Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/323830343a316330343a376630303a3a2f34302d3430203d3e203631363333.roa
File:                     323830343a316330343a376630303a3a2f34302d3430203d3e203631363333.roa (raw, json)
Hash identifier:          5U++2KpsKAEAsa1UsIIt/vAJpjJZiR2pQ8K1qmfRQXM=
Subject key identifier:   2F:86:8B:B0:8B:4A:5C:30:CF:3D:9D:9B:DB:8F:3D:31:D8:6C:63:08
Certificate issuer:       /CN=CDE7AD619ADE061F54FC38424291FA04B034E709
Certificate serial:       4BA6F92A669937D53AEA7C7C8256DBAB0C88D42C
Authority key identifier: CD:E7:AD:61:9A:DE:06:1F:54:FC:38:42:42:91:FA:04:B0:34:E7:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDE7AD619ADE061F54FC38424291FA04B034E709.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/323830343a316330343a376630303a3a2f34302d3430203d3e203631363333.roa
Signing time:             Thu 15 Feb 2024 13:46:53 +0000
ROA not before:           Thu 15 Feb 2024 13:41:53 +0000
ROA not after:            Thu 13 Feb 2025 13:46:53 +0000
asID:                     61633
IP address blocks:        2804:1c04:7f00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a6:f9:2a:66:99:37:d5:3a:ea:7c:7c:82:56:db:ab:0c:88:d4:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDE7AD619ADE061F54FC38424291FA04B034E709
        Validity
            Not Before: Feb 15 13:41:53 2024 GMT
            Not After : Feb 13 13:46:53 2025 GMT
        Subject: CN=2F868BB08B4A5C30CF3D9D9BDB8F3D31D86C6308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5c:f1:26:d3:aa:f0:f9:96:37:17:d2:97:4f:
                    37:28:1b:35:97:01:08:0c:09:41:2e:e6:61:92:94:
                    06:86:da:04:13:1a:4f:78:59:a4:14:45:91:b4:ae:
                    de:b9:34:fa:cd:69:d2:c4:d4:53:d9:96:f1:c4:b1:
                    99:ed:37:f9:af:2a:22:d5:e4:62:4c:2b:70:6c:d8:
                    f7:19:5f:c5:a3:23:79:24:7b:4a:e1:9e:2f:a2:e9:
                    19:97:95:d5:fa:93:99:a1:70:dd:98:1f:01:cf:8a:
                    a6:53:3c:fc:e9:0d:4e:d6:1e:d5:83:d0:5a:07:47:
                    cd:5f:34:c8:b6:94:8a:33:21:b7:84:11:48:80:2c:
                    47:d6:c0:42:e2:2c:12:b4:86:ed:bd:c7:f0:e9:3b:
                    d4:c4:5b:3a:68:e9:89:c0:22:f7:67:59:9f:c8:04:
                    56:a0:13:de:87:76:2e:1f:af:b6:e5:9c:10:ab:7e:
                    61:9b:1f:af:91:b4:0c:53:be:b5:4f:3c:53:b3:37:
                    58:5d:b9:c4:43:be:13:3a:7e:b5:b7:0e:ba:d0:9b:
                    34:49:1f:51:83:49:a2:54:5a:ab:e9:cd:99:05:26:
                    56:89:30:34:4b:4b:4e:8b:dd:be:b8:44:85:6e:c0:
                    88:e7:b5:74:f4:c8:7b:1e:76:01:b2:14:7e:67:42:
                    76:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:86:8B:B0:8B:4A:5C:30:CF:3D:9D:9B:DB:8F:3D:31:D8:6C:63:08
            X509v3 Authority Key Identifier:
                keyid:CD:E7:AD:61:9A:DE:06:1F:54:FC:38:42:42:91:FA:04:B0:34:E7:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/CDE7AD619ADE061F54FC38424291FA04B034E709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDE7AD619ADE061F54FC38424291FA04B034E709.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/323830343a316330343a376630303a3a2f34302d3430203d3e203631363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c04:7f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a3:8d:91:ca:f3:3c:de:3e:5d:b0:24:e3:ac:a2:93:f7:e5:2c:
         79:3e:46:bc:e9:fd:d0:7a:b4:5e:df:75:80:6b:de:eb:16:26:
         4c:9e:0d:33:ac:d8:97:b6:13:f3:15:30:7b:0f:4f:60:12:0f:
         e2:4b:d8:7b:c6:b5:9a:ab:97:2f:37:fe:79:1f:13:2c:f6:ec:
         28:51:c2:d9:15:e7:94:31:73:4e:aa:b6:60:4f:ad:1a:1a:f2:
         8c:7e:29:4a:c2:24:04:7a:b3:08:97:99:34:fe:38:18:c3:de:
         56:f3:0a:d0:a1:1c:b5:1e:a4:2e:3d:45:45:d7:c8:de:5b:ed:
         20:6f:8c:b1:bc:03:ae:0c:60:d5:b2:aa:56:0f:1d:ff:67:9a:
         9f:aa:9e:4c:12:27:d6:62:ae:6b:7a:96:56:6a:06:8a:17:6a:
         85:45:e3:74:3d:1d:80:a4:f5:23:99:18:b6:eb:7a:ee:27:3a:
         3b:b4:50:d8:df:e3:17:1e:fa:03:d4:e8:a9:9d:3f:29:47:7e:
         a6:20:b0:27:32:4f:e7:77:5c:0d:f5:03:cc:6d:fa:fc:1a:9f:
         85:0e:5a:b3:83:f3:90:eb:19:6a:5a:25:15:62:a6:95:b9:eb:
         31:cc:d6:89:7c:1f:ad:52:13:79:df:fc:c9:47:00:45:60:07:
         41:f0:7f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org