Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/323830343a386232343a3a2f33322d313238203d3e20323733373134.roa
File:                     323830343a386232343a3a2f33322d313238203d3e20323733373134.roa (raw, json)
Hash identifier:          9a+msEzy2YDsyhnhLOxmJqSBaUXMeBZ8axiRaj8GaEs=
Subject key identifier:   17:94:C0:C0:94:55:F0:B4:D1:40:5D:80:22:1B:94:A5:60:A7:94:E9
Certificate issuer:       /CN=DFFEED6C4050BC1E53EA0108237F6AFA6F9299D2
Certificate serial:       2A24E42866BAD1C04BBFADC9BE719A96DF2AE84E
Authority key identifier: DF:FE:ED:6C:40:50:BC:1E:53:EA:01:08:23:7F:6A:FA:6F:92:99:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFFEED6C4050BC1E53EA0108237F6AFA6F9299D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/323830343a386232343a3a2f33322d313238203d3e20323733373134.roa
Signing time:             Fri 08 Mar 2024 14:28:34 +0000
ROA not before:           Fri 08 Mar 2024 14:23:34 +0000
ROA not after:            Fri 07 Mar 2025 14:28:34 +0000
asID:                     273714
IP address blocks:        2804:8b24::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:24:e4:28:66:ba:d1:c0:4b:bf:ad:c9:be:71:9a:96:df:2a:e8:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFFEED6C4050BC1E53EA0108237F6AFA6F9299D2
        Validity
            Not Before: Mar  8 14:23:34 2024 GMT
            Not After : Mar  7 14:28:34 2025 GMT
        Subject: CN=1794C0C09455F0B4D1405D80221B94A560A794E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2b:2e:44:98:90:12:79:41:18:c4:17:16:da:
                    e7:0a:4d:51:07:ec:15:5d:9d:02:bf:fa:1e:f8:97:
                    06:01:49:12:64:d7:a0:29:22:d0:c7:d0:6b:28:79:
                    54:35:3c:0d:2b:8b:8c:a6:6b:6f:67:15:c6:b7:4e:
                    e0:63:4d:82:8f:22:3d:6e:e6:04:27:53:82:f5:dd:
                    2e:29:71:19:03:14:47:0c:a1:42:a4:b0:28:cc:21:
                    f5:57:d0:6b:b9:a5:ac:da:be:64:7c:76:be:7e:a6:
                    72:0a:fb:5e:b4:59:49:81:ee:89:59:1b:08:ea:4f:
                    7c:68:78:89:49:93:9d:cf:97:38:76:05:23:67:97:
                    38:dd:3c:d4:23:a9:f7:b3:de:b0:df:8b:5b:6a:e9:
                    60:1a:ec:64:5f:bc:7c:c4:b9:e4:53:e7:21:ba:3b:
                    4b:b9:13:f2:ea:ad:6c:b5:cc:05:54:89:8c:4c:0c:
                    37:f1:7c:29:9b:40:b6:4d:bb:ee:46:c3:27:ff:76:
                    8a:dd:7e:a7:bb:aa:75:26:a8:45:50:77:80:f0:25:
                    65:6e:b5:d6:14:91:8f:33:62:76:ec:c4:ba:29:55:
                    d1:4e:04:5c:08:5a:12:78:e6:b3:dc:53:df:58:af:
                    eb:88:8d:af:b1:ab:21:61:8c:ff:f8:92:aa:18:2a:
                    fa:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:94:C0:C0:94:55:F0:B4:D1:40:5D:80:22:1B:94:A5:60:A7:94:E9
            X509v3 Authority Key Identifier:
                keyid:DF:FE:ED:6C:40:50:BC:1E:53:EA:01:08:23:7F:6A:FA:6F:92:99:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/DFFEED6C4050BC1E53EA0108237F6AFA6F9299D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFFEED6C4050BC1E53EA0108237F6AFA6F9299D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/323830343a386232343a3a2f33322d313238203d3e20323733373134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b24::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:30:84:ad:09:f2:82:3e:6d:a7:b4:76:3b:5a:c0:ae:9b:2b:
         51:3f:9d:4b:b5:17:53:bf:0f:bc:c4:5d:aa:58:f6:b2:dd:fe:
         18:ae:c4:86:54:34:1e:b0:33:e2:4e:98:7c:83:47:68:3f:10:
         6d:51:10:36:56:39:5b:4d:97:04:68:79:7f:a6:40:c7:7d:17:
         82:9f:f6:2c:e3:9d:2e:97:5f:b1:81:9e:f8:25:8d:31:b5:66:
         43:b8:86:47:0f:b7:9a:35:3a:3a:cb:3f:a9:65:b9:c1:11:9a:
         a5:bf:c0:4f:15:a5:63:36:f7:88:92:65:c4:9f:bf:10:7a:6a:
         80:d7:c7:c3:a8:d2:19:d7:2c:7f:22:0b:b2:f7:43:20:30:b2:
         1f:6c:50:2d:d4:d0:01:97:ea:ed:d7:07:82:27:b8:0d:d4:84:
         8c:c1:7f:ab:48:a5:1a:f9:73:be:c2:4c:1b:9c:b0:7f:1e:da:
         ed:c7:66:ea:04:2a:72:2a:b9:2c:e3:7e:77:67:4d:65:cc:51:
         5a:2e:c2:04:0e:43:05:d2:08:11:20:9f:f1:70:ac:71:cf:d1:
         3a:4d:04:55:e6:08:20:f0:71:39:1b:38:3d:55:d9:c9:3a:63:
         d7:d1:1f:90:f9:2d:92:44:2b:c1:1e:42:7e:7f:c8:ff:06:b8:
         74:ca:42:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org