Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/1/323830343a343237303a363030303a3a2f33352d3335203d3e20323637353030.roa
File:                     323830343a343237303a363030303a3a2f33352d3335203d3e20323637353030.roa (raw, json)
Hash identifier:          lqbj6teSHqAka72Xdd6aHx/mwE9lSojXCHVr2D7yMfw=
Subject key identifier:   15:34:33:7E:77:54:E3:3A:94:E5:A9:D0:64:FB:0D:58:F1:28:41:CA
Certificate issuer:       /CN=0EA76B48B04B070E9B34381990B56558D874A94F
Certificate serial:       2A98DC00424DC7E7F0E2362D6618AE198C5DD24D
Authority key identifier: 0E:A7:6B:48:B0:4B:07:0E:9B:34:38:19:90:B5:65:58:D8:74:A9:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EA76B48B04B070E9B34381990B56558D874A94F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/1/323830343a343237303a363030303a3a2f33352d3335203d3e20323637353030.roa
Signing time:             Thu 04 Apr 2024 16:37:02 +0000
ROA not before:           Thu 04 Apr 2024 16:32:02 +0000
ROA not after:            Thu 03 Apr 2025 16:37:02 +0000
asID:                     267500
IP address blocks:        2804:4270:6000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:98:dc:00:42:4d:c7:e7:f0:e2:36:2d:66:18:ae:19:8c:5d:d2:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EA76B48B04B070E9B34381990B56558D874A94F
        Validity
            Not Before: Apr  4 16:32:02 2024 GMT
            Not After : Apr  3 16:37:02 2025 GMT
        Subject: CN=1534337E7754E33A94E5A9D064FB0D58F12841CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:be:ae:d2:fb:15:e9:86:a0:7e:5c:c6:41:de:
                    68:b2:ad:87:07:46:49:9b:ee:cd:3c:84:8a:89:6e:
                    3a:26:23:ae:8a:75:56:19:c5:00:3a:cc:ae:a1:82:
                    84:fd:09:bf:7c:8d:6e:c1:ed:dd:72:29:8f:53:d9:
                    fa:5d:a0:88:4f:dd:a3:b4:ce:38:4c:8e:02:a9:43:
                    78:64:10:28:0e:cb:cd:53:8d:71:a9:8c:6c:b0:3b:
                    20:38:95:f4:5f:6b:37:4f:cf:cd:1c:a4:96:a0:6c:
                    f7:12:64:48:43:ff:f0:44:22:18:6d:06:ad:69:c3:
                    fe:97:b4:df:28:3d:2f:27:3c:1d:00:79:c3:09:a6:
                    a4:1e:d9:87:6c:3e:a9:c0:3a:59:93:d2:59:ca:4c:
                    d8:4a:bc:46:55:2c:d7:26:5e:56:b5:d6:c2:aa:a6:
                    01:66:59:92:5c:05:47:f1:13:54:f2:59:d0:ed:01:
                    14:24:f3:56:8c:77:27:4e:f4:ef:dc:3a:7d:3c:b4:
                    9b:cf:4a:fc:22:86:d4:80:48:ea:54:c4:d3:ca:47:
                    0b:ec:0f:f6:e1:0b:cc:14:bc:13:33:b0:1b:7e:25:
                    6a:b9:c8:01:7f:4a:be:1b:22:7e:2e:f1:2a:aa:98:
                    70:e2:48:95:f0:18:7d:73:8f:ca:1d:29:f7:d0:44:
                    d5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:34:33:7E:77:54:E3:3A:94:E5:A9:D0:64:FB:0D:58:F1:28:41:CA
            X509v3 Authority Key Identifier:
                keyid:0E:A7:6B:48:B0:4B:07:0E:9B:34:38:19:90:B5:65:58:D8:74:A9:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/1/0EA76B48B04B070E9B34381990B56558D874A94F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EA76B48B04B070E9B34381990B56558D874A94F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/1/323830343a343237303a363030303a3a2f33352d3335203d3e20323637353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4270:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         7a:54:8b:4a:d5:f2:b9:e3:5a:76:f8:5c:b8:71:49:39:55:ca:
         01:72:73:9f:75:81:08:42:c6:27:ce:31:e3:22:81:fa:76:dd:
         3e:42:f5:de:6a:d3:35:02:7c:61:51:ca:50:ae:27:38:e5:7a:
         bc:5c:cf:84:64:6b:8a:46:24:01:80:0d:52:cc:9f:83:1b:8c:
         76:08:a3:d9:9c:2e:36:24:e8:0d:5e:65:cc:dd:cd:e3:95:cf:
         db:58:0d:39:7e:b6:f0:c9:16:c8:f5:74:ff:b3:99:ee:76:d9:
         07:91:fc:40:cb:e9:8f:08:cb:5b:6e:b3:f9:61:d0:40:31:47:
         d2:73:79:bd:30:17:e6:48:ce:e4:15:90:13:12:ed:4f:1f:97:
         c7:45:d9:36:30:a3:85:c1:d3:68:c4:bf:3e:af:39:d6:5d:6c:
         83:04:74:e9:f2:37:5a:4d:7a:62:fa:7b:c4:37:d2:f1:fa:0a:
         fe:2f:e0:9e:74:99:6f:0c:a9:92:fe:70:1a:7f:b2:f6:f5:98:
         3a:c1:f6:82:64:0d:72:64:ef:b8:c2:11:e1:8b:9d:b5:a3:42:
         35:dd:4a:5c:5e:36:98:e4:60:72:ae:4e:60:3e:f4:85:67:56:
         b0:d4:b6:e5:26:89:25:81:15:75:20:4b:1b:b9:25:d2:d2:b9:
         e4:ab:92:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org