Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/323830343a3830343a3a2f33322d3438203d3e20323632333338.roa
File:                     323830343a3830343a3a2f33322d3438203d3e20323632333338.roa (raw, json)
Hash identifier:          olzAgQhtTSQjSVoNgufDJ0zQW9hzml2ST/LzgKR6MYI=
Subject key identifier:   8A:8C:66:FA:1B:1A:EA:95:8A:E2:1A:CC:D4:52:3E:2F:AC:53:50:04
Certificate issuer:       /CN=2F2EEA78F2A61B130D9274580167C650F0352C20
Certificate serial:       B00B4EEDEB725EB99AA22CB2E5F5E7360656C5
Authority key identifier: 2F:2E:EA:78:F2:A6:1B:13:0D:92:74:58:01:67:C6:50:F0:35:2C:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F2EEA78F2A61B130D9274580167C650F0352C20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/323830343a3830343a3a2f33322d3438203d3e20323632333338.roa
Signing time:             Tue 16 Apr 2024 12:20:00 +0000
ROA not before:           Tue 16 Apr 2024 12:15:00 +0000
ROA not after:            Tue 15 Apr 2025 12:20:00 +0000
asID:                     262338
IP address blocks:        2804:804::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b0:0b:4e:ed:eb:72:5e:b9:9a:a2:2c:b2:e5:f5:e7:36:06:56:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2EEA78F2A61B130D9274580167C650F0352C20
        Validity
            Not Before: Apr 16 12:15:00 2024 GMT
            Not After : Apr 15 12:20:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:58:f1:c4:08:dc:df:77:a9:71:4f:6a:f5:4a:
                    b8:7f:3a:52:8a:78:7e:f2:b8:51:c5:5a:62:aa:c2:
                    23:36:71:68:70:d9:1d:63:d0:46:45:0c:9b:07:25:
                    32:0d:e8:f3:4a:89:73:18:55:7d:32:77:77:4e:d0:
                    a6:7e:01:fb:fa:c6:94:98:78:04:9a:40:8a:66:da:
                    22:35:d9:b3:44:6a:e0:6f:6c:83:5e:4c:a6:2d:91:
                    12:f8:ee:1f:d0:1a:0f:46:8d:7d:7d:9e:d9:dd:12:
                    57:1a:4a:2b:91:62:25:7f:9a:01:99:0f:f2:ce:85:
                    5c:fe:fc:09:28:64:68:99:a0:3a:d2:df:cd:94:58:
                    64:30:cb:e8:aa:13:a3:b9:3a:17:eb:8e:7f:e9:b5:
                    9f:fd:4d:15:cf:6f:e3:b6:49:93:b1:cd:75:72:94:
                    e4:91:f0:56:86:ed:30:2c:63:7f:f2:b1:e2:5b:54:
                    37:f4:47:40:8f:2d:91:93:ce:a0:c9:74:25:1b:ee:
                    c5:93:18:77:29:1d:1c:e8:a6:7b:09:b7:93:28:40:
                    92:6a:ce:b1:05:b9:8e:0f:89:15:16:da:5c:a5:9d:
                    19:fc:3e:33:22:37:80:f3:dc:ec:a2:03:45:8c:8f:
                    72:57:ce:4b:53:2f:34:93:1f:61:08:9b:bc:5e:0d:
                    2d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8C:66:FA:1B:1A:EA:95:8A:E2:1A:CC:D4:52:3E:2F:AC:53:50:04
            X509v3 Authority Key Identifier:
                keyid:2F:2E:EA:78:F2:A6:1B:13:0D:92:74:58:01:67:C6:50:F0:35:2C:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/2F2EEA78F2A61B130D9274580167C650F0352C20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F2EEA78F2A61B130D9274580167C650F0352C20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/323830343a3830343a3a2f33322d3438203d3e20323632333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:804::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:7f:d9:f0:14:94:71:0b:8a:9e:4f:dc:0b:10:61:1c:ca:90:
         21:75:bc:5d:69:6a:d0:23:d8:da:9e:4b:a5:4e:cf:e9:14:04:
         ef:3b:51:2b:39:44:95:66:73:3e:cb:be:6c:4a:7c:0d:7a:ab:
         33:0b:96:7d:a9:94:9f:50:17:62:84:ad:8f:52:15:9f:30:ac:
         b1:fc:5f:2b:34:c6:b2:6e:b2:8e:e0:99:3e:7b:5d:f5:44:1a:
         77:0c:1d:94:c5:9d:1a:00:56:df:19:57:59:ad:34:00:a8:dc:
         c2:d8:1c:55:6b:60:92:2f:95:e0:b3:ee:5c:3c:f8:28:25:ab:
         7a:27:64:a1:8b:76:fd:e9:b2:ca:b2:e1:18:21:4b:7f:fd:02:
         93:13:30:22:4f:a7:84:ef:03:67:6d:b2:3c:df:d4:5d:bc:9c:
         06:fd:be:18:1f:ae:13:4d:4f:20:ea:bb:c1:5b:fa:ea:ff:d9:
         82:34:39:93:ec:82:76:0c:f3:2d:1b:d9:8c:9e:73:c5:4e:24:
         c1:0a:3e:bf:86:9c:d3:3c:e0:8f:b8:0d:cd:da:46:bf:08:65:
         f4:50:7c:ef:a4:e8:72:27:7d:16:1a:58:62:a7:62:66:5a:d5:
         27:54:62:95:4f:70:62:b8:5f:f9:a8:c2:b6:ad:29:c2:dd:68:
         89:20:a5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:08 2024 by rpki-client on console-fra.rpki-client.org