Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/323830343a323363343a3a2f33322d3438203d3e20323634313831.roa
File:                     323830343a323363343a3a2f33322d3438203d3e20323634313831.roa (raw, json)
Hash identifier:          2/qjm/uMnKbJaOQCfCZwcnLWZ/4Cripwj1m7YaLrdBA=
Subject key identifier:   B6:F2:98:3D:A4:68:6D:DF:36:40:02:85:B8:7A:53:FC:08:30:54:EE
Certificate issuer:       /CN=F08D7DCA0AA0CFF2425E59FA68EC8288BFFC656B
Certificate serial:       1B46285B60771B26B8D02F393498733A68C1DF0C
Authority key identifier: F0:8D:7D:CA:0A:A0:CF:F2:42:5E:59:FA:68:EC:82:88:BF:FC:65:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F08D7DCA0AA0CFF2425E59FA68EC8288BFFC656B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/323830343a323363343a3a2f33322d3438203d3e20323634313831.roa
Signing time:             Tue 19 Dec 2023 20:19:34 +0000
ROA not before:           Tue 19 Dec 2023 20:14:34 +0000
ROA not after:            Tue 17 Dec 2024 20:19:34 +0000
asID:                     264181
IP address blocks:        2804:23c4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:46:28:5b:60:77:1b:26:b8:d0:2f:39:34:98:73:3a:68:c1:df:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F08D7DCA0AA0CFF2425E59FA68EC8288BFFC656B
        Validity
            Not Before: Dec 19 20:14:34 2023 GMT
            Not After : Dec 17 20:19:34 2024 GMT
        Subject: CN=B6F2983DA4686DDF36400285B87A53FC083054EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d9:87:f1:8d:42:fe:a2:d8:b9:b8:e5:2a:4a:
                    a1:82:88:84:01:3c:ae:08:db:82:dc:82:2d:2a:89:
                    fd:f1:5c:07:2b:ef:37:11:2c:af:97:5b:98:10:5a:
                    b8:41:90:dc:3a:c7:a8:30:86:c0:4e:d8:c6:62:25:
                    bc:6e:f3:01:88:08:d3:4e:d7:3e:f4:2f:47:11:d7:
                    eb:b7:ca:61:43:c5:42:09:52:d8:52:9d:75:63:6e:
                    e8:a5:1d:a0:02:fc:d2:bf:47:9b:7c:f4:26:7a:a3:
                    75:f6:f7:35:f5:12:fb:fb:91:21:8d:90:05:9c:9b:
                    a6:d1:3e:9b:23:30:55:b4:7e:a1:ea:43:3b:b7:26:
                    ce:d7:54:92:36:a3:4b:8f:df:f8:61:78:49:63:f0:
                    a3:30:45:5d:96:1e:66:7a:af:e5:f1:fc:c0:60:0e:
                    dc:70:b7:ef:c3:76:8b:e1:b2:db:79:90:96:ff:09:
                    bc:11:64:6a:7b:77:b8:e3:ec:4a:6c:0c:55:5d:9e:
                    c7:b5:0b:7f:1c:a8:8f:e8:09:2a:f8:f5:98:f3:86:
                    46:6b:a6:0d:62:8a:e4:3a:e9:c6:08:f3:e9:fc:31:
                    87:d9:b1:e2:86:e1:61:a7:74:7e:de:96:c2:1a:af:
                    06:e2:79:59:f3:01:e1:ab:3c:08:8d:61:7b:9a:64:
                    48:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F2:98:3D:A4:68:6D:DF:36:40:02:85:B8:7A:53:FC:08:30:54:EE
            X509v3 Authority Key Identifier:
                keyid:F0:8D:7D:CA:0A:A0:CF:F2:42:5E:59:FA:68:EC:82:88:BF:FC:65:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/F08D7DCA0AA0CFF2425E59FA68EC8288BFFC656B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F08D7DCA0AA0CFF2425E59FA68EC8288BFFC656B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/323830343a323363343a3a2f33322d3438203d3e20323634313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:fa:0f:b0:f1:17:f5:56:c5:a1:c3:f3:96:a6:87:e3:f4:26:
         be:2c:f9:83:fd:d4:16:d8:21:b2:7d:a6:c7:d8:15:6e:94:d4:
         b7:e2:41:27:d1:84:80:c3:85:97:82:39:05:6c:44:10:78:77:
         51:62:cd:60:1f:de:2a:6f:99:15:af:15:d4:fa:4d:40:35:22:
         7a:95:b8:44:70:c7:a6:5f:11:76:09:9a:e9:45:b0:90:e7:ab:
         b0:2a:33:16:c0:f4:c8:22:4b:98:71:6e:d7:db:3d:c1:ee:c5:
         78:0e:7f:de:ef:e8:08:bd:69:21:a0:a3:92:68:79:d8:f8:6a:
         ae:da:89:e1:a6:13:44:42:1e:f7:47:09:01:9d:4e:6f:1b:25:
         09:7a:ba:0a:b8:44:79:e6:5f:8c:97:37:3e:a6:b1:6f:13:19:
         08:13:22:32:6a:1b:37:ee:17:39:7f:81:cf:cd:ce:e9:8a:4c:
         4f:ff:78:12:16:f0:3f:63:bd:e0:59:54:08:8c:dd:f4:a5:7c:
         b2:2d:88:5e:76:31:aa:3c:eb:c0:b2:d6:77:44:b1:09:2b:8f:
         38:42:b3:ab:52:ca:21:9a:01:4c:c6:97:0c:a9:02:52:7f:be:
         2e:12:79:ab:67:32:51:ed:bb:8d:6c:8b:90:66:c6:24:60:18:
         91:a8:86:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org