Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/323830343a356466303a3a2f33332d3333203d3e20323639303032.roa
File:                     323830343a356466303a3a2f33332d3333203d3e20323639303032.roa (raw, json)
Hash identifier:          dly16G2zSrvH9AUFFfAW27FqeZzjHMsFtQXMatcFe18=
Subject key identifier:   60:91:6D:3F:64:C5:CD:63:46:22:75:49:AA:A2:07:61:C6:22:6D:44
Certificate issuer:       /CN=F398A83D78DD12A3CD95E521760F978E1F2B8819
Certificate serial:       6827C097960293090D0DEE960B54D612A6532991
Authority key identifier: F3:98:A8:3D:78:DD:12:A3:CD:95:E5:21:76:0F:97:8E:1F:2B:88:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F398A83D78DD12A3CD95E521760F978E1F2B8819.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/323830343a356466303a3a2f33332d3333203d3e20323639303032.roa
Signing time:             Thu 15 Feb 2024 21:51:40 +0000
ROA not before:           Thu 15 Feb 2024 21:46:40 +0000
ROA not after:            Thu 13 Feb 2025 21:51:40 +0000
asID:                     269002
IP address blocks:        2804:5df0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:27:c0:97:96:02:93:09:0d:0d:ee:96:0b:54:d6:12:a6:53:29:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F398A83D78DD12A3CD95E521760F978E1F2B8819
        Validity
            Not Before: Feb 15 21:46:40 2024 GMT
            Not After : Feb 13 21:51:40 2025 GMT
        Subject: CN=60916D3F64C5CD6346227549AAA20761C6226D44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9a:df:1c:fc:b2:b6:2d:51:78:45:11:bc:9a:
                    af:e7:90:69:34:39:68:71:6f:08:ba:d6:62:68:53:
                    37:e4:92:1c:e8:98:02:3e:ad:4c:7e:ea:c0:8c:a0:
                    45:67:97:53:6a:ab:c1:e1:49:d7:ea:8a:a4:75:7e:
                    60:d6:f3:98:a7:1a:58:69:f1:cd:24:de:27:e6:69:
                    1e:49:07:71:a6:cd:b9:ed:b3:16:46:88:f9:20:2e:
                    e9:51:a1:d7:b8:b5:22:49:a8:4a:36:bf:79:34:e6:
                    d0:43:7f:a8:9c:04:d2:97:6b:b9:19:33:13:29:5d:
                    b1:df:89:01:8a:73:f7:78:b4:d3:a2:05:da:b3:20:
                    6a:81:88:d5:f4:d4:db:14:22:14:d0:22:14:49:fa:
                    84:c7:7d:97:e8:70:1e:2d:fa:da:15:dd:9b:bf:d7:
                    82:0a:41:75:3e:dd:0f:41:12:e1:4f:75:3b:70:95:
                    10:31:56:33:12:97:1c:b3:79:53:0a:7b:30:5e:ed:
                    9c:70:c5:03:f5:4c:c6:61:8d:1b:c7:cb:07:04:07:
                    44:9b:0e:f9:02:d2:00:fd:d5:95:2e:25:d1:11:0a:
                    c4:4f:44:e7:2e:97:e5:ab:fc:2c:4f:77:fe:71:1d:
                    75:ca:95:4d:91:88:36:f5:fd:46:ce:15:52:c9:53:
                    26:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:91:6D:3F:64:C5:CD:63:46:22:75:49:AA:A2:07:61:C6:22:6D:44
            X509v3 Authority Key Identifier:
                keyid:F3:98:A8:3D:78:DD:12:A3:CD:95:E5:21:76:0F:97:8E:1F:2B:88:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/F398A83D78DD12A3CD95E521760F978E1F2B8819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F398A83D78DD12A3CD95E521760F978E1F2B8819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/323830343a356466303a3a2f33332d3333203d3e20323639303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5df0::/33

    Signature Algorithm: sha256WithRSAEncryption
         1b:f8:d0:ca:20:d6:f0:3b:82:17:d6:a6:e1:c0:7b:8f:dc:4b:
         80:ff:f6:f2:8e:0d:1e:93:fa:fe:f1:26:a5:ce:ad:ef:11:44:
         b3:f7:79:a7:09:0f:0f:77:92:ee:89:c9:55:62:17:60:5f:75:
         6a:e1:9e:97:14:28:98:b3:50:2a:b8:bd:ed:11:25:42:d1:de:
         82:44:92:ae:27:33:d5:9d:d7:02:dd:bf:1d:a3:d1:0b:a8:eb:
         c9:3c:c2:9e:89:b2:58:c2:c1:bd:ef:b4:78:cf:91:59:8e:43:
         6f:27:6b:86:f2:1b:12:1e:38:40:13:fa:7a:02:01:77:fb:e7:
         54:c0:e0:be:8c:c0:b7:2d:98:27:58:1b:55:72:9d:25:00:c6:
         cd:80:ff:d0:64:b0:a1:61:3d:52:bb:26:b1:84:b1:3f:b0:80:
         db:93:8e:76:c6:0b:f0:db:71:9b:f8:54:38:9a:35:f3:0f:94:
         87:62:cf:eb:c4:ac:d3:ad:54:a0:49:04:bf:e9:85:ce:ea:e2:
         d7:52:09:e8:ac:87:3d:59:cf:94:a0:c7:94:34:55:5d:a4:d8:
         2b:e0:ea:d8:92:b6:8a:49:b3:05:fe:6a:7f:4b:7b:13:a0:9e:
         76:0b:de:74:28:9c:94:14:a5:41:fe:68:54:7c:c4:c6:bb:10:
         53:14:d3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org