Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Ff1J97VmJJdc5Wc51j1K5BBuwURa5de1SqJC9KLSWRY/0/323830343a373036343a3a2f33322d3332203d3e20323730373234.roa
File:                     323830343a373036343a3a2f33322d3332203d3e20323730373234.roa (raw, json)
Hash identifier:          jWKgfaOt0mYI2xMoeOZV9U2T2jdq5RgR20yy6zKjQ0M=
Subject key identifier:   05:9B:28:15:CB:58:87:AC:6A:B5:79:C3:C3:3F:F6:4B:74:A7:46:56
Certificate issuer:       /CN=489C8F0A8EBB2E30A24E0EC91B9BB83117F5F640
Certificate serial:       2F36F52E94871B9F2A90B77E4709D3972FFE94E3
Authority key identifier: 48:9C:8F:0A:8E:BB:2E:30:A2:4E:0E:C9:1B:9B:B8:31:17:F5:F6:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/489C8F0A8EBB2E30A24E0EC91B9BB83117F5F640.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Ff1J97VmJJdc5Wc51j1K5BBuwURa5de1SqJC9KLSWRY/0/323830343a373036343a3a2f33322d3332203d3e20323730373234.roa
Signing time:             Tue 05 Sep 2023 18:38:50 +0000
ROA not before:           Tue 05 Sep 2023 18:33:50 +0000
ROA not after:            Tue 03 Sep 2024 18:38:50 +0000
asID:                     270724
IP address blocks:        2804:7064::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:36:f5:2e:94:87:1b:9f:2a:90:b7:7e:47:09:d3:97:2f:fe:94:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=489C8F0A8EBB2E30A24E0EC91B9BB83117F5F640
        Validity
            Not Before: Sep  5 18:33:50 2023 GMT
            Not After : Sep  3 18:38:50 2024 GMT
        Subject: CN=059B2815CB5887AC6AB579C3C33FF64B74A74656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0c:87:e5:ec:f9:da:62:68:ba:1c:71:10:a2:
                    39:79:1a:1d:74:a3:37:54:89:97:f1:b3:b5:11:aa:
                    1c:fb:4f:d4:60:d2:3c:7b:ba:75:4e:ea:a0:4b:4a:
                    72:da:e8:c5:e6:e9:54:c3:24:e8:01:8f:b4:cc:f5:
                    83:ac:d7:ba:b0:0e:cc:5a:a0:50:d3:97:d4:5a:c5:
                    6a:b5:16:a6:63:51:dd:9e:b4:75:80:3c:e7:af:a6:
                    06:25:d2:0b:8c:a0:91:d2:fb:2b:0b:6d:c8:13:84:
                    59:1a:e8:ac:89:de:77:3b:2e:d1:36:2a:f3:cd:56:
                    37:87:0d:9c:c7:5e:c3:5a:55:eb:0f:83:fc:a3:eb:
                    25:b1:15:d4:33:46:a9:d5:26:65:c2:f0:60:f4:5f:
                    0a:a3:2e:84:1b:8a:fb:6f:7c:20:dd:ec:43:9e:af:
                    da:dc:b0:3d:17:59:b1:a3:9c:ad:46:a5:db:bb:2c:
                    8b:a8:34:aa:36:a1:ba:34:e4:92:b9:c7:36:5e:08:
                    e7:8a:49:93:f7:5d:72:cd:a0:2d:cd:2d:93:ff:99:
                    f9:51:01:30:56:8c:bb:ad:67:09:71:e2:90:6b:bc:
                    3c:4a:bf:f2:0c:41:f1:db:e9:6b:ec:16:b8:0b:40:
                    78:d3:6b:df:e8:6a:2d:4e:4f:75:2e:3e:cf:07:13:
                    e5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:9B:28:15:CB:58:87:AC:6A:B5:79:C3:C3:3F:F6:4B:74:A7:46:56
            X509v3 Authority Key Identifier:
                keyid:48:9C:8F:0A:8E:BB:2E:30:A2:4E:0E:C9:1B:9B:B8:31:17:F5:F6:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Ff1J97VmJJdc5Wc51j1K5BBuwURa5de1SqJC9KLSWRY/0/489C8F0A8EBB2E30A24E0EC91B9BB83117F5F640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/489C8F0A8EBB2E30A24E0EC91B9BB83117F5F640.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Ff1J97VmJJdc5Wc51j1K5BBuwURa5de1SqJC9KLSWRY/0/323830343a373036343a3a2f33322d3332203d3e20323730373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7064::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:da:33:b0:30:9b:0c:7a:32:77:a4:4a:48:2d:fe:96:ee:c7:
         30:a0:80:e4:86:7a:89:22:32:17:ac:41:a1:89:01:3f:1a:33:
         9e:44:15:0a:87:b6:c1:2f:b7:db:4f:2f:fb:2c:e3:63:fe:78:
         1b:0a:e2:2c:ac:d9:08:bc:21:8a:ff:69:2c:a0:40:d6:90:e1:
         14:0f:37:8c:66:03:4a:71:61:ee:37:34:0d:52:5e:71:84:cc:
         f0:3a:14:2a:c6:82:a0:e6:35:d7:71:72:8e:2a:01:36:a8:df:
         99:cb:7d:1d:28:9c:99:3a:77:ba:cb:8f:70:25:6e:c6:13:f8:
         6b:72:9b:f4:c9:fc:0a:8f:54:6e:d5:71:53:99:a4:9a:d1:be:
         06:65:2c:7d:53:29:71:66:a1:43:30:07:80:7b:7f:cf:3f:e0:
         04:c9:3a:da:6d:b3:6a:53:57:14:f8:6e:4b:63:6a:87:69:7e:
         cb:69:a1:55:a5:53:6b:3d:bb:de:2f:b0:92:2c:08:2d:da:07:
         f2:56:b1:30:70:16:8a:a0:f0:b4:b4:33:09:47:62:7d:e6:a0:
         21:09:3f:89:76:6b:3d:1c:34:58:dd:2f:23:f9:39:36:73:27:
         2c:ea:b4:5d:a8:aa:e0:f5:07:7a:e7:26:2a:21:4a:c1:dd:12:
         2e:fa:75:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org