Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/323830343a323966303a383030303a3a2f33332d3333203d3e20323634303436.roa
File:                     323830343a323966303a383030303a3a2f33332d3333203d3e20323634303436.roa (raw, json)
Hash identifier:          Ep5yrJjN/1TJEs+CByJQvXCF1nHmjqw05vAwzEn0lmE=
Subject key identifier:   5E:96:FC:61:2F:C0:E0:60:2A:C2:1D:6F:B8:8C:11:70:E1:FB:A5:6F
Certificate issuer:       /CN=F0B0BA2725A8409FB3A503073DAEA4474CF2C54F
Certificate serial:       3DF4DAA30CA2E28CE72A4CCE9DB10F3E2405A919
Authority key identifier: F0:B0:BA:27:25:A8:40:9F:B3:A5:03:07:3D:AE:A4:47:4C:F2:C5:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0B0BA2725A8409FB3A503073DAEA4474CF2C54F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/323830343a323966303a383030303a3a2f33332d3333203d3e20323634303436.roa
Signing time:             Thu 14 Jul 2022 12:00:01 +0000
ROA not before:           Thu 14 Jul 2022 11:55:01 +0000
ROA not after:            Fri 14 Jul 2023 12:00:01 +0000
asID:                     264046
IP address blocks:        2804:29f0:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f4:da:a3:0c:a2:e2:8c:e7:2a:4c:ce:9d:b1:0f:3e:24:05:a9:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0B0BA2725A8409FB3A503073DAEA4474CF2C54F
        Validity
            Not Before: Jul 14 11:55:01 2022 GMT
            Not After : Jul 14 12:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:07:ac:97:c1:ac:bf:40:2c:1f:5e:50:29:90:
                    9f:44:5a:8a:cb:b4:84:bf:12:36:8e:45:61:7f:8d:
                    21:e1:b4:8a:56:98:27:50:bf:40:94:ec:95:35:44:
                    d0:cf:65:f8:9c:a7:91:5d:fc:ff:14:cc:65:f7:a1:
                    ee:9b:66:25:0e:90:18:13:f1:cb:36:0b:0e:ba:9c:
                    f8:87:32:fa:73:a1:30:aa:4a:f0:11:5a:91:50:16:
                    02:24:a1:61:18:f3:98:32:7e:6e:22:1d:e3:99:20:
                    1f:e3:94:b8:10:5a:29:37:fd:e1:ce:3a:38:ac:40:
                    2b:cf:eb:5a:86:0b:cc:76:9a:e4:94:df:77:cd:20:
                    af:8f:eb:9f:7a:4b:f5:30:bf:1a:15:68:38:95:cc:
                    be:19:d5:13:2d:90:69:ff:a7:ec:23:12:a0:85:b1:
                    c1:0f:46:09:e1:1e:4b:8c:1b:93:b1:0a:07:2b:94:
                    0c:0e:3a:17:8e:e7:b9:18:1c:b7:98:e9:54:21:7c:
                    84:bb:db:d2:fb:5c:69:03:04:50:be:9a:a3:f0:e0:
                    57:b7:5c:de:a9:1e:61:12:d1:21:b9:27:70:83:0f:
                    b7:09:2d:c7:c5:ad:a1:3a:0f:01:81:a0:07:5d:7b:
                    f7:21:cc:18:7f:8b:dd:36:19:e2:25:d2:b9:8b:25:
                    98:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:96:FC:61:2F:C0:E0:60:2A:C2:1D:6F:B8:8C:11:70:E1:FB:A5:6F
            X509v3 Authority Key Identifier:
                keyid:F0:B0:BA:27:25:A8:40:9F:B3:A5:03:07:3D:AE:A4:47:4C:F2:C5:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/F0B0BA2725A8409FB3A503073DAEA4474CF2C54F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0B0BA2725A8409FB3A503073DAEA4474CF2C54F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/323830343a323966303a383030303a3a2f33332d3333203d3e20323634303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:29f0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8d:fb:04:41:dd:d1:dd:37:d9:bd:90:7c:f7:30:64:67:72:79:
         80:de:cc:4a:8a:f1:9e:ef:76:59:f1:a0:98:e4:0b:d4:f5:68:
         de:1d:9e:83:ed:71:b0:aa:41:ef:81:6b:a2:cc:02:e9:70:a1:
         46:cc:c5:7a:cc:a4:7b:a4:41:db:9c:86:14:3e:25:69:35:db:
         12:f8:5f:2c:68:1f:5d:9d:4c:48:5d:7a:02:71:47:70:e7:43:
         09:0f:3c:6f:52:cb:7f:ac:8c:5f:81:1a:3b:c3:01:1d:2f:58:
         4e:7f:cc:24:f9:a1:45:5a:ad:79:ba:dd:4c:ab:07:58:06:58:
         dc:71:3f:89:a0:0e:70:c8:87:64:d9:58:c2:f1:ef:7f:6b:a2:
         86:e0:7e:f9:bd:f4:61:b9:2f:f7:e7:19:f2:3a:5c:74:8b:1e:
         a1:4f:d2:01:d8:45:eb:3e:6d:3d:28:6a:ec:03:c8:80:93:6e:
         aa:f0:a3:27:ef:17:4e:91:8d:1a:01:6f:a0:9f:27:e0:4a:bf:
         78:35:23:05:84:89:fb:aa:30:a1:94:ad:07:1d:2e:b5:e5:bd:
         59:b8:8d:dc:2c:8c:67:f9:f7:1a:52:5a:e7:74:d3:1c:87:57:
         fe:42:36:4c:b7:2a:c0:2e:ee:a4:65:dc:87:60:09:7a:c7:ed:
         8c:d8:66:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org