Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/323830343a333139303a3a2f33322d3438203d3e203533303937.roa
File:                     323830343a333139303a3a2f33322d3438203d3e203533303937.roa (raw, json)
Hash identifier:          lBCdIIBqcDG+iBmbnOaP7SHCtGNwAoe0XuDGdqPCtwE=
Subject key identifier:   6F:8A:54:B8:98:5B:93:3B:4B:E7:1A:A4:23:40:6C:3F:D0:F8:F6:BE
Certificate issuer:       /CN=0CFF9CCBB4AECED875432DE67D4D72CB1AF6FCF0
Certificate serial:       4B27F7F5634913A614FEAAFC280A3B382FD10BA5
Authority key identifier: 0C:FF:9C:CB:B4:AE:CE:D8:75:43:2D:E6:7D:4D:72:CB:1A:F6:FC:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CFF9CCBB4AECED875432DE67D4D72CB1AF6FCF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/323830343a333139303a3a2f33322d3438203d3e203533303937.roa
Signing time:             Mon 11 Mar 2024 18:22:34 +0000
ROA not before:           Mon 11 Mar 2024 18:17:34 +0000
ROA not after:            Mon 10 Mar 2025 18:22:34 +0000
asID:                     53097
IP address blocks:        2804:3190::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:27:f7:f5:63:49:13:a6:14:fe:aa:fc:28:0a:3b:38:2f:d1:0b:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CFF9CCBB4AECED875432DE67D4D72CB1AF6FCF0
        Validity
            Not Before: Mar 11 18:17:34 2024 GMT
            Not After : Mar 10 18:22:34 2025 GMT
        Subject: CN=6F8A54B8985B933B4BE71AA423406C3FD0F8F6BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c1:f8:ef:97:73:c3:07:3c:05:3c:3c:b6:7f:
                    f3:f8:33:a1:90:1b:38:bb:90:a3:55:18:c9:a8:35:
                    df:bc:f3:b1:2f:ea:88:15:3f:7d:0f:01:9a:88:3e:
                    6f:0b:33:24:4a:a6:ee:a9:e3:3f:08:3e:53:5f:48:
                    84:6e:23:91:64:f6:25:af:c8:75:e4:c7:cd:5b:26:
                    03:0b:2e:67:95:ed:f2:5c:c4:b5:59:5b:2c:5b:17:
                    99:60:04:26:cb:e4:3b:67:16:c2:05:52:9e:26:60:
                    c1:2d:46:08:7a:06:41:39:22:a3:28:a8:ec:b5:43:
                    87:f1:74:3d:a0:f3:cb:9f:18:56:93:64:8d:03:27:
                    a6:b7:a1:6f:f9:1d:9a:99:38:1b:b7:af:36:ab:e1:
                    d7:f1:90:19:2b:76:db:87:1d:f3:9b:df:06:aa:a1:
                    67:d8:76:5a:20:32:0a:df:03:a5:a8:51:d4:a0:fa:
                    6f:32:2a:b6:7e:6c:89:12:88:ec:e4:69:7c:5b:04:
                    77:6b:20:07:b6:8d:e3:8e:bb:41:ac:47:b7:1c:d7:
                    ab:e2:ae:56:16:33:57:1c:1f:2b:54:7c:85:da:b6:
                    5d:55:a6:69:1a:e7:14:54:92:dd:a9:76:32:0f:28:
                    ae:28:80:22:ae:83:2e:d6:30:89:90:d4:fd:93:2c:
                    0d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8A:54:B8:98:5B:93:3B:4B:E7:1A:A4:23:40:6C:3F:D0:F8:F6:BE
            X509v3 Authority Key Identifier:
                keyid:0C:FF:9C:CB:B4:AE:CE:D8:75:43:2D:E6:7D:4D:72:CB:1A:F6:FC:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/0CFF9CCBB4AECED875432DE67D4D72CB1AF6FCF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CFF9CCBB4AECED875432DE67D4D72CB1AF6FCF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/323830343a333139303a3a2f33322d3438203d3e203533303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3190::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:7a:1a:3b:b4:f7:6a:04:37:05:39:9b:29:69:e7:fc:98:da:
         5d:dd:75:6b:9f:a0:3b:8e:5d:0d:97:54:a4:6c:d6:70:70:1d:
         3b:0b:10:dc:43:1c:25:44:40:43:7e:da:19:d5:a0:8f:69:00:
         3f:a8:bf:b5:a2:ff:56:60:ee:d9:87:61:35:06:c5:92:e2:0a:
         23:bb:cc:f6:b2:0b:7a:98:ed:49:e2:42:83:48:a4:15:2d:75:
         93:60:94:f9:ef:02:4d:ea:ee:bd:d6:75:c9:60:e3:39:db:2e:
         57:a6:1f:2a:e5:c2:f4:dd:68:ef:09:1a:a6:44:83:4f:50:b4:
         64:da:49:50:d4:31:fd:84:e5:3f:4a:4f:f0:28:09:9e:3a:7d:
         fe:ea:37:db:cc:fd:d4:7f:a9:fe:b9:76:26:01:44:59:84:6b:
         53:de:94:6a:cf:00:1c:c6:39:6b:48:57:9b:79:32:db:b5:ad:
         fb:82:65:2c:66:fd:cb:c1:38:5f:49:96:37:b1:ff:a3:4c:41:
         2d:be:a6:a3:b2:05:ae:ed:b0:92:84:05:30:b2:16:82:bf:93:
         5f:7e:7d:81:a0:77:70:b0:81:48:e7:97:de:51:f0:60:c2:2d:
         2a:c0:1f:53:8c:51:3d:c5:fd:9a:d0:42:ed:9c:0a:f3:9d:23:
         70:ae:32:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org