Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/0/323830343a366534383a3a2f33322d3335203d3e20323730353836.roa
File:                     323830343a366534383a3a2f33322d3335203d3e20323730353836.roa (raw, json)
Hash identifier:          RIquoGx/MrEE0ACfJ5SluirYTJpSoaTMWTBzKXMntUM=
Subject key identifier:   8A:24:AF:0A:6B:BB:70:0E:5B:9B:44:1C:5E:62:85:AF:46:8E:59:A7
Certificate issuer:       /CN=F7A99C21917C598605586A0D8C97EF57F47B58D2
Certificate serial:       3768338260177B9613B6339C6D357E04BE8578EC
Authority key identifier: F7:A9:9C:21:91:7C:59:86:05:58:6A:0D:8C:97:EF:57:F4:7B:58:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F7A99C21917C598605586A0D8C97EF57F47B58D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/0/323830343a366534383a3a2f33322d3335203d3e20323730353836.roa
Signing time:             Tue 10 Oct 2023 21:00:00 +0000
ROA not before:           Tue 10 Oct 2023 20:55:00 +0000
ROA not after:            Tue 08 Oct 2024 21:00:00 +0000
asID:                     270586
IP address blocks:        2804:6e48::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:68:33:82:60:17:7b:96:13:b6:33:9c:6d:35:7e:04:be:85:78:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7A99C21917C598605586A0D8C97EF57F47B58D2
        Validity
            Not Before: Oct 10 20:55:00 2023 GMT
            Not After : Oct  8 21:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3d:f1:96:34:03:d0:24:fc:c6:fb:84:05:11:
                    c3:8c:12:11:ec:3b:1a:c2:67:29:df:b5:3f:10:77:
                    b9:81:01:51:02:2c:f1:f6:de:93:64:7f:5b:4e:52:
                    1f:0f:04:9a:b3:95:38:69:73:cf:c8:d1:29:66:b2:
                    6f:c7:b6:03:85:a1:ea:f6:a6:5a:19:ef:3c:b2:17:
                    fc:b1:85:e6:65:73:63:73:91:7f:12:57:66:1b:75:
                    62:8c:07:97:43:0c:c9:b8:6d:35:81:90:1f:05:2e:
                    b1:0e:bb:39:ce:11:a9:1c:ef:17:2b:4f:02:d4:83:
                    95:3b:27:fd:af:dd:80:33:06:76:5d:8d:4b:6f:1c:
                    81:f2:2e:9a:0e:96:84:cf:3a:61:e8:3f:e8:59:96:
                    f3:45:36:5e:25:4c:02:43:2d:4a:d4:0e:74:98:59:
                    07:de:0f:da:36:46:68:60:e6:f3:4a:aa:c6:3b:e6:
                    43:fd:df:09:7c:33:bd:ea:ad:a0:a3:df:1c:98:02:
                    58:1f:f4:8a:85:55:d6:50:65:4a:3d:29:4b:b9:af:
                    e3:37:8d:d0:c0:2f:d3:25:f6:ce:21:40:7c:3a:fb:
                    ec:61:79:26:d2:ec:37:60:34:02:42:0f:ba:be:12:
                    6d:7b:82:18:2f:7b:51:96:82:da:18:75:da:ca:29:
                    f5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:24:AF:0A:6B:BB:70:0E:5B:9B:44:1C:5E:62:85:AF:46:8E:59:A7
            X509v3 Authority Key Identifier:
                keyid:F7:A9:9C:21:91:7C:59:86:05:58:6A:0D:8C:97:EF:57:F4:7B:58:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/0/F7A99C21917C598605586A0D8C97EF57F47B58D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F7A99C21917C598605586A0D8C97EF57F47B58D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/0/323830343a366534383a3a2f33322d3335203d3e20323730353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e48::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:ce:7a:e9:34:b2:59:4a:b5:b9:f6:7c:cf:91:bd:3a:ec:f9:
         0b:c5:0a:dc:dc:00:72:54:f5:44:44:32:45:55:08:da:ac:0b:
         46:d1:19:40:54:f1:2f:6f:46:4b:be:67:c9:75:7d:f9:da:be:
         05:92:49:70:a2:ce:de:2c:0d:db:43:b7:7c:a5:57:10:03:6c:
         04:87:f8:19:d8:9e:79:f7:45:bc:4e:97:06:79:c2:27:5a:fb:
         07:77:63:77:a0:18:d6:16:b3:68:15:db:3e:ea:1d:1d:89:0e:
         00:8f:60:20:6c:e5:89:be:90:31:e8:67:79:0a:4d:1f:98:87:
         5a:1d:e2:01:82:65:11:d3:1e:ae:49:61:72:4f:79:55:ae:cc:
         97:e1:fa:08:48:54:ad:8f:2d:b0:83:36:50:36:4a:90:c5:b6:
         62:0b:a0:a0:62:99:cb:28:b7:64:21:54:74:3e:d2:63:f3:1f:
         89:c2:99:a0:4e:7b:73:37:71:8b:2a:24:0d:15:9f:51:be:02:
         66:17:31:60:5f:98:a6:81:63:47:8d:1e:7b:8a:65:f3:44:be:
         0d:9c:50:6a:8d:4c:35:cc:df:e8:e0:ea:67:93:b1:0f:16:c4:
         16:09:aa:21:1f:72:9f:d1:b0:0f:a4:fe:bc:55:d3:75:fe:df:
         62:bd:20:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org