Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/323830343a323133633a32323a3a2f34372d3437203d3e20323634353434.roa
File:                     323830343a323133633a32323a3a2f34372d3437203d3e20323634353434.roa (raw, json)
Hash identifier:          Z5Z+1BKbtFWcPgVtUCRH6rjcrsmlzbyRjZPZ+i21fso=
Subject key identifier:   40:F4:37:6F:F3:96:E4:7D:38:06:6A:9C:D5:07:3E:D5:CD:97:E4:96
Certificate issuer:       /CN=8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2
Certificate serial:       6C9B2FFBF5B87746984DFA7660B4E3CA89590306
Authority key identifier: 8F:BA:83:61:34:31:13:7A:FC:0E:EC:6F:AC:92:B6:DD:0A:F7:48:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/323830343a323133633a32323a3a2f34372d3437203d3e20323634353434.roa
Signing time:             Tue 18 Apr 2023 23:42:03 +0000
ROA not before:           Tue 18 Apr 2023 23:37:03 +0000
ROA not after:            Tue 16 Apr 2024 23:42:03 +0000
asID:                     264544
IP address blocks:        2804:213c:22::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:9b:2f:fb:f5:b8:77:46:98:4d:fa:76:60:b4:e3:ca:89:59:03:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2
        Validity
            Not Before: Apr 18 23:37:03 2023 GMT
            Not After : Apr 16 23:42:03 2024 GMT
        Subject: CN=40F4376FF396E47D38066A9CD5073ED5CD97E496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:35:b0:ef:52:27:0f:6f:33:13:0e:fd:84:46:
                    1f:b0:5a:7b:b5:45:d0:68:1e:c9:f7:f8:20:43:42:
                    47:55:81:e2:68:5c:73:d3:76:74:ff:18:fc:30:4c:
                    e8:10:38:c9:bb:db:c6:7b:0e:45:61:fc:e9:48:3c:
                    1f:6d:3f:60:ce:f5:01:2c:e2:4c:ac:df:15:96:26:
                    68:ac:cf:76:b3:f5:89:09:ba:21:72:67:76:ce:97:
                    f4:bc:9f:72:8f:e2:08:ee:e8:69:7e:1e:5a:66:e2:
                    21:88:fc:94:de:63:fe:d1:41:bc:94:67:00:b2:ce:
                    2e:99:0b:97:2a:81:ad:31:86:57:1d:7e:2a:23:81:
                    b9:07:ff:d1:24:5e:29:23:eb:57:96:b6:fd:a6:8d:
                    c1:1f:b1:13:0a:0e:04:0e:da:62:ff:f7:38:28:b7:
                    3a:99:56:bf:93:bb:97:50:d3:c5:1e:3c:63:19:14:
                    f4:82:a3:68:a9:35:92:e4:27:f7:d2:9c:0e:c0:35:
                    07:4f:e6:c6:1d:8f:95:60:77:18:01:04:9d:fe:07:
                    e5:91:5f:de:0a:d0:0a:ac:63:7f:17:fb:f2:66:5b:
                    43:a4:7a:5d:1d:62:af:d0:b5:7c:8f:81:29:e0:13:
                    e2:fb:88:97:bf:ac:3c:2a:7e:b3:66:43:8e:ec:b7:
                    a3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F4:37:6F:F3:96:E4:7D:38:06:6A:9C:D5:07:3E:D5:CD:97:E4:96
            X509v3 Authority Key Identifier:
                keyid:8F:BA:83:61:34:31:13:7A:FC:0E:EC:6F:AC:92:B6:DD:0A:F7:48:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/323830343a323133633a32323a3a2f34372d3437203d3e20323634353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:213c:22::/47

    Signature Algorithm: sha256WithRSAEncryption
         80:bd:bd:e5:c5:63:9f:49:f2:3c:92:12:6b:25:9c:c4:92:31:
         38:14:2d:d0:17:39:ea:69:2f:77:c2:67:88:3d:94:95:d4:9c:
         6a:cc:b5:85:e1:0a:ea:0e:ba:6a:13:65:10:92:58:1a:ec:e8:
         4f:ef:b1:a3:af:27:c7:92:81:4a:1c:52:7b:fd:6a:33:79:33:
         f9:96:2c:b5:48:a4:a8:99:c0:2f:e8:66:64:e7:1e:ae:4e:6d:
         c8:51:f7:19:58:47:44:93:f4:cf:b9:50:a0:41:6d:e7:68:03:
         f5:40:00:83:1a:ee:b8:04:53:aa:fc:a9:6b:31:84:42:23:fa:
         0c:88:db:3c:50:85:28:d2:61:a8:b3:d5:a0:42:a9:5a:7c:64:
         06:b9:70:eb:39:a9:74:a4:96:d2:45:a7:38:3e:3d:1f:6a:6c:
         69:9e:15:a1:f2:73:f4:16:3e:be:97:49:4d:a2:4e:dc:d6:91:
         18:e9:57:de:86:67:19:d7:b1:b2:50:64:18:84:b2:06:f0:b9:
         89:12:ea:64:fd:d5:b3:15:dd:34:8a:b8:fe:e4:e1:3b:e9:3f:
         3c:1b:ff:4a:97:73:ef:4f:78:16:85:35:90:b2:0d:08:e6:28:
         94:ad:8b:d1:f8:24:b2:23:cb:4d:a1:7d:58:a2:4b:65:ce:53:
         75:a0:e1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org