Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/323830343a343361303a343030303a3a2f33352d3335203d3e20323637353830.roa
File:                     323830343a343361303a343030303a3a2f33352d3335203d3e20323637353830.roa (raw, json)
Hash identifier:          t31ET/zW6FTtlf1stNwBgMEIucHoDYoY3JioR3oiZcc=
Subject key identifier:   A1:E5:E0:08:5B:B5:A1:22:79:CF:2C:B9:97:2D:DF:E9:44:34:BC:19
Certificate issuer:       /CN=F3DF71C27336F4C869A8498C23F1734EEE31AA15
Certificate serial:       48C2BDE5804633A6A3881DD95F21349FC86A07ED
Authority key identifier: F3:DF:71:C2:73:36:F4:C8:69:A8:49:8C:23:F1:73:4E:EE:31:AA:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/323830343a343361303a343030303a3a2f33352d3335203d3e20323637353830.roa
Signing time:             Tue 05 Mar 2024 23:16:38 +0000
ROA not before:           Tue 05 Mar 2024 23:11:38 +0000
ROA not after:            Tue 04 Mar 2025 23:16:38 +0000
asID:                     267580
IP address blocks:        2804:43a0:4000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c2:bd:e5:80:46:33:a6:a3:88:1d:d9:5f:21:34:9f:c8:6a:07:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DF71C27336F4C869A8498C23F1734EEE31AA15
        Validity
            Not Before: Mar  5 23:11:38 2024 GMT
            Not After : Mar  4 23:16:38 2025 GMT
        Subject: CN=A1E5E0085BB5A12279CF2CB9972DDFE94434BC19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a3:ba:bc:99:10:18:a5:63:a7:6c:80:82:66:
                    eb:dd:78:23:89:21:9f:d9:cf:05:f6:6b:99:96:13:
                    57:08:1b:ba:af:ca:b4:74:13:ad:a4:b7:e5:a3:d1:
                    73:8b:32:ff:85:f1:89:3c:66:40:5a:d6:09:9f:7f:
                    51:80:85:67:f6:d3:3a:29:44:37:77:98:49:df:33:
                    c7:1c:07:dc:f7:a7:83:84:f7:b5:e1:ef:b7:e7:5e:
                    82:18:da:45:ec:aa:b2:67:d1:c9:14:05:ac:7e:f6:
                    7d:8e:62:92:09:ea:cd:b5:00:97:fd:75:22:61:31:
                    17:ac:71:10:4f:84:a4:09:99:53:4c:e1:42:e1:7d:
                    e7:76:ee:fe:82:31:61:3b:d5:fe:3d:2a:6e:38:8d:
                    3b:59:71:9c:93:18:0f:27:fb:bf:70:12:a3:ac:1d:
                    a4:ef:f9:82:86:e1:76:52:f3:e0:83:41:c8:32:f4:
                    5b:98:c8:97:6d:79:62:67:70:9f:27:a2:cf:64:89:
                    10:f6:13:d5:6b:32:08:2c:30:83:ad:88:b1:86:cb:
                    e5:10:33:ce:3b:33:90:e0:77:c7:b3:58:a9:3d:d3:
                    34:60:de:11:47:4c:e5:27:48:e4:51:9d:42:6a:10:
                    a7:e6:31:37:7d:24:fa:2e:25:26:dc:8e:b1:7c:02:
                    57:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E5:E0:08:5B:B5:A1:22:79:CF:2C:B9:97:2D:DF:E9:44:34:BC:19
            X509v3 Authority Key Identifier:
                keyid:F3:DF:71:C2:73:36:F4:C8:69:A8:49:8C:23:F1:73:4E:EE:31:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/323830343a343361303a343030303a3a2f33352d3335203d3e20323637353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43a0:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         5d:ab:b2:90:69:83:5b:f3:6a:b8:01:82:b0:5c:cc:e5:9f:27:
         67:66:c4:ec:e4:3e:8a:88:de:b5:98:48:e9:c9:47:b4:41:2c:
         1b:b5:14:44:9e:65:dd:30:21:8c:96:b1:81:53:d9:ed:95:0c:
         eb:7a:ae:be:af:93:d7:61:ce:d4:cf:0e:a7:93:7a:e5:ae:bb:
         f8:c8:e1:de:b4:4f:a4:6f:c4:3f:cf:f9:55:58:eb:5e:f1:5e:
         9e:5e:84:78:b8:d2:d5:fb:c0:e8:a0:27:78:2f:d9:73:5a:75:
         03:c1:bd:10:b1:cb:f4:e2:0e:c0:33:87:36:67:54:6b:a7:ce:
         99:43:e8:a6:37:1f:08:9f:64:ce:93:99:1e:28:3c:b8:b0:97:
         ca:80:9d:8f:28:4a:56:a9:33:bd:1f:10:25:50:00:6a:59:66:
         1b:30:3d:ee:b4:af:b3:36:02:7c:8e:c4:23:ec:72:f9:44:55:
         c0:96:b8:bd:c4:b3:c7:4d:d4:ea:24:9b:3d:41:82:cc:09:29:
         02:ae:49:67:77:1d:05:fc:ae:50:bf:d4:f7:58:c0:dd:c2:b8:
         81:d1:b7:2d:40:91:88:22:61:82:7a:76:8c:56:fa:73:ae:9e:
         31:2a:92:43:76:39:48:84:39:f9:32:69:48:b7:52:b1:d0:36:
         ea:d5:7f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org