f:9e:31:
                    c1:18:a9:c3:7d:60:0f:b1:34:e4:67:32:72:fb:5a:
                    0f:bd:a9:4a:b2:2e:ee:9b:1d:c5:16:94:90:2b:0a:
                    fa:38:58:7a:30:f2:74:c5:54:a1:21:f8:11:57:8a:
                    fe:18:a5:55:1a:e5:1e:54:53:d0:7f:56:2c:a6:d4:
                    30:2a:d5:17:bd:ee:e7:ce:2f:c9:46:9b:56:53:62:
                    ef:91:37:0a:b4:e2:8b:89:6f:d2:6b:2e:f6:dd:42:
                    05:b9:c5:cb:0f:6b:16:ee:2e:fa:ea:02:f1:04:97:
                    02:a9:58:17:4e:97:43:38:89:35:d5:a0:ae:4f:9d:
                    13:7e:d4:0c:53:c7:25:15:a0:b8:1e:09:d8:35:92:
                    7e:57:f8:f3:31:70:9c:80:27:7f:f8:fa:96:2a:4a:
                    a5:ab:60:21:a6:5c:97:33:f5:c6:e8:5a:23:49:bb:
                    92:a2:3f:bf:9f:60:ab:42:22:84:a0:e2:12:d0:4c:
                    55:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:09:FA:FF:94:51:B6:F3:E0:A4:8D:C4:0F:74:F1:D8:FC:50:CC:AC
            X509v3 Authority Key Identifier:
                keyid:B9:E7:9F:5B:48:E5:CE:50:2B:6B:62:B2:BE:BF:13:7D:A3:01:C0:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/1/B9E79F5B48E5CE502B6B62B2BEBF137DA301C0D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9E79F5B48E5CE502B6B62B2BEBF137DA301C0D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/1/323830343a316366383a3a2f33322d313238203d3e203631363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cf8::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:1c:e6:90:a2:f5:58:f9:0f:ba:89:9e:3e:82:66:01:4e:8a:
         9c:65:83:9d:fd:e7:dc:42:91:81:9f:bd:73:27:ce:c0:4c:8f:
         ab:81:21:08:ab:bc:91:ac:0b:10:00:a2:00:fc:e4:be:be:f6:
         f5:09:0a:e1:f9:b1:f0:4f:49:69:35:36:a7:e6:39:dd:e4:12:
         0a:c2:5c:f6:71:48:b4:00:56:a5:82:ed:a7:d2:fa:f6:04:87:
         0a:df:d2:f3:d8:f1:f4:3a:aa:59:b6:14:da:42:33:4b:ef:96:
         13:47:d7:fd:f7:8b:99:bd:f1:35:9b:bc:11:94:6a:45:87:51:
         c3:29:16:0f:4c:35:80:29:a7:90:3a:83:3f:76:0d:c0:00:14:
         fc:23:68:c2:44:de:98:76:8a:3a:05:82:06:d9:fb:97:3e:e2:
         e5:c2:3a:f8:10:30:e7:f5:29:58:67:21:f4:c4:2a:bd:87:e2:
         5a:66:17:2c:6c:fe:61:68:10:b8:3f:80:8a:cd:8c:fd:8c:23:
         7c:a5:03:79:9f:ea:79:b4:bf:2f:67:e5:11:ae:ed:b6:82:ab:
         16:58:37:e0:97:55:49:3e:04:9b:66:54:44:ac:05:a7:b7:a8:
         9c:1c:7e:95:72:af:0c:b7:90:c1:85:86:48:fc:8b:d2:41:a5:
         e6:0a:f7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org