Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/323830343a3731633a3a2f33322d3438203d3e203533303830.roa
File:                     323830343a3731633a3a2f33322d3438203d3e203533303830.roa (raw, json)
Hash identifier:          XVyGJIIPi8DRmTKbFcBEvEqfs9vQobONln9Z9MHdKUw=
Subject key identifier:   17:86:75:4D:27:36:F9:56:9C:3C:8A:48:B2:62:48:A5:89:91:98:41
Certificate issuer:       /CN=F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE
Certificate serial:       0DB56B01A2672154D68589C9BF9DAF8544F21F71
Authority key identifier: F4:CC:BF:55:AA:1D:25:CB:A2:0B:D8:CE:85:D9:CD:6D:00:08:CA:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/323830343a3731633a3a2f33322d3438203d3e203533303830.roa
Signing time:             Tue 23 Jul 2024 11:55:44 +0000
ROA not before:           Tue 23 Jul 2024 11:50:44 +0000
ROA not after:            Tue 22 Jul 2025 11:55:44 +0000
asID:                     53080
IP address blocks:        2804:71c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b5:6b:01:a2:67:21:54:d6:85:89:c9:bf:9d:af:85:44:f2:1f:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE
        Validity
            Not Before: Jul 23 11:50:44 2024 GMT
            Not After : Jul 22 11:55:44 2025 GMT
        Subject: CN=1786754D2736F9569C3C8A48B26248A589919841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bb:fc:7f:af:33:db:90:19:5c:2a:bc:ff:6a:
                    44:e3:65:8c:26:53:87:c6:c3:ee:e1:16:eb:e1:b8:
                    53:2a:69:d2:a0:47:fd:8f:c7:0e:e3:63:83:1b:11:
                    41:9b:b9:28:2f:86:b9:b2:dc:03:38:87:99:93:47:
                    ee:9b:f9:8a:22:4f:5b:ef:5e:53:b5:4d:60:21:c9:
                    40:46:14:e1:54:62:2d:5d:3f:8d:2a:50:40:82:56:
                    2f:da:01:02:bf:38:87:3e:35:32:64:c5:51:eb:af:
                    6f:2b:38:9b:e5:76:77:77:44:24:15:95:70:02:e0:
                    16:b7:2f:ea:f0:29:56:55:60:dc:75:1e:c9:ac:86:
                    8b:82:ff:aa:f9:38:bb:45:05:56:56:38:2a:03:6d:
                    b4:0b:ee:90:14:3d:5c:54:4f:60:d2:03:fa:4c:92:
                    4b:68:56:de:24:2d:50:32:26:0d:3d:25:b4:f5:2c:
                    bc:96:2f:5f:60:4b:b5:12:00:b3:7f:ab:3b:33:bf:
                    dd:61:1b:15:8b:58:7a:c7:aa:4f:e6:1e:ea:0a:aa:
                    d7:e9:fe:cb:37:96:76:b5:d4:fc:72:45:c8:8c:c1:
                    bd:3a:ea:c2:09:b0:48:7a:34:4c:96:e1:21:af:60:
                    f1:2d:2c:18:47:85:6b:70:c3:a3:99:f1:9e:1f:bf:
                    10:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:86:75:4D:27:36:F9:56:9C:3C:8A:48:B2:62:48:A5:89:91:98:41
            X509v3 Authority Key Identifier:
                keyid:F4:CC:BF:55:AA:1D:25:CB:A2:0B:D8:CE:85:D9:CD:6D:00:08:CA:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/323830343a3731633a3a2f33322d3438203d3e203533303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:71c::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:8a:da:c7:77:b9:94:70:4c:36:10:9c:0e:a0:f0:6e:ad:59:
         54:b5:76:7f:90:5a:4e:90:64:97:a0:fe:bb:b2:f5:70:25:a2:
         e5:f4:04:ab:19:67:97:d0:17:26:fb:be:f0:87:6f:76:31:87:
         0a:9a:77:72:f5:16:b2:97:60:20:11:ca:b6:f9:6c:42:3d:14:
         b1:dc:81:fc:1b:e6:07:53:45:01:aa:a8:72:e2:8a:f5:af:45:
         f4:15:6d:ef:a6:57:0b:1f:42:5c:44:c9:f2:de:39:85:fa:ba:
         5f:59:8a:21:86:94:e5:d1:f0:e4:57:92:f6:74:f2:bd:26:33:
         2d:a5:08:e0:47:2b:3b:02:5c:91:26:5a:08:9b:b2:82:a6:4b:
         7f:0e:3d:75:88:b1:f2:0b:8b:45:10:15:ca:67:f8:09:0d:72:
         5e:27:52:9c:6f:04:a8:9c:80:dd:95:1d:17:b4:46:fc:8d:a9:
         a0:6d:89:e4:9e:27:61:fc:b1:bb:10:f1:d2:f0:5d:87:15:31:
         49:1f:c2:1c:49:c1:da:db:c4:50:43:46:3e:05:10:a1:b7:d9:
         68:2f:2c:42:6d:b3:fd:84:41:1b:51:a8:a8:51:0a:3c:dc:ed:
         2d:02:5c:fe:68:44:af:01:c2:de:1f:26:fd:4c:ea:50:01:a6:
         ca:ea:b6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 17:47:12 2024 by rpki-client on console-fra.rpki-client.org