Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/1/323830343a323931303a383030303a3a2f34342d3434203d3e20323633393935.roa
File:                     323830343a323931303a383030303a3a2f34342d3434203d3e20323633393935.roa (raw, json)
Hash identifier:          tAQz0HIJ79O9uCfedy3i+iqLvtb6Q48l3KLdY7A8LLk=
Subject key identifier:   FE:7E:4D:57:A7:46:78:F6:CF:6A:D0:1E:50:5F:B8:19:1A:89:F3:FE
Certificate issuer:       /CN=188606675901F040B07DF306712C0B8EAFD6ACFE
Certificate serial:       5C6B055293A4C9603B9E16B66F2CB9487F9BF23C
Authority key identifier: 18:86:06:67:59:01:F0:40:B0:7D:F3:06:71:2C:0B:8E:AF:D6:AC:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/188606675901F040B07DF306712C0B8EAFD6ACFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/1/323830343a323931303a383030303a3a2f34342d3434203d3e20323633393935.roa
Signing time:             Fri 05 Apr 2024 03:19:15 +0000
ROA not before:           Fri 05 Apr 2024 03:14:15 +0000
ROA not after:            Fri 04 Apr 2025 03:19:15 +0000
asID:                     263995
IP address blocks:        2804:2910:8000::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:6b:05:52:93:a4:c9:60:3b:9e:16:b6:6f:2c:b9:48:7f:9b:f2:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=188606675901F040B07DF306712C0B8EAFD6ACFE
        Validity
            Not Before: Apr  5 03:14:15 2024 GMT
            Not After : Apr  4 03:19:15 2025 GMT
        Subject: CN=FE7E4D57A74678F6CF6AD01E505FB8191A89F3FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:43:98:6b:25:f5:d1:b9:3d:4d:c1:34:42:ca:
                    96:21:00:e8:c8:e2:5c:a9:29:93:47:74:76:38:0f:
                    91:da:7d:1c:6d:f8:07:f2:d1:0c:c6:ab:08:25:95:
                    9a:2c:46:91:38:38:16:91:6f:64:eb:03:e0:a3:31:
                    ac:d5:f6:4e:b4:22:16:81:4a:5e:7c:7e:f4:e4:38:
                    8b:4a:a7:e3:fd:e7:97:86:1f:f0:98:8f:1c:3d:42:
                    a5:45:32:2d:ec:33:f2:8d:80:1a:86:fd:e1:17:94:
                    f1:39:ed:45:82:b4:36:a4:ca:74:c3:cf:4b:1e:ca:
                    93:25:02:d4:29:c6:d9:b0:64:58:1b:33:60:ba:ac:
                    ae:0e:56:c5:7f:18:8d:64:17:5a:66:f2:b9:61:ed:
                    ac:60:2f:90:64:25:f9:1b:f0:22:5b:e7:b6:0f:ea:
                    ef:d8:24:11:69:3a:0d:7b:ba:3b:1b:2b:7e:e3:9a:
                    3d:fe:55:2d:b8:69:7c:eb:47:bb:22:5e:1d:50:3a:
                    ba:fe:4d:f1:d5:9d:77:6f:5f:17:e6:0a:71:06:f4:
                    e6:a8:0d:87:cc:0a:e4:41:63:de:de:a1:25:59:ea:
                    8d:58:bf:0f:e2:a6:4a:69:c4:43:f0:18:24:b2:ac:
                    7a:a5:e0:84:49:f9:b7:90:b3:28:80:78:d1:fb:9f:
                    35:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7E:4D:57:A7:46:78:F6:CF:6A:D0:1E:50:5F:B8:19:1A:89:F3:FE
            X509v3 Authority Key Identifier:
                keyid:18:86:06:67:59:01:F0:40:B0:7D:F3:06:71:2C:0B:8E:AF:D6:AC:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/1/188606675901F040B07DF306712C0B8EAFD6ACFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/188606675901F040B07DF306712C0B8EAFD6ACFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/1/323830343a323931303a383030303a3a2f34342d3434203d3e20323633393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2910:8000::/44

    Signature Algorithm: sha256WithRSAEncryption
         a2:5c:e6:4e:cd:19:e8:90:43:ed:a4:a7:ef:cc:06:da:9e:c5:
         44:95:f0:a3:c6:21:16:e8:71:0e:66:0c:dc:2a:81:38:eb:80:
         85:9d:77:69:ed:a6:1a:4f:57:48:d5:73:ef:26:37:5f:0f:5f:
         37:49:9f:73:e5:34:47:0f:38:54:b7:2b:1b:8f:b6:f6:75:71:
         80:32:54:5e:e2:01:da:b5:80:f0:c2:d4:c5:bf:35:e6:de:29:
         4c:52:36:c9:19:fa:23:39:d9:b2:cd:4a:2c:a7:7b:a3:75:9c:
         36:fb:8f:ec:fa:c1:61:92:84:46:43:fa:91:c8:e6:90:12:be:
         2e:b3:2f:6f:dc:a8:46:c5:18:2e:7b:2e:9e:17:2f:04:9c:89:
         4e:9a:1d:a1:4b:9d:67:2d:23:ba:3e:a4:ce:aa:11:0a:bd:0a:
         4e:c4:e0:0b:66:e0:53:46:ea:6a:d8:79:6c:ea:e3:4f:54:67:
         fd:c2:59:37:2c:d4:c1:fe:d6:3c:56:6b:5c:32:36:38:cd:e2:
         7f:0a:b1:6d:03:f0:e6:b9:1d:07:36:c0:67:9c:09:ff:e0:76:
         19:24:57:99:fd:10:80:df:eb:d3:e2:6b:3f:28:ce:62:e5:77:
         64:44:65:dc:b9:ef:7e:da:17:b8:d6:0c:62:91:63:d7:a0:81:
         7e:41:e9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org