Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CFBgmCEgSXhgB5tsJEVP56oKCwXhYZHTNLtnFgVa3pDW/1/323830343a346436383a3a2f33322d3438203d3e20323638313934.roa
File:                     323830343a346436383a3a2f33322d3438203d3e20323638313934.roa (raw, json)
Hash identifier:          n8jKsxHuzEV+XRy4QJLCGb5Ipy5W341MEz/Q7H8ZdCA=
Subject key identifier:   2E:9E:39:54:E9:5B:B4:A1:F9:2D:B6:85:9A:38:C4:DA:CD:FA:41:BF
Certificate issuer:       /CN=94AD6A185F50ED8D655176B64F81F7A1055D7499
Certificate serial:       3F150219B9258560BED9B85453215D51AFC7DE37
Authority key identifier: 94:AD:6A:18:5F:50:ED:8D:65:51:76:B6:4F:81:F7:A1:05:5D:74:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94AD6A185F50ED8D655176B64F81F7A1055D7499.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CFBgmCEgSXhgB5tsJEVP56oKCwXhYZHTNLtnFgVa3pDW/1/323830343a346436383a3a2f33322d3438203d3e20323638313934.roa
Signing time:             Wed 10 Apr 2024 14:13:04 +0000
ROA not before:           Wed 10 Apr 2024 14:08:04 +0000
ROA not after:            Wed 09 Apr 2025 14:13:04 +0000
asID:                     268194
IP address blocks:        2804:4d68::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:15:02:19:b9:25:85:60:be:d9:b8:54:53:21:5d:51:af:c7:de:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94AD6A185F50ED8D655176B64F81F7A1055D7499
        Validity
            Not Before: Apr 10 14:08:04 2024 GMT
            Not After : Apr  9 14:13:04 2025 GMT
        Subject: CN=2E9E3954E95BB4A1F92DB6859A38C4DACDFA41BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:62:bd:6b:86:09:ba:15:d0:28:88:89:8c:95:
                    7a:30:bc:b6:db:3c:28:01:90:cc:2c:54:5c:88:47:
                    12:7c:b9:1a:ac:97:3a:02:d8:ad:5a:bb:9c:e6:b1:
                    6b:62:fe:ac:cc:54:23:74:c4:82:bd:79:f7:5d:65:
                    f7:c5:0d:c3:e4:fb:a9:ad:2b:ef:d8:55:84:57:f1:
                    ad:bf:aa:7a:e7:43:47:4d:0c:33:2e:8b:7d:2f:53:
                    b4:48:8f:2e:fc:77:c0:d7:61:e0:7f:08:d1:43:2e:
                    e6:c6:ed:3d:ba:47:83:63:f3:8b:be:d5:98:e6:1e:
                    78:b4:0c:c3:ac:0b:eb:00:01:d3:93:ed:97:8e:ea:
                    ba:aa:3b:21:75:14:49:99:6f:de:7b:41:fb:8a:20:
                    2b:6b:a9:9b:16:d7:3b:21:00:bb:cb:22:9c:2e:03:
                    17:c7:83:03:8c:97:44:c3:86:22:e5:39:bf:e1:8a:
                    cf:74:d7:6b:f9:75:00:fd:6d:ed:74:49:8a:8c:21:
                    b9:90:f8:81:6c:b5:c6:62:9a:ef:5e:86:57:95:1f:
                    d0:15:9c:8d:fa:7b:7d:05:b7:81:ee:2c:3d:6c:a5:
                    78:85:b0:dc:b6:b0:61:93:3a:7d:a5:78:a9:e7:3f:
                    7f:a4:a3:d4:94:d2:de:98:f6:ce:df:94:ca:85:7d:
                    16:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:9E:39:54:E9:5B:B4:A1:F9:2D:B6:85:9A:38:C4:DA:CD:FA:41:BF
            X509v3 Authority Key Identifier:
                keyid:94:AD:6A:18:5F:50:ED:8D:65:51:76:B6:4F:81:F7:A1:05:5D:74:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CFBgmCEgSXhgB5tsJEVP56oKCwXhYZHTNLtnFgVa3pDW/1/94AD6A185F50ED8D655176B64F81F7A1055D7499.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94AD6A185F50ED8D655176B64F81F7A1055D7499.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFBgmCEgSXhgB5tsJEVP56oKCwXhYZHTNLtnFgVa3pDW/1/323830343a346436383a3a2f33322d3438203d3e20323638313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d68::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:0c:6b:8c:42:7e:98:ee:4f:78:6e:71:97:6d:9c:c6:c1:5e:
         48:15:78:01:5d:15:cc:2f:87:f0:8f:e5:fd:c4:e3:59:25:c0:
         9e:4a:83:b2:75:e0:76:77:87:69:f1:24:86:d2:73:55:75:3c:
         e5:c5:9b:89:bd:07:b3:eb:ba:33:df:71:0a:ea:14:17:40:c3:
         5a:b9:a7:1a:75:63:11:c7:1a:e3:c3:fc:fb:e4:8e:87:52:56:
         b5:8d:fe:34:59:74:b5:79:f9:da:36:23:ea:c1:73:5d:63:69:
         4c:43:4e:64:2e:84:2d:49:eb:ab:53:27:68:16:ae:e4:82:59:
         e3:e5:27:ce:a3:d3:9b:8e:c0:10:be:86:23:88:09:15:f5:75:
         4e:64:48:d7:7f:9e:be:2b:c2:93:13:16:f7:18:88:21:8d:5f:
         ef:ae:fd:c8:cc:23:2b:0c:aa:23:d5:36:c6:a7:42:7b:0b:ae:
         0a:a4:ad:6f:3a:72:ef:21:1d:f1:c4:ee:c7:36:ce:7c:ca:59:
         43:28:0a:c6:39:36:a5:81:d3:16:8b:a8:fc:3f:5e:81:1f:83:
         5d:b0:8a:dc:f6:1b:12:d1:f4:ae:dd:69:d7:54:0a:d4:d5:3b:
         b8:bb:7f:b9:3b:03:4a:74:24:9f:e7:e8:9f:93:3b:8a:ee:ff:
         91:ca:7a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org