Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3eQiFvyfTYAJhqRJXisk9bTH7FNnYAkKooQyv8SPSq1/0/323830343a363435383a3a2f33322d3332203d3e20323639343232.roa
File:                     323830343a363435383a3a2f33322d3332203d3e20323639343232.roa (raw, json)
Hash identifier:          JcEhwPw1KfSRch8G88RsB/fVSRvt+lOy4MyK1UFsIYw=
Subject key identifier:   21:DA:FD:50:9A:64:99:D5:66:1F:08:70:40:9D:50:8C:02:ED:19:FB
Certificate issuer:       /CN=F8CD8F0474D30C184CB2C850D383396854E57CAA
Certificate serial:       49D2DA34B7375774B96AB1358A58E7D259D487A0
Authority key identifier: F8:CD:8F:04:74:D3:0C:18:4C:B2:C8:50:D3:83:39:68:54:E5:7C:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8CD8F0474D30C184CB2C850D383396854E57CAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3eQiFvyfTYAJhqRJXisk9bTH7FNnYAkKooQyv8SPSq1/0/323830343a363435383a3a2f33322d3332203d3e20323639343232.roa
Signing time:             Mon 11 Mar 2024 14:23:52 +0000
ROA not before:           Mon 11 Mar 2024 14:18:52 +0000
ROA not after:            Mon 10 Mar 2025 14:23:52 +0000
asID:                     269422
IP address blocks:        2804:6458::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d2:da:34:b7:37:57:74:b9:6a:b1:35:8a:58:e7:d2:59:d4:87:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8CD8F0474D30C184CB2C850D383396854E57CAA
        Validity
            Not Before: Mar 11 14:18:52 2024 GMT
            Not After : Mar 10 14:23:52 2025 GMT
        Subject: CN=21DAFD509A6499D5661F0870409D508C02ED19FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:85:21:08:e8:c1:ee:62:a6:77:b2:5b:38:30:
                    e4:31:ee:c3:24:68:75:ba:3d:6f:e9:18:f2:61:16:
                    3b:ff:be:4b:23:20:21:0f:c9:61:e7:d3:88:17:32:
                    35:b0:00:e6:10:87:5a:21:27:6c:1f:66:b5:06:0c:
                    be:5a:30:21:bb:63:02:15:82:21:47:3e:99:75:e4:
                    17:59:9c:fe:62:b8:d4:2f:ec:89:f3:1e:b4:77:1a:
                    97:2f:41:66:3b:9b:bb:17:0c:8b:54:69:58:c8:3c:
                    95:f3:9a:cc:ef:1d:77:16:c8:c0:59:63:1b:b7:59:
                    27:ce:f2:f1:66:94:1f:07:3e:16:2e:48:30:98:f0:
                    e8:27:92:c9:3b:41:fa:89:8c:bc:67:33:09:68:64:
                    ee:f5:e2:68:b5:c4:dc:f7:9d:dd:1d:f4:6f:1a:36:
                    98:b8:47:77:81:60:fe:5f:07:d5:5a:5c:29:4d:92:
                    4d:8e:7e:42:35:dd:17:73:4c:48:0f:89:d3:d1:e7:
                    01:ff:44:36:ce:e5:7d:b5:e8:c8:b6:28:87:0d:49:
                    26:c5:bd:4a:71:a7:e8:55:1c:63:94:03:96:b1:c0:
                    2d:34:18:e9:12:e5:6e:49:e3:e2:04:55:8a:81:57:
                    4d:14:e7:01:ea:da:b4:47:74:b9:4a:dd:25:0f:b4:
                    68:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:DA:FD:50:9A:64:99:D5:66:1F:08:70:40:9D:50:8C:02:ED:19:FB
            X509v3 Authority Key Identifier:
                keyid:F8:CD:8F:04:74:D3:0C:18:4C:B2:C8:50:D3:83:39:68:54:E5:7C:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3eQiFvyfTYAJhqRJXisk9bTH7FNnYAkKooQyv8SPSq1/0/F8CD8F0474D30C184CB2C850D383396854E57CAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8CD8F0474D30C184CB2C850D383396854E57CAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3eQiFvyfTYAJhqRJXisk9bTH7FNnYAkKooQyv8SPSq1/0/323830343a363435383a3a2f33322d3332203d3e20323639343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6458::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:b8:27:30:b1:87:8e:c5:93:08:fe:9e:21:84:b8:b7:d2:ef:
         d6:d6:95:b0:22:29:52:5b:cc:e6:3b:38:b4:65:53:84:51:f3:
         6d:8f:ff:dc:35:8a:98:16:32:62:96:37:88:8c:dc:6e:92:b1:
         d1:b5:4a:05:58:b6:3d:d0:c1:ba:28:78:6e:fc:37:7b:2a:fd:
         63:d7:a8:43:d2:3a:7a:fe:16:82:63:9c:3c:fd:b8:e8:fe:e3:
         c3:76:10:a1:c4:c2:60:7c:68:7f:79:9e:8b:b0:86:4c:02:52:
         e6:9c:f2:82:87:4f:d3:72:19:7e:94:49:cc:c3:59:17:80:80:
         6f:ef:86:5d:59:7b:86:ee:50:71:bb:fd:3a:99:2f:10:6f:36:
         02:9b:83:ef:38:6a:ac:cc:9b:56:ba:31:50:2d:1b:ce:21:97:
         bd:38:60:3c:3d:e0:12:92:2a:f4:06:df:c0:4e:67:01:31:9d:
         91:f8:54:d2:d4:d1:c7:71:92:f7:e7:e1:5e:90:83:39:d7:e0:
         2b:e7:e9:00:4c:fa:07:bb:42:0b:53:fc:3a:ba:e5:ef:f2:06:
         bc:ee:8e:f2:c6:4d:40:39:a5:15:d5:06:95:9d:67:ed:32:f1:
         bb:20:10:32:77:9a:83:a7:57:61:19:fb:55:86:66:22:d1:a7:
         23:da:ac:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:36 2024 by rpki-client on console-fra.rpki-client.org