Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/323830343a376532633a3a2f33322d3332203d3e20323731363037.roa
File:                     323830343a376532633a3a2f33322d3332203d3e20323731363037.roa (raw, json)
Hash identifier:          SBvjf6vAOHdOU9aptJyEu02MF6KPFBM4UfLWBy+G924=
Subject key identifier:   6E:D9:4E:13:C5:E1:13:F9:69:04:A7:6D:34:A0:48:2D:D3:2A:B0:E1
Certificate issuer:       /CN=0FBAAE573CA8C95BA8E1A3EF364C2A021A4FD24D
Certificate serial:       22DA3A63013BBCAC123AC0416E9909EFF926AB85
Authority key identifier: 0F:BA:AE:57:3C:A8:C9:5B:A8:E1:A3:EF:36:4C:2A:02:1A:4F:D2:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FBAAE573CA8C95BA8E1A3EF364C2A021A4FD24D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/323830343a376532633a3a2f33322d3332203d3e20323731363037.roa
Signing time:             Mon 18 Dec 2023 19:31:21 +0000
ROA not before:           Mon 18 Dec 2023 19:26:21 +0000
ROA not after:            Mon 16 Dec 2024 19:31:21 +0000
asID:                     271607
IP address blocks:        2804:7e2c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:da:3a:63:01:3b:bc:ac:12:3a:c0:41:6e:99:09:ef:f9:26:ab:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FBAAE573CA8C95BA8E1A3EF364C2A021A4FD24D
        Validity
            Not Before: Dec 18 19:26:21 2023 GMT
            Not After : Dec 16 19:31:21 2024 GMT
        Subject: CN=6ED94E13C5E113F96904A76D34A0482DD32AB0E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c5:1c:08:45:cd:d3:5a:49:94:87:8f:85:7c:
                    22:04:30:1e:c2:3c:9f:6f:fb:7b:12:55:0e:29:4a:
                    2a:22:80:7c:a1:0c:77:23:00:98:69:af:18:86:ca:
                    aa:2b:57:e7:7e:85:29:4d:e5:e9:68:36:96:12:36:
                    f7:aa:b7:be:c3:22:96:c9:85:7d:6a:c0:17:d4:7d:
                    7c:96:b4:ad:63:ee:ea:ef:6b:e2:37:11:76:67:30:
                    d5:eb:2d:70:21:e1:34:cf:d6:7a:c0:ea:f7:34:8f:
                    c7:ce:91:27:00:d2:84:29:24:43:d5:af:3d:25:66:
                    42:21:04:da:0e:2c:7d:03:f2:38:d5:e3:ed:dc:03:
                    34:d7:86:c7:c1:70:13:79:ec:ae:2c:b9:89:bf:37:
                    55:c5:0c:26:c5:01:34:95:1b:dd:b1:19:24:6b:41:
                    11:66:ec:b2:cb:14:29:95:ea:bb:c9:81:82:8a:8d:
                    aa:48:9b:dc:a7:8f:bf:70:87:79:0f:29:9e:59:68:
                    97:c6:db:28:b3:e6:b4:08:17:58:d9:c5:3f:a6:2c:
                    8e:20:55:50:da:0c:53:fb:eb:e6:37:81:f1:94:f1:
                    9a:ff:3f:06:3e:f3:6d:16:40:c4:01:90:28:30:43:
                    f2:a7:6e:ae:d1:fd:bb:d3:62:01:6c:e2:b8:44:f0:
                    bd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D9:4E:13:C5:E1:13:F9:69:04:A7:6D:34:A0:48:2D:D3:2A:B0:E1
            X509v3 Authority Key Identifier:
                keyid:0F:BA:AE:57:3C:A8:C9:5B:A8:E1:A3:EF:36:4C:2A:02:1A:4F:D2:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/0FBAAE573CA8C95BA8E1A3EF364C2A021A4FD24D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FBAAE573CA8C95BA8E1A3EF364C2A021A4FD24D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/323830343a376532633a3a2f33322d3332203d3e20323731363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         c5:02:ec:ed:3f:d5:cd:91:ae:1a:bd:e0:2b:f4:dc:46:ef:f9:
         70:fb:f6:ab:70:2e:f3:44:26:9b:76:ce:82:02:a1:82:39:50:
         a7:fe:3f:d1:e7:d8:c9:00:4c:d1:0f:48:8e:85:8c:23:58:c5:
         3d:ca:ed:48:79:35:a3:82:01:b0:16:74:3b:7f:ba:f6:54:37:
         e6:cd:d7:5e:22:25:0e:8d:ab:38:07:e0:5d:56:d5:90:c3:96:
         e2:07:86:13:0d:9d:ed:3c:99:7a:7b:4c:e8:da:60:82:9d:84:
         01:d9:12:a8:c6:fd:c8:3a:c3:5a:54:0e:f2:8c:7c:9f:b3:7c:
         62:d4:38:fa:47:c4:7f:72:94:be:3e:72:7f:43:e7:2e:79:d5:
         7f:cc:1f:e1:f4:e5:c6:7d:30:9a:27:8a:24:63:42:42:5f:70:
         ab:9a:14:d8:ab:d4:24:9d:35:01:1d:b9:28:fb:ce:89:e5:68:
         48:c1:89:32:37:3f:ea:71:6e:15:b0:be:a4:82:ce:a2:11:3c:
         64:1a:85:6c:60:05:7e:82:2b:e9:b8:8d:f0:ed:66:40:77:d9:
         a5:be:96:36:37:6d:d1:b2:d3:21:d3:cd:5f:4d:fb:a6:24:74:
         15:ab:0a:2d:65:cd:4b:fe:cc:d6:e4:a8:ef:23:1a:14:ca:82:
         33:7c:9a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org