Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/323830343a323966303a633030303a3a2f33342d3334203d3e20323634303436.roa
File:                     323830343a323966303a633030303a3a2f33342d3334203d3e20323634303436.roa (raw, json)
Hash identifier:          cIpy38GhbQUffaG3b5NdUdyw9NrCXxuXt0yVmyT1lbY=
Subject key identifier:   DE:BC:45:21:E8:CF:C4:C0:B7:5D:A6:61:10:DF:22:F7:84:5D:B3:6B
Certificate issuer:       /CN=F0B0BA2725A8409FB3A503073DAEA4474CF2C54F
Certificate serial:       7E29A1E9E8B63BD57944B7CF58BEF87814E2279F
Authority key identifier: F0:B0:BA:27:25:A8:40:9F:B3:A5:03:07:3D:AE:A4:47:4C:F2:C5:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0B0BA2725A8409FB3A503073DAEA4474CF2C54F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/323830343a323966303a633030303a3a2f33342d3334203d3e20323634303436.roa
Signing time:             Thu 14 Jul 2022 12:00:00 +0000
ROA not before:           Thu 14 Jul 2022 11:55:00 +0000
ROA not after:            Fri 14 Jul 2023 12:00:00 +0000
asID:                     264046
IP address blocks:        2804:29f0:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:29:a1:e9:e8:b6:3b:d5:79:44:b7:cf:58:be:f8:78:14:e2:27:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0B0BA2725A8409FB3A503073DAEA4474CF2C54F
        Validity
            Not Before: Jul 14 11:55:00 2022 GMT
            Not After : Jul 14 12:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6f:9c:6b:57:3c:8f:3c:e2:78:ce:9a:6c:f5:
                    57:bc:e9:e0:64:93:13:d0:98:bf:e8:4e:52:f0:a0:
                    01:7d:07:05:55:b7:78:22:97:e1:b6:d7:5c:2e:ce:
                    d0:d6:b8:48:7f:ab:35:50:fa:bb:6f:a5:43:17:3c:
                    54:36:08:e2:57:d4:5f:79:94:b0:11:7c:76:07:09:
                    94:f9:8c:aa:85:3e:ca:f6:cb:a0:18:64:3e:c7:d6:
                    7b:19:b3:11:1a:65:73:31:92:e5:3f:43:eb:a0:99:
                    13:00:b1:65:fd:c0:df:36:75:04:53:61:1d:f7:f5:
                    24:0c:80:e3:45:e8:80:6b:2d:8b:02:d8:53:5e:b5:
                    88:95:42:39:f6:b4:82:b1:59:62:90:05:05:56:e4:
                    12:5f:7f:ec:32:e9:2a:1a:a3:3d:51:a2:b3:1b:5e:
                    fc:48:3e:d2:7d:84:4d:07:8f:cd:ca:b7:8b:2e:f4:
                    63:b6:e2:cd:5a:fa:7d:f4:32:9c:b2:c5:8d:de:92:
                    03:b2:f3:08:a1:9b:51:c4:ec:2b:93:eb:91:cd:e9:
                    6a:f7:7b:37:cc:71:68:45:0c:dd:76:f4:a9:79:f9:
                    eb:96:7e:4f:87:91:95:4c:bf:89:4e:ef:92:58:d0:
                    c4:87:c2:39:5e:ed:49:85:36:1d:6e:18:40:06:81:
                    16:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BC:45:21:E8:CF:C4:C0:B7:5D:A6:61:10:DF:22:F7:84:5D:B3:6B
            X509v3 Authority Key Identifier:
                keyid:F0:B0:BA:27:25:A8:40:9F:B3:A5:03:07:3D:AE:A4:47:4C:F2:C5:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/F0B0BA2725A8409FB3A503073DAEA4474CF2C54F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0B0BA2725A8409FB3A503073DAEA4474CF2C54F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/323830343a323966303a633030303a3a2f33342d3334203d3e20323634303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:29f0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         99:e0:dc:2e:9d:3b:f1:b6:0b:70:61:fe:e4:a1:10:87:f4:b7:
         6a:7f:35:04:4c:df:60:32:2c:4d:ab:cf:5e:d4:5f:5a:d6:6d:
         ad:f8:a6:63:32:ea:76:5b:b4:d2:f2:6c:0f:8d:bf:6c:bb:52:
         ea:01:76:1c:32:63:cc:54:04:11:ec:34:5b:77:97:ce:f4:67:
         14:b9:43:5b:9d:ff:0e:44:b4:ba:87:10:37:df:a2:d2:fb:b1:
         0e:d3:4e:08:7c:c1:f4:93:a6:c9:72:4b:37:56:52:f4:f5:e5:
         ab:ec:11:a8:3b:2e:54:c9:fd:8b:7e:a3:b0:41:d2:b6:49:03:
         9d:87:91:61:75:5b:de:bc:3c:fc:e3:39:e4:fa:48:b3:fa:91:
         6f:fa:2c:92:d1:ea:67:de:f9:db:96:bd:3b:2c:70:6c:51:1b:
         7f:2a:05:4b:78:5f:7e:0e:7d:dc:1b:dc:f8:e4:7b:0e:3c:7a:
         60:ff:34:40:f9:ee:0b:9b:ac:d3:f8:b9:86:7a:86:58:15:1c:
         c1:9d:b7:66:7d:5d:b8:86:b2:6d:36:ba:99:2f:e9:5d:8f:df:
         7d:8b:30:1e:64:7a:ae:31:44:6e:03:c2:23:87:35:db:4a:67:
         fa:1f:45:b5:5c:e5:ca:b2:a0:c2:9e:62:a5:86:8d:51:5a:a8:
         11:ae:02:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org