Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/323830343a356161343a3a2f33342d3334203d3e20323638373836.roa
File:                     323830343a356161343a3a2f33342d3334203d3e20323638373836.roa (raw, json)
Hash identifier:          5qRNXgTLZ6sM38DUsGUKotjchdI/gI1dU5US29SUdVA=
Subject key identifier:   F0:FA:7F:AB:19:F2:85:6D:51:9F:50:CD:98:5C:76:4E:66:D4:95:4D
Certificate issuer:       /CN=A68038F934F5E622FA09D5ED3CCBF64D92391162
Certificate serial:       40FC1EC56F6D2E282F2B81F95086FA4244C45A6B
Authority key identifier: A6:80:38:F9:34:F5:E6:22:FA:09:D5:ED:3C:CB:F6:4D:92:39:11:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A68038F934F5E622FA09D5ED3CCBF64D92391162.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/323830343a356161343a3a2f33342d3334203d3e20323638373836.roa
Signing time:             Thu 04 Apr 2024 10:25:57 +0000
ROA not before:           Thu 04 Apr 2024 10:20:57 +0000
ROA not after:            Thu 03 Apr 2025 10:25:57 +0000
asID:                     268786
IP address blocks:        2804:5aa4::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:fc:1e:c5:6f:6d:2e:28:2f:2b:81:f9:50:86:fa:42:44:c4:5a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A68038F934F5E622FA09D5ED3CCBF64D92391162
        Validity
            Not Before: Apr  4 10:20:57 2024 GMT
            Not After : Apr  3 10:25:57 2025 GMT
        Subject: CN=F0FA7FAB19F2856D519F50CD985C764E66D4954D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:98:a4:3c:fd:fe:17:f2:47:20:6e:90:3c:45:
                    6f:97:f0:f2:87:1c:39:c4:84:02:7e:4c:0a:b0:6e:
                    77:01:24:de:b2:96:ee:f4:15:b0:80:40:df:b2:16:
                    11:84:bc:63:e8:93:43:2a:3c:e4:d1:ac:fb:3e:4c:
                    a9:df:50:ea:7d:b5:a1:80:4f:ef:ab:21:14:05:38:
                    cf:f8:cf:df:bf:07:24:0d:0f:ce:96:ac:e4:ff:af:
                    10:c1:1f:b9:62:ee:53:f9:14:02:c8:bd:99:b9:53:
                    b0:02:5b:28:44:a3:21:87:1d:f2:2b:28:64:fe:4b:
                    1b:40:ff:d5:97:89:3f:6b:9d:3e:76:d2:51:f6:1c:
                    3c:60:cd:f8:76:8d:d6:5a:83:e1:6a:8b:7e:9e:03:
                    00:df:52:d2:52:e5:5a:ee:df:6b:84:ce:b2:77:7a:
                    45:d5:bd:99:dd:97:19:be:b1:c3:d4:a7:a7:b7:27:
                    70:aa:bf:de:23:8c:30:28:ee:f7:5f:bb:41:f2:42:
                    58:98:c8:d1:f1:d4:8d:7d:65:cc:3d:0c:c8:70:35:
                    e0:10:a2:c4:ac:1c:5f:a1:21:d6:67:2f:ac:cd:b9:
                    70:0d:96:55:35:f1:9c:f3:6b:ed:37:e4:fe:e8:9d:
                    37:ea:fa:c4:2d:51:ae:14:61:da:90:9c:fa:20:aa:
                    7b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FA:7F:AB:19:F2:85:6D:51:9F:50:CD:98:5C:76:4E:66:D4:95:4D
            X509v3 Authority Key Identifier:
                keyid:A6:80:38:F9:34:F5:E6:22:FA:09:D5:ED:3C:CB:F6:4D:92:39:11:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/A68038F934F5E622FA09D5ED3CCBF64D92391162.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A68038F934F5E622FA09D5ED3CCBF64D92391162.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/323830343a356161343a3a2f33342d3334203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5aa4::/34

    Signature Algorithm: sha256WithRSAEncryption
         55:81:89:3a:ce:c5:36:01:63:65:a1:8c:ee:c5:97:5c:dd:f3:
         5b:5b:e7:31:42:1d:d9:61:ec:e6:5a:f0:06:6d:6b:5f:30:52:
         b7:8a:aa:ac:a5:b4:17:16:5a:a3:9e:f7:ae:71:94:ef:62:91:
         8f:da:e8:60:c5:52:0a:10:28:1a:78:a1:e1:cf:f9:dc:d7:5f:
         f2:24:a9:ef:c3:b5:eb:89:05:0b:da:86:70:81:a2:5e:60:a2:
         13:50:92:9d:da:38:b6:1e:4a:b5:c3:dc:fc:98:3e:72:f0:a6:
         74:67:e5:02:cd:be:6e:1c:73:2c:db:fb:06:94:26:a6:64:61:
         fa:ad:89:04:9d:8f:0e:1b:3e:a6:79:b4:f2:52:34:40:65:41:
         44:4d:14:db:91:a5:c0:ac:f2:24:f1:3a:bf:46:15:55:cd:0c:
         0b:5b:3d:00:c1:d4:13:21:4a:13:8f:ce:97:05:6e:a0:6d:f2:
         9f:6a:0a:41:16:b6:97:77:20:22:f3:c8:39:72:4a:75:5f:82:
         02:51:db:0b:97:af:ff:0b:c0:4f:96:86:73:c1:02:d0:8d:79:
         b0:76:7d:bb:16:b8:91:cb:38:65:e5:e0:c2:14:33:b8:42:18:
         87:de:6c:e1:93:d9:df:81:0a:9b:de:87:93:b9:0a:01:5d:d8:
         29:7d:9f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org