Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBKGRcbJidkpSCdMFzDf549Q17pzLdGzLrggpSRc6cz6/0/323830343a346436343a3a2f33322d3438203d3e20323638313933.roa
File:                     323830343a346436343a3a2f33322d3438203d3e20323638313933.roa (raw, json)
Hash identifier:          FC2N0j4qdzt2AMiu7dgCs6DaFuPU/P4zlMQ5U6sYtuM=
Subject key identifier:   E8:F6:88:A7:07:A8:D5:50:BF:30:C3:FD:27:20:80:36:9C:32:28:F9
Certificate issuer:       /CN=F6FE6AE9BC7D26C5D8E1AB5E62F6811F19F8FF87
Certificate serial:       3C208589748D089352D1B09DE687FB721CA76B5C
Authority key identifier: F6:FE:6A:E9:BC:7D:26:C5:D8:E1:AB:5E:62:F6:81:1F:19:F8:FF:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6FE6AE9BC7D26C5D8E1AB5E62F6811F19F8FF87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBKGRcbJidkpSCdMFzDf549Q17pzLdGzLrggpSRc6cz6/0/323830343a346436343a3a2f33322d3438203d3e20323638313933.roa
Signing time:             Thu 22 Feb 2024 17:04:13 +0000
ROA not before:           Thu 22 Feb 2024 16:59:13 +0000
ROA not after:            Thu 20 Feb 2025 17:04:13 +0000
asID:                     268193
IP address blocks:        2804:4d64::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:20:85:89:74:8d:08:93:52:d1:b0:9d:e6:87:fb:72:1c:a7:6b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6FE6AE9BC7D26C5D8E1AB5E62F6811F19F8FF87
        Validity
            Not Before: Feb 22 16:59:13 2024 GMT
            Not After : Feb 20 17:04:13 2025 GMT
        Subject: CN=E8F688A707A8D550BF30C3FD272080369C3228F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c8:6d:9d:58:18:6c:ac:a2:ad:8b:12:1b:69:
                    0c:e8:db:88:60:4f:24:b5:f9:3a:b4:7b:d6:a7:8e:
                    fd:ab:dc:8c:3a:c7:2f:a1:08:22:26:4e:2b:ed:a5:
                    e3:ed:ef:c5:cf:40:5d:d8:09:2f:b4:6f:3d:93:99:
                    0f:69:bd:18:75:32:3c:5c:17:3e:8c:93:e0:21:6d:
                    8e:67:4e:92:8d:a2:23:f1:74:e5:e2:40:2b:ba:32:
                    5e:37:d1:8e:41:32:54:f4:18:f1:a8:aa:b9:50:1a:
                    4e:1b:91:b7:de:00:cc:72:e9:9f:1f:03:d6:c4:db:
                    e0:26:b0:05:08:fa:67:da:91:ee:82:9b:b0:c7:b7:
                    00:cb:e8:df:4d:64:d2:ec:7a:48:d2:34:3c:f6:e8:
                    f1:a3:b2:f8:26:0d:c3:b5:22:93:7c:42:a0:8f:84:
                    48:12:f1:9b:64:48:de:17:6d:cd:fa:83:5e:4e:ed:
                    79:ec:7e:71:5c:a2:7a:ab:77:61:93:aa:d3:c9:ee:
                    05:9a:36:12:13:64:f8:cb:fc:12:58:2e:ba:d3:de:
                    c6:ce:18:55:a4:f9:96:3d:bf:c9:43:22:66:59:ba:
                    77:ec:df:e8:37:6d:25:33:f7:ba:77:73:2e:a0:96:
                    ff:24:ae:9c:ea:9b:9c:91:1c:aa:49:fc:0a:07:4f:
                    8c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F6:88:A7:07:A8:D5:50:BF:30:C3:FD:27:20:80:36:9C:32:28:F9
            X509v3 Authority Key Identifier:
                keyid:F6:FE:6A:E9:BC:7D:26:C5:D8:E1:AB:5E:62:F6:81:1F:19:F8:FF:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBKGRcbJidkpSCdMFzDf549Q17pzLdGzLrggpSRc6cz6/0/F6FE6AE9BC7D26C5D8E1AB5E62F6811F19F8FF87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6FE6AE9BC7D26C5D8E1AB5E62F6811F19F8FF87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBKGRcbJidkpSCdMFzDf549Q17pzLdGzLrggpSRc6cz6/0/323830343a346436343a3a2f33322d3438203d3e20323638313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d64::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:b9:74:88:25:b3:03:dc:32:9a:d1:35:1d:b6:f9:fb:31:14:
         9d:ff:dc:db:f9:d8:7b:79:1e:13:7e:ee:55:a2:35:22:9c:b4:
         aa:84:1a:73:b0:de:b7:fe:1e:e3:50:96:6b:87:fb:81:cb:e7:
         35:9c:b9:c9:28:b4:e6:83:6a:8b:fe:01:9e:b5:5c:71:23:18:
         6e:d1:99:6f:6a:b7:f4:41:73:32:4e:81:c8:bd:b2:ab:32:35:
         6e:08:10:eb:9d:90:c7:04:12:0d:37:ae:0a:a6:9c:e4:0c:ad:
         98:79:1a:c6:56:86:0e:5c:72:82:da:8f:5b:94:5d:32:a7:70:
         0f:9b:41:1a:32:bc:6e:5e:c0:40:91:8c:66:85:71:44:59:50:
         1a:13:39:53:0d:f2:59:21:de:8a:f5:e0:92:d0:6b:f2:0d:ba:
         9f:29:22:05:11:30:ac:10:49:24:70:e4:67:79:b8:6f:5c:1a:
         ad:76:2d:e7:75:4e:1b:d5:1c:dc:57:25:ed:20:12:8a:85:b8:
         eb:1a:cb:1d:90:b4:00:77:23:0a:c1:13:c5:a8:05:fe:7b:6b:
         d2:02:2d:57:e7:8b:d2:14:1b:35:dd:ef:6a:2f:53:81:11:b7:
         54:24:19:a9:24:75:e0:d6:ce:7d:ff:eb:3a:48:c3:d6:0a:84:
         fa:ce:69:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org