Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a663030303a3a2f34302d3430203d3e20323732323230.roa
File:                     323830343a316635343a663030303a3a2f34302d3430203d3e20323732323230.roa (raw, json)
Hash identifier:          VtGhkW+aexUhK/VAzk05Hnlc78i25W0Q4E/jfZEhgH8=
Subject key identifier:   89:32:98:52:6E:20:5E:F0:5F:21:F8:23:19:C1:38:64:EA:EC:92:10
Certificate issuer:       /CN=4F7C6599F80B64AFC2A339651834D8FBB53C1B85
Certificate serial:       6B628016AD7497D99F644F3AEA6591BFAF53209B
Authority key identifier: 4F:7C:65:99:F8:0B:64:AF:C2:A3:39:65:18:34:D8:FB:B5:3C:1B:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F7C6599F80B64AFC2A339651834D8FBB53C1B85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a663030303a3a2f34302d3430203d3e20323732323230.roa
Signing time:             Fri 12 Apr 2024 20:00:00 +0000
ROA not before:           Fri 12 Apr 2024 19:55:00 +0000
ROA not after:            Fri 11 Apr 2025 20:00:00 +0000
asID:                     272220
IP address blocks:        2804:1f54:f000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:62:80:16:ad:74:97:d9:9f:64:4f:3a:ea:65:91:bf:af:53:20:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F7C6599F80B64AFC2A339651834D8FBB53C1B85
        Validity
            Not Before: Apr 12 19:55:00 2024 GMT
            Not After : Apr 11 20:00:00 2025 GMT
        Subject: CN=893298526E205EF05F21F82319C13864EAEC9210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:50:55:bd:d7:fb:54:58:03:fa:bf:02:56:3c:
                    d2:4d:14:2c:66:07:35:dc:36:e2:2f:27:dc:cb:90:
                    6a:e4:03:b0:e1:6a:6b:86:fe:43:11:3c:82:1f:80:
                    45:0a:c5:0f:92:9f:1f:b8:d9:74:f1:39:9e:6c:1f:
                    5e:6b:3e:c0:70:6b:23:89:d2:70:af:64:e9:78:db:
                    d8:b7:61:ce:6f:28:e1:ec:c4:17:fd:83:80:7e:50:
                    3d:9b:59:cb:31:45:45:9a:34:5b:3d:b8:67:ea:8e:
                    a0:fe:3b:6d:2b:a3:72:02:5b:95:fd:fb:d1:62:20:
                    27:dd:84:94:dd:10:ab:00:f8:d9:d7:7d:f0:f8:ad:
                    62:2d:f8:54:e6:59:65:fd:30:9c:2e:bc:c1:a0:18:
                    f4:34:58:52:c7:80:00:dd:84:72:8a:41:14:c2:29:
                    03:8b:60:f6:9e:a0:ce:c7:12:b2:3f:25:18:6b:8a:
                    5a:89:f7:e5:c7:88:4a:4c:2d:88:63:66:a4:c0:0d:
                    56:5a:f3:84:bf:1e:cf:3b:10:eb:df:8f:98:3d:6b:
                    9e:5e:0d:76:51:db:fb:02:0e:4e:99:79:21:fe:0a:
                    39:c5:c0:5c:72:fe:23:17:38:ba:db:4b:aa:5a:8d:
                    19:11:69:c1:12:08:5d:40:66:5d:db:3a:b2:b4:cf:
                    6a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:32:98:52:6E:20:5E:F0:5F:21:F8:23:19:C1:38:64:EA:EC:92:10
            X509v3 Authority Key Identifier:
                keyid:4F:7C:65:99:F8:0B:64:AF:C2:A3:39:65:18:34:D8:FB:B5:3C:1B:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/4F7C6599F80B64AFC2A339651834D8FBB53C1B85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F7C6599F80B64AFC2A339651834D8FBB53C1B85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a663030303a3a2f34302d3430203d3e20323732323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f54:f000::/40

    Signature Algorithm: sha256WithRSAEncryption
         34:78:a4:76:fb:5a:52:97:3e:e8:64:bf:ac:70:15:6d:b7:e9:
         9c:34:86:38:97:9f:3a:67:b0:1e:c8:6f:08:51:5e:91:e4:52:
         8c:40:80:14:5b:17:6d:e9:8f:53:b6:dc:72:50:3d:8f:5f:b3:
         25:7c:8e:98:9c:51:ce:1f:bf:bf:89:40:4a:ac:e4:37:cf:7b:
         d9:72:f9:10:1e:9b:19:32:2f:32:7b:ef:b0:3b:83:aa:5a:f4:
         85:1f:59:c1:d9:a0:d8:30:7b:94:66:0e:2e:77:a2:39:34:04:
         3e:b4:4c:07:a6:22:13:3c:89:c3:f9:2d:f2:78:de:75:8e:72:
         76:b3:9a:ef:94:fa:bd:90:51:ac:aa:8d:a1:87:cb:89:c5:62:
         29:59:12:c6:1b:a6:52:2f:45:9b:20:d8:1e:bd:16:ac:b5:d3:
         81:44:4b:84:58:a9:de:67:eb:4a:3a:b0:15:4b:0e:40:84:90:
         8a:a3:4f:75:b2:08:ab:09:81:31:1b:0e:ab:0c:61:0a:6a:40:
         aa:2d:7c:0c:64:9a:be:fe:86:b8:ae:f8:4a:8e:10:de:a7:dd:
         dc:8d:0c:4b:53:46:f2:cd:06:df:14:d6:ab:b2:8a:0e:97:82:
         e9:53:85:ec:06:c2:21:a8:69:69:55:c9:ac:e7:cf:3d:3c:64:
         11:fb:7d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org