Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/323830343a333562383a633030303a3a2f33342d3334203d3e20323636333032.roa
File:                     323830343a333562383a633030303a3a2f33342d3334203d3e20323636333032.roa (raw, json)
Hash identifier:          HL38Ryr6Jklj1gmlxvrUhjVx9w+5IVpDuZ5e4lhfENk=
Subject key identifier:   E4:D7:A0:7F:4F:0F:98:A7:9E:BD:66:DA:E9:C5:4A:9A:9B:30:F3:6E
Certificate issuer:       /CN=F9387F47D8872E43A828969C27F3B31F1C2E66C6
Certificate serial:       39CCD0C21C82D38578E52A7CA4A4FEE1B9510653
Authority key identifier: F9:38:7F:47:D8:87:2E:43:A8:28:96:9C:27:F3:B3:1F:1C:2E:66:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9387F47D8872E43A828969C27F3B31F1C2E66C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/323830343a333562383a633030303a3a2f33342d3334203d3e20323636333032.roa
Signing time:             Tue 20 Feb 2024 22:30:54 +0000
ROA not before:           Tue 20 Feb 2024 22:25:54 +0000
ROA not after:            Tue 18 Feb 2025 22:30:54 +0000
asID:                     266302
IP address blocks:        2804:35b8:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:cc:d0:c2:1c:82:d3:85:78:e5:2a:7c:a4:a4:fe:e1:b9:51:06:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9387F47D8872E43A828969C27F3B31F1C2E66C6
        Validity
            Not Before: Feb 20 22:25:54 2024 GMT
            Not After : Feb 18 22:30:54 2025 GMT
        Subject: CN=E4D7A07F4F0F98A79EBD66DAE9C54A9A9B30F36E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6f:60:21:42:b2:d3:2f:cd:6d:aa:be:2d:8f:
                    64:cb:6b:74:b5:0b:5c:6d:4c:93:92:a2:5c:38:b0:
                    5d:19:bc:f5:05:a5:45:8a:ad:29:7e:1a:7a:4a:5a:
                    1a:5e:af:78:71:5c:5c:d6:78:06:d6:58:69:b0:6c:
                    c9:17:e2:59:49:30:25:cc:0b:3e:06:3c:63:d2:23:
                    88:65:ee:44:7b:cf:1c:a9:82:e1:e6:15:65:ae:61:
                    aa:a4:bc:bf:fd:59:5b:14:af:95:be:41:90:ad:67:
                    e4:5b:46:0d:5e:34:43:e5:a3:2d:2a:1f:b1:18:72:
                    e3:29:3c:98:4e:85:25:e7:e9:b8:df:6d:39:ab:c3:
                    52:ed:67:9b:44:ea:20:47:08:b9:71:71:23:66:6d:
                    93:c9:52:15:1c:9a:89:44:29:0e:2e:5d:9c:92:0a:
                    f2:6d:7d:fb:1e:ef:27:47:f9:ac:7a:69:60:d8:77:
                    5c:01:92:cb:1e:a6:9d:d1:f8:72:67:3b:9f:91:71:
                    24:26:f7:4b:99:f9:ea:3f:31:d0:f4:eb:74:44:09:
                    17:a4:38:3d:22:c7:6a:94:c1:4e:99:61:7b:5d:63:
                    4d:ea:3d:33:f1:63:df:7a:36:d8:38:c5:79:60:cf:
                    d7:f3:bd:8d:1c:c7:5a:be:a8:92:40:11:6e:d7:2e:
                    a9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D7:A0:7F:4F:0F:98:A7:9E:BD:66:DA:E9:C5:4A:9A:9B:30:F3:6E
            X509v3 Authority Key Identifier:
                keyid:F9:38:7F:47:D8:87:2E:43:A8:28:96:9C:27:F3:B3:1F:1C:2E:66:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/F9387F47D8872E43A828969C27F3B31F1C2E66C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9387F47D8872E43A828969C27F3B31F1C2E66C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/323830343a333562383a633030303a3a2f33342d3334203d3e20323636333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35b8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         42:e6:a8:ea:01:95:20:13:0a:85:b3:75:22:41:a9:52:d6:18:
         e3:74:31:c3:2b:fd:6c:f6:c5:8f:52:38:49:ad:e4:f9:8e:a9:
         6b:e5:84:bb:e7:6b:8c:b7:9a:01:7b:ca:c5:2f:cb:1f:c9:dc:
         a1:a5:83:ac:98:37:59:80:97:ea:6c:8f:f8:0f:3a:82:9f:b7:
         d2:c0:18:71:e7:f6:30:8a:c8:42:ca:3b:eb:f1:ed:4f:9a:3b:
         93:2b:b9:59:a1:7b:4d:0d:e6:a2:b4:ae:6b:f2:b3:d6:73:05:
         55:00:78:78:44:4f:f7:72:a2:04:a4:21:b5:c9:e5:93:08:fa:
         eb:32:59:0d:9b:2c:a4:b6:d9:ed:d4:b6:39:75:c3:cd:d0:35:
         e8:5e:aa:db:5e:9b:49:e2:d8:df:ce:0e:0f:16:04:ba:69:5a:
         c1:f6:c2:d2:cb:27:aa:e9:b5:c2:69:32:ea:2b:29:da:88:ef:
         c6:c4:1e:74:2d:a4:c7:f0:b4:a1:43:9e:84:ff:5f:5e:f9:77:
         de:ea:e1:42:18:6c:be:57:cd:95:d2:94:97:b1:00:53:3c:e6:
         b5:3a:28:09:de:3c:a5:a4:70:db:8f:df:6e:21:c2:86:9d:75:
         a3:61:e0:67:07:85:55:94:6f:68:00:34:04:2d:6f:f9:a7:6d:
         2a:9c:51:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org