Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/323830343a363432633a3a2f33322d3332203d3e20323639343131.roa
File:                     323830343a363432633a3a2f33322d3332203d3e20323639343131.roa (raw, json)
Hash identifier:          OWDqmGGluJXjRfVzZu/A+7lM6ChqyNZguwk9MbtIn24=
Subject key identifier:   65:71:8A:FC:BA:77:CC:DD:05:7D:D3:25:1F:4F:EB:56:D1:E3:5A:16
Certificate issuer:       /CN=100BA0134C785D84A913EF65B85A8B4973D0B2C5
Certificate serial:       2F142DD5B864D3A40774404048DDCB716A8B8956
Authority key identifier: 10:0B:A0:13:4C:78:5D:84:A9:13:EF:65:B8:5A:8B:49:73:D0:B2:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/100BA0134C785D84A913EF65B85A8B4973D0B2C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/323830343a363432633a3a2f33322d3332203d3e20323639343131.roa
Signing time:             Wed 28 Feb 2024 01:14:26 +0000
ROA not before:           Wed 28 Feb 2024 01:09:26 +0000
ROA not after:            Wed 26 Feb 2025 01:14:26 +0000
asID:                     269411
IP address blocks:        2804:642c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:14:2d:d5:b8:64:d3:a4:07:74:40:40:48:dd:cb:71:6a:8b:89:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=100BA0134C785D84A913EF65B85A8B4973D0B2C5
        Validity
            Not Before: Feb 28 01:09:26 2024 GMT
            Not After : Feb 26 01:14:26 2025 GMT
        Subject: CN=65718AFCBA77CCDD057DD3251F4FEB56D1E35A16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:26:c4:1c:7d:dd:4d:ac:0a:0a:c9:60:13:20:
                    ac:58:4c:ba:71:dc:b2:dc:57:ab:19:60:8a:4e:f9:
                    11:82:1b:2f:81:6f:f7:9b:07:11:b6:25:5d:ec:34:
                    3d:9c:72:67:99:3c:43:df:7c:71:50:ea:9f:42:1d:
                    0e:31:11:e7:de:5a:ce:15:31:6b:ed:20:ba:3f:62:
                    63:7a:5f:ca:ae:26:b2:01:af:22:72:c3:3a:49:07:
                    fa:20:9d:37:97:99:46:8b:b1:db:90:21:23:54:46:
                    3c:a8:d6:ce:8a:85:0d:6f:1c:5c:5b:90:3a:13:83:
                    60:2b:f2:fa:bc:a0:70:40:db:81:03:af:3e:9d:e6:
                    45:21:ab:97:35:a0:93:b0:2a:b5:92:2d:31:9f:5e:
                    5c:a9:1c:af:02:3f:57:86:80:07:9e:60:40:ee:30:
                    e5:9b:b5:57:27:51:b2:f5:e0:fe:3c:1f:6a:05:6f:
                    46:2b:15:ef:7c:20:8e:e7:68:82:d8:ae:a9:01:18:
                    39:19:49:30:a0:e0:3e:e9:5c:3c:9e:28:74:72:18:
                    e8:bd:21:24:b5:28:a4:50:70:34:24:dc:22:d4:4f:
                    3f:3e:c0:0a:70:c3:00:a4:55:26:ed:dc:34:91:0c:
                    c1:01:94:21:aa:2a:9f:a7:43:06:e7:4f:0d:f1:85:
                    38:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:71:8A:FC:BA:77:CC:DD:05:7D:D3:25:1F:4F:EB:56:D1:E3:5A:16
            X509v3 Authority Key Identifier:
                keyid:10:0B:A0:13:4C:78:5D:84:A9:13:EF:65:B8:5A:8B:49:73:D0:B2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/100BA0134C785D84A913EF65B85A8B4973D0B2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/100BA0134C785D84A913EF65B85A8B4973D0B2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/323830343a363432633a3a2f33322d3332203d3e20323639343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:642c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:33:7f:2c:b7:d5:f0:62:da:61:fb:87:bb:cd:73:d3:6a:b7:
         b6:33:c9:0b:09:bf:84:43:97:66:b9:d0:61:49:c2:05:95:48:
         7c:a2:be:e6:23:9f:f6:f4:1a:7c:54:3e:3e:ad:a5:2c:93:7b:
         75:a8:8c:83:a2:59:ce:f9:2e:21:54:5e:d5:cd:51:e0:20:bc:
         48:49:9b:01:16:e5:ca:37:3a:30:b1:db:7e:74:cf:4d:13:06:
         e7:41:26:02:2f:57:82:60:f7:95:8d:10:16:13:89:38:8e:d7:
         44:30:26:02:4a:7e:9b:91:ce:f2:d5:ed:6f:ed:64:22:91:0b:
         11:d6:02:d1:d5:df:20:57:16:99:25:69:6b:66:6b:62:67:66:
         7b:93:66:70:24:96:58:cc:de:c6:89:14:5c:99:7b:c4:1c:88:
         25:0e:2e:fb:5f:b8:9a:6b:a5:83:f7:9b:14:72:fd:b0:c7:9c:
         f2:56:cd:91:c3:f1:3e:f4:4d:72:3a:f2:ee:a3:b8:11:0c:b0:
         db:3f:e7:6f:6c:d0:8b:88:65:63:77:62:ea:5e:de:d6:18:5b:
         a9:37:47:fb:3a:bd:95:4b:1c:81:5c:fd:e1:d0:7a:73:ed:6e:
         11:1c:f6:c3:2b:a1:83:f8:28:61:fb:d8:ee:c1:c1:1d:09:5d:
         a0:de:77:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org