Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/323830343a366238383a633030303a3a2f33342d3334203d3e20323730343036.roa
File:                     323830343a366238383a633030303a3a2f33342d3334203d3e20323730343036.roa (raw, json)
Hash identifier:          +GPdaOZ6sz8CItGZZwExb96yVuTJ1hW39+DkkMFZP4Y=
Subject key identifier:   9B:22:20:97:88:3E:AF:B9:A5:01:BB:CC:74:B6:78:17:7C:8F:A6:DD
Certificate issuer:       /CN=5FF0AF706C62B5250221CAAA58C63419A81F3472
Certificate serial:       49208F4E68DBDFDAE3155A7CD76C2079026D7888
Authority key identifier: 5F:F0:AF:70:6C:62:B5:25:02:21:CA:AA:58:C6:34:19:A8:1F:34:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF0AF706C62B5250221CAAA58C63419A81F3472.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/323830343a366238383a633030303a3a2f33342d3334203d3e20323730343036.roa
Signing time:             Wed 03 Apr 2024 20:33:47 +0000
ROA not before:           Wed 03 Apr 2024 20:28:47 +0000
ROA not after:            Wed 02 Apr 2025 20:33:47 +0000
asID:                     270406
IP address blocks:        2804:6b88:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:20:8f:4e:68:db:df:da:e3:15:5a:7c:d7:6c:20:79:02:6d:78:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FF0AF706C62B5250221CAAA58C63419A81F3472
        Validity
            Not Before: Apr  3 20:28:47 2024 GMT
            Not After : Apr  2 20:33:47 2025 GMT
        Subject: CN=9B222097883EAFB9A501BBCC74B678177C8FA6DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:33:76:73:a4:a4:08:82:c8:62:26:25:24:6c:
                    37:20:dc:0d:16:7c:bd:34:64:ac:1c:d7:63:3c:5c:
                    0f:5c:a6:4f:51:51:87:21:88:c9:2d:e8:e8:b7:7b:
                    18:7d:6c:14:72:26:ff:8a:1c:c4:55:ff:15:22:92:
                    5c:4a:c5:ee:33:f9:09:f7:48:90:cf:f2:72:dd:18:
                    ff:d5:0f:9c:0e:8f:10:02:87:46:d2:71:17:81:99:
                    d1:04:84:36:ac:c2:95:2d:42:69:1f:8e:3b:cb:2d:
                    df:60:f9:43:8c:b7:ec:54:61:96:b7:fa:85:07:bd:
                    15:e4:a9:6c:5e:00:de:81:97:c3:ed:1b:d4:6b:82:
                    51:a4:87:e9:ed:08:40:7e:d8:87:6c:c5:49:0c:dc:
                    7c:98:7b:6a:b6:02:47:be:bf:42:e3:4b:4d:00:6f:
                    ff:58:e9:ca:9f:13:d4:7d:13:e4:8f:89:4a:56:0c:
                    cb:62:14:6d:9d:d4:0a:ad:b7:9e:d0:35:81:10:d1:
                    f8:18:d2:ba:0c:5b:ac:23:6c:da:73:98:07:23:06:
                    aa:ff:45:b2:eb:ad:a4:5f:b4:5a:bc:db:1d:df:11:
                    3b:88:c1:7c:40:15:76:0f:19:e1:7f:7c:b2:bc:cc:
                    72:8c:e1:d2:4f:4e:16:93:8a:18:4f:2a:4f:24:fd:
                    76:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:22:20:97:88:3E:AF:B9:A5:01:BB:CC:74:B6:78:17:7C:8F:A6:DD
            X509v3 Authority Key Identifier:
                keyid:5F:F0:AF:70:6C:62:B5:25:02:21:CA:AA:58:C6:34:19:A8:1F:34:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/5FF0AF706C62B5250221CAAA58C63419A81F3472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF0AF706C62B5250221CAAA58C63419A81F3472.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/323830343a366238383a633030303a3a2f33342d3334203d3e20323730343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b88:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         59:0f:90:99:50:aa:d3:1c:ba:c4:d8:2c:ca:7e:95:d9:87:b2:
         16:a3:f6:71:d9:b2:7c:4b:a1:07:00:94:8e:94:89:aa:6c:08:
         72:4d:a5:08:07:e5:29:ae:d3:e2:8d:b3:75:12:fc:36:c6:40:
         d8:40:40:fe:87:c8:9a:dd:89:01:e6:bf:54:15:fe:7c:5f:43:
         03:f2:45:68:c8:a2:e0:71:d1:65:49:81:65:dc:d6:cf:fc:99:
         46:69:ef:07:f9:42:ea:b1:93:12:13:d0:e3:bd:a8:5a:d7:ec:
         bd:6d:39:e5:57:b0:78:2b:ec:5d:39:ad:ee:97:ef:e0:8a:66:
         81:97:74:84:0a:33:5e:f3:cf:f8:e5:c0:29:dd:d1:7c:ce:57:
         6b:26:28:f2:e7:c2:02:ab:99:a2:69:24:39:4a:72:c0:3f:24:
         ee:8c:2c:1f:1d:f7:39:71:bf:3f:ab:2f:d9:1a:97:c9:e2:d1:
         25:4b:b1:17:e9:6e:9d:0a:04:24:bd:c3:69:18:bc:5a:bb:d8:
         19:64:96:8f:77:4c:60:21:e8:f4:3f:06:e9:a7:5c:22:4e:b3:
         f4:9e:60:c4:9e:5a:16:80:78:f2:74:a7:74:83:81:d6:39:13:
         6f:6f:1d:74:4c:d6:03:a5:e7:bf:39:25:28:d8:8c:b7:4e:12:
         34:86:5c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org