Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/323830343a363539383a383030303a3a2f33342d3334203d3e20323639353032.roa
File:                     323830343a363539383a383030303a3a2f33342d3334203d3e20323639353032.roa (raw, json)
Hash identifier:          J6J9FrGodVwtkYlL+Ay4pLni5e3EkVjKVEsGmNe5nak=
Subject key identifier:   E5:BA:BD:D9:D3:25:2F:2C:55:10:3D:E1:BD:C1:69:B6:94:89:FC:05
Certificate issuer:       /CN=FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B
Certificate serial:       261BAE18F110C55070B2243F5114A439EDD73A39
Authority key identifier: FF:F7:2C:B5:4D:12:CB:8D:1A:15:3A:24:43:C3:64:EC:A1:5C:BD:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/323830343a363539383a383030303a3a2f33342d3334203d3e20323639353032.roa
Signing time:             Tue 26 Jul 2022 16:00:00 +0000
ROA not before:           Tue 26 Jul 2022 15:55:00 +0000
ROA not after:            Tue 25 Jul 2023 16:00:00 +0000
asID:                     269502
IP address blocks:        2804:6598:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:1b:ae:18:f1:10:c5:50:70:b2:24:3f:51:14:a4:39:ed:d7:3a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B
        Validity
            Not Before: Jul 26 15:55:00 2022 GMT
            Not After : Jul 25 16:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a1:8b:49:e0:1a:f7:9c:e6:1c:9d:cf:a7:df:
                    75:c8:0e:d9:a1:f0:e5:db:2a:1a:33:df:75:9c:38:
                    21:97:be:e9:5d:da:9c:88:0f:3d:0f:7b:4c:47:3e:
                    6b:c9:a9:f5:7d:9d:64:6b:bf:c5:56:f8:b9:ef:77:
                    55:d3:9c:d7:12:1a:6d:2f:4e:33:9c:cd:3a:4d:7f:
                    36:6f:59:83:b3:ef:0f:25:2d:75:75:40:30:63:fd:
                    89:e4:8e:3c:06:9b:76:19:fe:4b:01:d6:ae:92:ea:
                    c3:e7:32:74:7d:ef:aa:f5:b5:98:cd:84:58:24:79:
                    44:28:35:e9:06:05:c6:ab:fd:8f:64:16:8a:2f:95:
                    04:45:28:df:78:06:98:f1:0e:0f:02:da:31:ae:d9:
                    b3:8e:a5:9a:2c:60:8f:33:8a:34:a0:9c:80:68:0a:
                    82:57:90:0d:7c:d4:15:66:9e:31:66:9c:de:a7:bc:
                    dd:54:57:06:75:4c:3d:37:27:55:92:b8:db:6c:9d:
                    77:12:d3:7e:ef:4f:e9:cc:c3:56:0a:46:3c:95:8b:
                    cc:cf:c5:56:bf:2b:bb:8c:97:57:a4:2c:f3:11:34:
                    26:8b:f2:64:3b:be:a8:e6:73:12:5b:ee:3c:e1:ca:
                    68:ec:06:de:c5:97:83:d1:b4:a3:7f:d6:47:49:f9:
                    c1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:BA:BD:D9:D3:25:2F:2C:55:10:3D:E1:BD:C1:69:B6:94:89:FC:05
            X509v3 Authority Key Identifier:
                keyid:FF:F7:2C:B5:4D:12:CB:8D:1A:15:3A:24:43:C3:64:EC:A1:5C:BD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/323830343a363539383a383030303a3a2f33342d3334203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6598:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2b:42:e1:a3:33:43:20:db:23:2f:b7:0a:0f:5c:91:2f:7f:fe:
         b8:87:f1:1e:c7:45:2f:7b:ec:3e:0d:76:e3:f0:ff:db:85:0a:
         12:47:14:6a:9d:4d:52:ff:4a:de:0c:d8:47:f4:6e:6c:31:3f:
         00:9a:f6:47:dd:c0:e5:10:32:3a:5c:9d:b1:df:58:ad:62:be:
         0d:37:eb:fa:86:53:c6:bc:30:bb:36:33:2e:a3:4a:9b:91:0c:
         71:d1:92:a9:ff:15:eb:e0:26:a2:f8:4c:82:6d:09:9a:d4:e6:
         c8:f1:6a:f1:f7:fe:c4:3f:5b:ae:7c:ee:51:ee:e3:34:cf:f2:
         fc:1e:da:a8:d4:e0:b8:70:10:74:a7:ab:e2:bc:b7:bd:7d:bf:
         3e:62:c8:34:f5:1e:cd:6a:fc:50:21:e4:2f:fb:9e:e8:df:da:
         eb:6b:96:3f:e8:0f:6d:d9:42:ff:56:90:54:23:34:95:0f:03:
         88:93:0b:6d:92:58:6b:54:fc:de:49:89:74:b2:c0:31:70:a9:
         5a:5f:5b:15:1a:83:d3:56:dc:88:b0:b0:f8:f7:9f:4a:96:9b:
         3e:96:62:13:4f:5d:38:a6:21:86:60:47:72:1d:3b:d7:c2:0d:
         5c:f5:63:63:ec:27:f9:34:ac:d6:2a:05:02:95:25:ad:3c:55:
         97:e9:40:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org