Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/0/323830343a383466383a313130303a3a2f34302d3430203d3e20323732353439.roa
File:                     323830343a383466383a313130303a3a2f34302d3430203d3e20323732353439.roa (raw, json)
Hash identifier:          27x8/SAkZFf0y5YLX/66b8+o6gfAZ6lpoAZv+3+/poA=
Subject key identifier:   17:0C:5F:C9:2E:C1:FF:D1:89:85:B8:26:EC:B6:B9:55:0B:57:0D:A9
Certificate issuer:       /CN=E60E5F7FE1904ACD49F78AEFF5A441C48BD5FBB0
Certificate serial:       7BE71EB848AEA451B7CEEEF9BD05977EC7313E6B
Authority key identifier: E6:0E:5F:7F:E1:90:4A:CD:49:F7:8A:EF:F5:A4:41:C4:8B:D5:FB:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E60E5F7FE1904ACD49F78AEFF5A441C48BD5FBB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/0/323830343a383466383a313130303a3a2f34302d3430203d3e20323732353439.roa
Signing time:             Sat 16 Mar 2024 13:00:00 +0000
ROA not before:           Sat 16 Mar 2024 12:55:00 +0000
ROA not after:            Sat 15 Mar 2025 13:00:00 +0000
asID:                     272549
IP address blocks:        2804:84f8:1100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e7:1e:b8:48:ae:a4:51:b7:ce:ee:f9:bd:05:97:7e:c7:31:3e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E60E5F7FE1904ACD49F78AEFF5A441C48BD5FBB0
        Validity
            Not Before: Mar 16 12:55:00 2024 GMT
            Not After : Mar 15 13:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ed:fb:a5:5e:eb:b7:fc:00:c5:35:9b:9b:64:
                    6c:fe:f4:ec:7d:1f:de:05:04:0d:27:fa:45:71:09:
                    27:36:5b:c4:eb:08:72:34:75:3a:48:d1:11:c3:53:
                    80:62:c7:e4:de:41:a6:c2:22:7d:54:c8:a5:1e:e2:
                    b6:f6:29:d2:39:c5:80:21:0a:43:1a:2b:10:ab:95:
                    31:a3:cf:ea:79:38:c3:aa:67:60:6c:69:4f:6a:be:
                    81:8d:59:e8:c1:99:e7:d3:4e:a9:c0:35:2d:ca:6f:
                    13:cd:b3:d3:75:89:4a:e9:b0:03:f1:e9:e4:73:69:
                    7c:da:58:ed:36:65:68:35:10:95:1b:8e:2a:bc:3b:
                    01:f1:6a:43:33:50:dd:44:eb:36:52:44:25:07:f1:
                    56:1b:cc:30:5f:17:8c:a6:08:77:3c:69:4f:7b:4a:
                    6e:41:2c:f6:87:6d:12:4d:95:f5:39:ff:af:a2:90:
                    58:3b:ca:9b:04:07:7c:1d:59:e3:ae:24:3d:87:5e:
                    72:6c:a4:6c:33:30:4f:1d:59:29:ca:aa:94:00:19:
                    cd:d5:ba:d3:ae:57:08:03:e1:eb:f9:05:70:f2:cd:
                    cf:86:13:6c:c5:f9:79:5b:1e:93:e3:f8:d0:8b:34:
                    ba:85:10:a5:c8:f0:08:a3:33:aa:f3:41:aa:2f:25:
                    c1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0C:5F:C9:2E:C1:FF:D1:89:85:B8:26:EC:B6:B9:55:0B:57:0D:A9
            X509v3 Authority Key Identifier:
                keyid:E6:0E:5F:7F:E1:90:4A:CD:49:F7:8A:EF:F5:A4:41:C4:8B:D5:FB:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/0/E60E5F7FE1904ACD49F78AEFF5A441C48BD5FBB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E60E5F7FE1904ACD49F78AEFF5A441C48BD5FBB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/0/323830343a383466383a313130303a3a2f34302d3430203d3e20323732353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:84f8:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         23:8c:92:63:d2:27:a3:5f:4d:5a:a9:39:16:d2:31:87:8a:03:
         41:8f:9a:97:49:3f:d2:e0:8b:89:b6:88:e3:79:6d:04:49:ed:
         46:3a:c0:e1:7a:04:e9:b3:c2:fd:a7:bf:e4:6a:10:02:c8:08:
         a0:4a:b7:97:cb:73:c4:ea:ce:03:b7:c7:6c:f4:6d:38:99:84:
         ea:12:2c:0e:52:37:0d:8e:b6:cb:c4:c6:f6:81:72:e8:a8:03:
         8b:3a:07:d6:69:1a:fa:ff:e9:2b:0d:45:8f:b6:65:60:de:5e:
         a8:38:b3:fc:0e:07:0a:12:ba:27:12:a7:a0:f8:aa:25:da:03:
         02:26:a8:80:b7:ba:a7:5d:5d:03:6f:cf:8c:e5:f3:8f:8d:f8:
         bc:52:8f:8c:f7:45:56:f7:ad:98:93:82:ad:07:32:94:68:cf:
         fd:d9:2a:5b:27:76:c7:c4:36:72:b1:b1:ab:88:ae:5f:7e:5c:
         f8:32:42:cf:ed:f3:67:2e:20:09:37:2c:1b:b2:e1:01:9e:a7:
         81:30:dc:c3:7f:2b:9f:78:e5:b7:d3:e0:d1:e2:3d:14:01:8e:
         43:9a:ae:12:5e:29:05:6d:98:90:2d:8f:91:5f:f6:b3:2c:13:
         55:63:7d:45:d7:73:cb:7e:48:bf:62:f5:78:74:2b:c5:34:6f:
         9e:11:ea:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org