Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/0/323830343a343666633a363030363a3a2f34382d3438203d3e20323637303234.roa
File:                     323830343a343666633a363030363a3a2f34382d3438203d3e20323637303234.roa (raw, json)
Hash identifier:          +p/z3/NupYVF08T0abFMe/6Rc3GGuKMA/rO5ecvXnA4=
Subject key identifier:   49:79:7E:4B:02:5A:21:98:9F:71:EF:BF:86:D1:D7:AA:CC:1A:4A:42
Certificate issuer:       /CN=57566AD0E614192635CC891E97E47A090618F3F5
Certificate serial:       4DB4FBE2B597C9CA738BB68E839E118694244BFE
Authority key identifier: 57:56:6A:D0:E6:14:19:26:35:CC:89:1E:97:E4:7A:09:06:18:F3:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57566AD0E614192635CC891E97E47A090618F3F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/0/323830343a343666633a363030363a3a2f34382d3438203d3e20323637303234.roa
Signing time:             Tue 02 Jan 2024 21:13:36 +0000
ROA not before:           Tue 02 Jan 2024 21:08:36 +0000
ROA not after:            Tue 31 Dec 2024 21:13:36 +0000
asID:                     267024
IP address blocks:        2804:46fc:6006::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b4:fb:e2:b5:97:c9:ca:73:8b:b6:8e:83:9e:11:86:94:24:4b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57566AD0E614192635CC891E97E47A090618F3F5
        Validity
            Not Before: Jan  2 21:08:36 2024 GMT
            Not After : Dec 31 21:13:36 2024 GMT
        Subject: CN=49797E4B025A21989F71EFBF86D1D7AACC1A4A42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cc:25:44:75:d2:22:bb:ce:f4:c6:98:4b:b2:
                    9e:31:fe:5a:62:0e:8f:7a:1c:0b:74:0c:25:d4:d8:
                    46:1d:57:5f:77:7f:b2:83:db:0d:e0:9a:fe:ea:98:
                    7c:8c:3e:31:42:73:ff:20:fc:6d:5c:fd:28:9b:c6:
                    71:20:d2:08:6e:e1:e4:a4:55:d2:0c:79:87:f7:64:
                    4d:0a:68:1d:ad:bd:e2:4f:cd:5c:68:3c:6b:8d:66:
                    13:20:83:c4:9b:86:2a:ef:ea:3b:ce:1b:39:2a:fc:
                    7a:a0:8a:9b:9f:5a:7e:f0:f4:42:c3:34:ad:ca:53:
                    89:cf:2e:20:07:d2:6d:34:c5:56:31:bb:b5:0a:8a:
                    31:fb:35:00:ec:c2:34:78:79:2e:7a:9f:6b:d2:cd:
                    06:bf:56:6e:92:00:69:24:c4:25:97:db:fe:6b:8f:
                    fd:f9:b9:57:b9:88:01:40:7a:fc:49:af:8f:e0:3e:
                    8e:f8:3c:5f:25:72:28:38:2b:79:95:97:5a:9e:52:
                    bc:ff:99:eb:8a:a7:74:e8:25:67:22:24:74:40:52:
                    48:5a:c7:dd:64:01:ad:1f:52:ec:98:67:17:46:c9:
                    e3:95:43:8e:0b:78:31:f5:e7:49:07:19:cb:ba:d4:
                    cc:99:e5:9f:cb:75:dd:71:eb:1f:a6:70:bf:53:f1:
                    f1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:79:7E:4B:02:5A:21:98:9F:71:EF:BF:86:D1:D7:AA:CC:1A:4A:42
            X509v3 Authority Key Identifier:
                keyid:57:56:6A:D0:E6:14:19:26:35:CC:89:1E:97:E4:7A:09:06:18:F3:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/0/57566AD0E614192635CC891E97E47A090618F3F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57566AD0E614192635CC891E97E47A090618F3F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/0/323830343a343666633a363030363a3a2f34382d3438203d3e20323637303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46fc:6006::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:5c:4a:66:1a:89:a7:30:b4:6f:9d:8e:b7:49:a7:cb:3b:b3:
         4f:24:d4:8d:71:e5:db:4f:aa:aa:ec:d1:79:c5:67:d0:47:49:
         b0:f8:af:67:ae:ee:2a:6d:ac:c4:71:98:01:f6:d6:02:c5:21:
         9f:43:21:c0:46:5e:57:8e:0f:70:e7:b7:d3:e6:61:73:bb:95:
         ae:49:0b:0f:15:21:5a:05:03:8b:37:81:cd:92:25:b8:3e:3a:
         44:1e:4e:50:54:46:27:2e:0a:15:cf:77:c4:ae:42:b3:c0:04:
         46:d4:af:f3:6e:95:a4:7c:0b:8e:fc:53:72:49:79:1c:0c:69:
         68:33:a2:f2:66:04:08:38:74:9f:d3:f5:9a:44:96:3e:d0:85:
         3c:0f:58:39:2e:11:14:c6:e4:5e:b8:ab:09:9c:58:b3:0f:0b:
         7c:d7:b1:a9:ae:b7:7c:f1:14:55:ed:24:52:d8:d1:cc:e4:c8:
         87:2f:b7:de:9d:44:ae:66:d4:b7:ba:11:34:73:6e:ef:3c:26:
         28:df:92:5a:3a:a2:c8:30:ae:91:96:00:7d:39:15:66:aa:a0:
         db:a9:42:be:ea:e9:0e:11:63:23:9e:df:3e:af:3c:ee:73:19:
         08:e3:5c:19:9d:1a:15:09:6e:ec:ee:de:0a:42:01:7f:f9:52:
         df:68:87:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org