Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/323830343a363762633a3a2f33322d3332203d3e20323639363437.roa
File:                     323830343a363762633a3a2f33322d3332203d3e20323639363437.roa (raw, json)
Hash identifier:          MNNsba2yTI5NgUW2RgNXIv3SWBQmuOG1A34uMfCedUw=
Subject key identifier:   24:25:CE:D2:C2:3D:FD:82:F0:57:E3:DD:F2:40:2C:28:4F:10:CD:24
Certificate issuer:       /CN=7FCBD7E5FBEE975815176805D0CC6EB75A36F40B
Certificate serial:       0D47E4500BC74A419872E25DA0C29AE48CA42CBA
Authority key identifier: 7F:CB:D7:E5:FB:EE:97:58:15:17:68:05:D0:CC:6E:B7:5A:36:F4:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FCBD7E5FBEE975815176805D0CC6EB75A36F40B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/323830343a363762633a3a2f33322d3332203d3e20323639363437.roa
Signing time:             Wed 20 Mar 2024 18:37:08 +0000
ROA not before:           Wed 20 Mar 2024 18:32:08 +0000
ROA not after:            Wed 19 Mar 2025 18:37:08 +0000
asID:                     269647
IP address blocks:        2804:67bc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:47:e4:50:0b:c7:4a:41:98:72:e2:5d:a0:c2:9a:e4:8c:a4:2c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FCBD7E5FBEE975815176805D0CC6EB75A36F40B
        Validity
            Not Before: Mar 20 18:32:08 2024 GMT
            Not After : Mar 19 18:37:08 2025 GMT
        Subject: CN=2425CED2C23DFD82F057E3DDF2402C284F10CD24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d5:43:35:22:f9:b3:e9:47:d6:e5:ab:2d:dc:
                    fd:73:b9:20:81:8b:6b:a0:b1:c7:cd:d9:2f:54:56:
                    0a:88:7f:75:39:e8:ab:b8:bf:1e:dd:eb:35:28:33:
                    c8:75:3a:90:ba:03:e1:1e:5e:44:53:ba:46:2f:45:
                    4b:a8:ff:b4:f8:4e:f9:83:2b:84:51:b4:98:96:11:
                    8d:b4:8e:e6:b2:a2:46:61:99:72:d1:e5:8b:79:72:
                    36:69:be:5f:37:b8:b8:d8:a6:b5:d6:97:8d:47:14:
                    5b:76:b5:ac:ab:34:c6:b8:99:51:32:42:e2:ac:8d:
                    a3:25:a3:ad:83:eb:f5:b8:6d:6a:e9:5a:fd:2b:54:
                    ed:5e:3d:64:ab:b7:7e:9d:ef:74:5b:50:5f:2a:3f:
                    ef:a6:13:ed:8c:6f:44:cc:24:4a:71:e4:91:1c:62:
                    b5:7e:f1:7c:9a:e9:f4:52:fd:0a:76:de:d9:61:a3:
                    75:0d:a4:e5:c2:92:ef:1a:72:42:6e:ba:ce:e7:29:
                    7e:c6:3f:5e:0e:ed:42:4c:59:40:f5:5f:c8:8b:65:
                    5e:5a:a5:0b:c3:7b:33:7e:1f:27:39:ed:78:25:ed:
                    ca:06:22:ce:9b:d5:eb:bf:0d:c4:13:32:ed:8f:6b:
                    dc:9b:71:22:06:29:90:9a:0f:44:90:ce:c6:86:18:
                    fe:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:25:CE:D2:C2:3D:FD:82:F0:57:E3:DD:F2:40:2C:28:4F:10:CD:24
            X509v3 Authority Key Identifier:
                keyid:7F:CB:D7:E5:FB:EE:97:58:15:17:68:05:D0:CC:6E:B7:5A:36:F4:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/7FCBD7E5FBEE975815176805D0CC6EB75A36F40B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FCBD7E5FBEE975815176805D0CC6EB75A36F40B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/323830343a363762633a3a2f33322d3332203d3e20323639363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:06:6f:c0:f4:f8:8f:38:99:0a:c4:d6:af:ff:b0:8e:52:69:
         e4:12:7e:af:72:cf:46:8f:08:98:c6:98:ad:04:22:20:22:e9:
         f3:a8:a3:e9:4b:29:23:e0:f8:fd:87:4c:83:14:f3:07:fa:06:
         6b:1e:16:43:41:92:6b:19:11:32:1a:68:85:08:71:dd:c3:10:
         c4:15:8c:c2:55:cf:76:4b:0f:ac:61:cc:0f:21:3a:8e:05:b9:
         37:c9:69:29:40:75:98:82:be:16:8c:62:f1:a9:14:aa:01:2c:
         7d:7d:27:28:c2:35:d2:a4:f4:c8:17:ba:81:9d:b4:04:ac:2b:
         6b:38:95:af:e7:e2:da:62:74:ab:a8:5e:63:cd:fe:f3:59:af:
         bf:22:7d:c0:1d:ff:72:49:60:93:f3:38:49:12:45:47:ad:c0:
         13:dc:ba:a9:02:9c:24:af:8a:cd:60:a3:e0:8b:0f:08:b1:b2:
         b1:cc:b3:f1:0b:0a:1c:d2:86:59:b5:aa:7b:fd:6e:03:ec:4f:
         35:34:f1:0d:52:bc:1c:e2:11:39:1d:2e:9e:18:c8:79:01:a0:
         13:68:91:05:3e:12:97:6d:da:48:9c:d9:5f:b7:7e:62:6f:a5:
         8b:17:e0:7d:40:cf:07:ba:70:cb:06:bf:60:2a:aa:9a:57:13:
         93:7c:25:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:00 2024 by rpki-client on console-fra.rpki-client.org