Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/323830343a323966303a3a2f33322d3332203d3e20323634303436.roa
File:                     323830343a323966303a3a2f33322d3332203d3e20323634303436.roa (raw, json)
Hash identifier:          xjH/twkMKiyVMyK8PN6ivdrkJBLPgTXI2WmwMm2y444=
Subject key identifier:   D1:1E:24:D9:D3:C1:E5:8A:BA:C5:F5:03:FE:3C:78:F4:62:49:76:E9
Certificate issuer:       /CN=F0B0BA2725A8409FB3A503073DAEA4474CF2C54F
Certificate serial:       1DFCEDDF8C305DF0764775C44B57C99A01AD376F
Authority key identifier: F0:B0:BA:27:25:A8:40:9F:B3:A5:03:07:3D:AE:A4:47:4C:F2:C5:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0B0BA2725A8409FB3A503073DAEA4474CF2C54F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/323830343a323966303a3a2f33322d3332203d3e20323634303436.roa
Signing time:             Thu 14 Jul 2022 12:00:01 +0000
ROA not before:           Thu 14 Jul 2022 11:55:01 +0000
ROA not after:            Fri 14 Jul 2023 12:00:01 +0000
asID:                     264046
IP address blocks:        2804:29f0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:fc:ed:df:8c:30:5d:f0:76:47:75:c4:4b:57:c9:9a:01:ad:37:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0B0BA2725A8409FB3A503073DAEA4474CF2C54F
        Validity
            Not Before: Jul 14 11:55:01 2022 GMT
            Not After : Jul 14 12:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5e:33:a7:4c:7a:85:2c:b2:2a:6f:12:1b:83:
                    14:29:26:20:05:9d:2c:b3:e6:aa:e5:56:42:7d:37:
                    57:62:74:5b:4f:63:68:8f:82:69:ca:87:cb:7f:38:
                    bd:fe:05:df:2d:cc:7d:e8:2e:c6:d0:af:34:c2:3e:
                    47:33:5b:18:b1:e5:4d:eb:1a:e3:20:af:38:fa:f9:
                    b9:93:42:e6:cd:4f:fb:06:80:91:cb:d6:5b:a8:35:
                    37:04:6e:be:dd:4d:4f:28:a8:b8:06:90:1e:1f:67:
                    8a:c9:cf:19:dd:fc:f0:ab:d1:ca:b9:0d:2a:9e:2d:
                    a1:20:d6:e4:27:ab:e5:fb:a0:f1:97:f7:f3:4f:53:
                    03:d1:1e:16:7c:06:b4:39:2b:6a:84:76:24:13:14:
                    16:34:d5:34:e9:31:b3:1b:87:21:3b:3e:0b:4f:fc:
                    4e:2c:d9:16:1c:87:9d:49:d3:a2:47:b2:8e:e6:f0:
                    c0:4d:54:e8:77:b9:5a:e7:c1:4e:a1:93:64:78:57:
                    1d:0b:c9:70:30:3e:7c:9b:a9:bc:cb:6f:a8:5f:95:
                    0b:f2:b6:af:e5:78:bb:c7:3f:25:71:6e:18:85:7b:
                    50:74:80:f9:03:ff:bb:39:4b:e9:d7:f6:e6:d9:13:
                    64:fa:1c:f3:f5:f3:b8:77:6c:b5:a0:eb:3e:63:cf:
                    72:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:1E:24:D9:D3:C1:E5:8A:BA:C5:F5:03:FE:3C:78:F4:62:49:76:E9
            X509v3 Authority Key Identifier:
                keyid:F0:B0:BA:27:25:A8:40:9F:B3:A5:03:07:3D:AE:A4:47:4C:F2:C5:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/F0B0BA2725A8409FB3A503073DAEA4474CF2C54F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0B0BA2725A8409FB3A503073DAEA4474CF2C54F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/323830343a323966303a3a2f33322d3332203d3e20323634303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:29f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:bb:2b:f6:98:48:d5:ac:ca:10:49:86:50:eb:4b:89:02:3f:
         43:05:c2:49:4b:55:44:02:d8:bd:bf:10:8a:c1:cd:93:97:44:
         fe:e5:2a:94:bf:15:cb:00:dd:67:4b:62:df:35:29:1e:b2:b5:
         d6:48:7b:21:8c:7c:47:4a:81:35:97:3f:d0:b1:d6:ea:30:11:
         da:a0:5f:e0:ad:73:83:b6:98:01:66:4a:59:58:8e:55:2a:5a:
         c6:da:dd:97:e6:c4:41:59:00:b9:04:84:d6:fd:b7:e7:d0:99:
         1a:67:2d:60:0f:34:db:82:a3:18:d4:18:84:78:1e:2d:e9:88:
         97:a1:e1:fa:42:8e:61:25:5a:21:a7:b2:c0:b8:b9:fe:9e:cd:
         a8:7e:cf:62:d5:ae:d8:d4:01:83:cc:02:aa:98:64:72:4c:a6:
         ea:ff:01:04:8d:0f:17:b6:f4:18:70:07:d1:d0:9a:38:89:4e:
         18:6a:e1:87:0f:0a:5b:d4:d3:49:0b:5c:5b:db:d6:4c:7a:f5:
         bd:a5:39:fd:8d:97:74:f4:25:5a:f1:f0:50:5d:0f:ac:af:8b:
         6b:7a:fd:09:1b:04:de:dc:be:5a:4c:8d:c9:96:83:9d:e8:f1:
         6d:b1:96:1c:e6:f5:e0:cd:8b:42:20:6a:0e:96:a0:41:75:7c:
         2b:2d:fe:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org