Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/323830343a323931633a343030303a3a2f34302d3430203d3e20323633393938.roa
File:                     323830343a323931633a343030303a3a2f34302d3430203d3e20323633393938.roa (raw, json)
Hash identifier:          La7bbb56VpTbksMrY/NlBZOR225RW6IP50a6QX/jMkQ=
Subject key identifier:   FA:A2:72:88:A2:96:5E:75:F3:A3:84:CF:1D:E9:EB:B0:94:59:02:86
Certificate issuer:       /CN=984A4E66BC65EB5C94C289F8249033C67BBB81E7
Certificate serial:       6DFEF6727AB0E0F2251FAF86343D7F0986F30124
Authority key identifier: 98:4A:4E:66:BC:65:EB:5C:94:C2:89:F8:24:90:33:C6:7B:BB:81:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/984A4E66BC65EB5C94C289F8249033C67BBB81E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/323830343a323931633a343030303a3a2f34302d3430203d3e20323633393938.roa
Signing time:             Mon 24 Apr 2023 18:18:44 +0000
ROA not before:           Mon 24 Apr 2023 18:13:44 +0000
ROA not after:            Mon 22 Apr 2024 18:18:44 +0000
asID:                     263998
IP address blocks:        2804:291c:4000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:fe:f6:72:7a:b0:e0:f2:25:1f:af:86:34:3d:7f:09:86:f3:01:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984A4E66BC65EB5C94C289F8249033C67BBB81E7
        Validity
            Not Before: Apr 24 18:13:44 2023 GMT
            Not After : Apr 22 18:18:44 2024 GMT
        Subject: CN=FAA27288A2965E75F3A384CF1DE9EBB094590286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1c:33:80:4b:07:2b:8f:19:c7:96:27:30:2d:
                    88:dd:4f:58:2e:b1:36:d8:92:3b:7e:98:53:ff:97:
                    5e:de:2d:fe:b9:36:70:63:4c:60:ee:45:f6:f7:ed:
                    3c:58:4e:f9:2f:69:4f:52:32:fe:08:8b:0e:6e:26:
                    7b:1a:83:db:f5:b4:7d:87:7c:05:33:24:e7:24:5d:
                    d4:85:3f:85:34:78:d0:9e:ca:3a:d8:43:5b:29:7d:
                    e7:9f:33:b3:d2:59:a2:ee:8b:e1:34:c2:99:ac:d7:
                    a6:b5:04:22:49:4e:ed:16:19:fa:eb:c6:67:6a:15:
                    60:77:d8:1e:8d:b5:cf:9c:05:d6:15:fa:17:a9:fd:
                    53:92:e1:1c:c8:a4:33:99:9e:4f:22:25:e8:35:82:
                    ac:5b:d2:29:86:1d:a7:53:87:85:0a:76:21:7e:52:
                    ab:ae:10:e4:c5:22:9a:d4:47:48:59:74:c6:46:8c:
                    7a:56:5a:60:69:83:c1:1d:7b:20:5f:ed:18:0c:74:
                    d9:cc:b3:de:c7:dd:4b:b3:67:ac:d4:d0:b2:e6:3c:
                    48:1e:a2:ed:c1:b3:f8:6d:74:4f:c8:a2:a1:b0:48:
                    c4:28:21:73:f9:79:98:cf:2d:85:d3:e0:18:f8:34:
                    85:28:57:53:06:82:34:ba:15:d6:ea:12:6a:f6:0f:
                    d9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A2:72:88:A2:96:5E:75:F3:A3:84:CF:1D:E9:EB:B0:94:59:02:86
            X509v3 Authority Key Identifier:
                keyid:98:4A:4E:66:BC:65:EB:5C:94:C2:89:F8:24:90:33:C6:7B:BB:81:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/984A4E66BC65EB5C94C289F8249033C67BBB81E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/984A4E66BC65EB5C94C289F8249033C67BBB81E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/323830343a323931633a343030303a3a2f34302d3430203d3e20323633393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:291c:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         79:55:1f:34:d6:79:4a:4b:f2:04:79:c2:da:2d:8e:34:bb:41:
         26:16:20:06:5e:15:61:6e:4a:ee:74:a6:16:27:2c:5f:d0:75:
         6a:d8:7d:9c:ae:80:f6:9c:39:82:90:c6:b4:1a:9a:69:e3:b4:
         46:e0:f2:62:56:a2:e5:ed:40:69:76:9c:6c:2d:c3:88:6c:79:
         c0:b7:62:3b:01:c4:1f:ce:f9:64:bb:c5:51:3e:a5:49:c6:39:
         ae:7c:a1:9b:2c:52:d0:71:f9:7b:13:91:1e:de:fd:f1:0a:42:
         7a:d8:e5:62:95:bf:e0:6c:86:ca:05:f7:c2:f7:fd:88:fa:f9:
         f2:e3:64:86:2f:0a:6e:ae:0d:a9:ec:80:c1:4e:0d:c6:24:3f:
         83:5a:08:f4:f4:85:40:44:2c:8b:64:3d:8e:ed:5a:78:f4:1d:
         1e:b6:71:8d:e5:06:59:89:08:51:44:c4:ff:14:19:6f:43:6b:
         9a:0b:2f:6d:97:94:cd:22:2f:00:13:5f:c5:f9:96:c4:5f:18:
         5d:5d:d7:97:69:5a:a9:bb:ca:38:74:52:c2:ce:1a:8d:a9:a0:
         d9:38:20:5e:dc:7d:88:df:a5:c7:ac:bb:ce:a0:b9:18:d2:73:
         8e:eb:d5:6a:1a:13:f1:d5:b4:de:15:79:2b:24:52:8a:46:c4:
         de:97:84:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org