Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/323830343a363539383a3a2f33342d3334203d3e20323639353032.roa
File:                     323830343a363539383a3a2f33342d3334203d3e20323639353032.roa (raw, json)
Hash identifier:          Z3pPTVpwfY3DqhpGjD4KYvOdJ3y25ftA7IWPyDwTWLc=
Subject key identifier:   06:7F:8A:65:C9:BC:57:1F:24:1B:98:F8:7A:F8:B4:EC:FF:E6:98:B9
Certificate issuer:       /CN=FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B
Certificate serial:       7E5E6992BE76781E9BC99EC82C2C2D77D839A032
Authority key identifier: FF:F7:2C:B5:4D:12:CB:8D:1A:15:3A:24:43:C3:64:EC:A1:5C:BD:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/323830343a363539383a3a2f33342d3334203d3e20323639353032.roa
Signing time:             Tue 26 Jul 2022 16:00:00 +0000
ROA not before:           Tue 26 Jul 2022 15:55:00 +0000
ROA not after:            Tue 25 Jul 2023 16:00:00 +0000
asID:                     269502
IP address blocks:        2804:6598::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:5e:69:92:be:76:78:1e:9b:c9:9e:c8:2c:2c:2d:77:d8:39:a0:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B
        Validity
            Not Before: Jul 26 15:55:00 2022 GMT
            Not After : Jul 25 16:00:00 2023 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:93:b0:1a:26:a2:e6:12:4a:28:2a:d7:c0:f2:
                    00:86:0a:6c:42:ca:9e:2d:b4:2b:10:c1:f6:6e:e9:
                    04:9e:7d:7a:76:71:b4:64:1a:df:05:27:2a:51:de:
                    48:3b:22:41:1e:67:a5:a9:ca:2b:58:85:80:05:2f:
                    ab:d3:0a:62:09:0f:33:4d:73:8e:ca:71:ec:96:7d:
                    29:09:c2:0e:54:7f:44:c0:1f:46:82:9e:9d:aa:3c:
                    0a:84:cd:a5:d1:e5:ee:90:b1:d6:be:2d:2b:6b:12:
                    0e:ce:7b:72:d5:f0:47:04:c8:3f:0e:63:54:1e:a5:
                    48:7c:8f:f7:ff:9d:ef:95:5e:8d:68:aa:17:c4:82:
                    84:69:f1:f9:9c:ab:42:1b:de:4c:b4:0b:d8:0c:05:
                    53:15:82:f3:39:cb:23:ce:5a:20:12:62:ba:fe:d3:
                    78:2a:4f:94:fd:15:ee:bd:8c:17:aa:49:6b:89:8d:
                    5c:45:1c:f5:96:81:b6:09:1b:80:36:17:58:f6:10:
                    7a:90:a3:9a:84:03:28:40:9b:a4:15:8b:d0:ee:dd:
                    30:70:35:b9:f1:50:37:65:cd:92:66:fe:01:62:cd:
                    2b:a5:93:e7:56:e7:16:30:a8:59:6e:e8:48:95:e1:
                    f8:61:ff:45:ea:46:be:11:b7:42:b6:99:3c:99:72:
                    7b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7F:8A:65:C9:BC:57:1F:24:1B:98:F8:7A:F8:B4:EC:FF:E6:98:B9
            X509v3 Authority Key Identifier:
                keyid:FF:F7:2C:B5:4D:12:CB:8D:1A:15:3A:24:43:C3:64:EC:A1:5C:BD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/323830343a363539383a3a2f33342d3334203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6598::/34

    Signature Algorithm: sha256WithRSAEncryption
         4b:44:62:00:17:e4:de:f9:75:97:70:9e:42:34:47:c0:d1:db:
         3e:83:73:67:32:c7:05:f0:ab:86:ba:ec:1c:ad:ce:e4:0c:45:
         66:db:af:85:e3:da:a9:72:1d:a8:a1:92:bb:b5:ee:01:cb:e2:
         7d:61:e6:d6:58:5c:4b:75:70:05:9b:a3:5c:71:38:d2:55:6c:
         98:32:15:3b:ea:42:3a:a6:91:7e:45:dc:d7:81:c4:06:02:e7:
         ad:c3:ed:c3:08:90:77:e6:5d:21:7a:85:8f:c9:a0:23:1b:1e:
         c4:df:aa:8a:5f:7b:f4:30:53:9f:70:af:df:e0:aa:4a:18:c2:
         06:e5:68:98:36:43:1f:4c:cd:78:b7:4f:f4:f0:35:da:d8:6e:
         bc:fe:4f:09:52:fd:fb:45:09:4f:37:3e:a8:cf:a2:ab:a7:05:
         4d:00:e8:19:a7:e0:4a:e4:4f:3a:ba:e9:4d:fb:eb:f6:35:38:
         34:31:36:94:b0:fb:bd:bd:16:d1:81:a7:66:5e:8e:ec:8a:52:
         ad:6d:3d:f6:03:e7:db:c9:59:8c:81:05:2c:7e:3a:c9:bc:eb:
         de:08:8b:70:a8:19:94:b9:65:4b:7f:1f:17:fe:54:ed:d2:ab:
         86:4f:a7:46:d5:19:47:8a:42:0b:43:8f:49:40:a5:68:8a:ef:
         dd:77:45:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org