Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/323830343a343361303a613030303a3a2f33352d3335203d3e20323637353830.roa
File:                     323830343a343361303a613030303a3a2f33352d3335203d3e20323637353830.roa (raw, json)
Hash identifier:          ZDzSH7XV/7Xr2Jd++xYqR/EU2WDxNv5W5KgAVMmtpFg=
Subject key identifier:   D5:6D:7D:ED:03:4A:AA:74:98:24:C2:7E:3C:33:94:90:57:A2:D4:06
Certificate issuer:       /CN=F3DF71C27336F4C869A8498C23F1734EEE31AA15
Certificate serial:       5293A8F04C292D5BB3CC88A73E186606EFEA302B
Authority key identifier: F3:DF:71:C2:73:36:F4:C8:69:A8:49:8C:23:F1:73:4E:EE:31:AA:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/323830343a343361303a613030303a3a2f33352d3335203d3e20323637353830.roa
Signing time:             Tue 05 Mar 2024 23:16:51 +0000
ROA not before:           Tue 05 Mar 2024 23:11:51 +0000
ROA not after:            Tue 04 Mar 2025 23:16:51 +0000
asID:                     267580
IP address blocks:        2804:43a0:a000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:93:a8:f0:4c:29:2d:5b:b3:cc:88:a7:3e:18:66:06:ef:ea:30:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DF71C27336F4C869A8498C23F1734EEE31AA15
        Validity
            Not Before: Mar  5 23:11:51 2024 GMT
            Not After : Mar  4 23:16:51 2025 GMT
        Subject: CN=D56D7DED034AAA749824C27E3C33949057A2D406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b6:40:84:d2:ce:b3:df:e8:bd:eb:1e:be:36:
                    e2:44:c4:8c:e6:26:53:a0:90:32:ed:b7:17:b6:2b:
                    e4:d0:7b:98:dd:71:5f:a3:47:54:ae:82:de:77:5a:
                    6b:08:12:3b:a5:0e:e6:d7:51:5c:88:13:79:2e:dd:
                    81:a1:34:f8:42:4a:80:f3:d5:05:ab:c7:31:53:d6:
                    58:d5:1f:47:21:8d:1e:db:32:a4:c9:61:53:63:06:
                    fd:54:a7:64:3c:f0:14:76:3d:c3:d2:e3:c6:dc:77:
                    fe:75:97:b9:e4:db:d1:e8:d0:ab:5a:f8:99:66:0f:
                    34:e6:77:50:52:a1:35:62:10:22:62:22:4d:c3:db:
                    a1:4e:77:61:b3:33:41:a1:05:5f:be:74:12:c9:02:
                    52:77:97:6e:0b:df:82:62:25:ea:d7:78:36:8b:95:
                    91:cc:2d:52:2d:7b:dd:03:2c:e0:06:42:47:4a:38:
                    7f:31:0e:78:e8:bc:78:2b:8a:fd:17:63:8c:f2:8d:
                    c2:6f:4a:1c:d3:12:52:cb:98:94:33:14:46:4e:78:
                    8d:a7:9b:54:9b:31:63:2f:8c:aa:d0:7e:a6:06:9f:
                    c0:9a:1f:7f:11:41:aa:c8:d1:12:34:ed:31:13:7d:
                    fa:c6:73:ec:f4:22:e4:fa:87:c1:fa:33:04:03:e7:
                    96:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:6D:7D:ED:03:4A:AA:74:98:24:C2:7E:3C:33:94:90:57:A2:D4:06
            X509v3 Authority Key Identifier:
                keyid:F3:DF:71:C2:73:36:F4:C8:69:A8:49:8C:23:F1:73:4E:EE:31:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/323830343a343361303a613030303a3a2f33352d3335203d3e20323637353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43a0:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         47:96:47:c9:59:3a:cf:2c:12:02:55:ee:1f:fd:d5:1b:ad:3c:
         8f:8b:d5:81:13:a7:5a:45:38:ef:4c:b1:3a:e6:50:af:72:cb:
         00:4d:98:4f:48:2d:db:39:f7:fe:8a:e4:98:c3:cd:4b:7b:e1:
         0e:d8:d4:be:b9:50:ee:0b:30:16:9c:ce:82:2b:3b:bd:50:71:
         cf:65:bd:e3:7b:72:84:52:d8:ba:8a:1a:2b:39:bb:64:1b:e6:
         20:e2:c2:69:b5:0b:af:4d:46:1c:44:ee:3c:77:50:2f:75:f7:
         db:1f:fd:a4:df:b7:b9:12:92:cd:9f:fb:94:57:1e:4f:09:5b:
         f5:71:0e:05:f3:75:a9:a3:2e:9a:03:3d:34:bb:9f:bd:4a:74:
         67:b0:54:81:42:c1:7e:55:d3:f8:eb:a1:e9:e4:17:b6:7f:c1:
         a4:94:52:07:ad:34:62:49:54:c7:8f:2d:59:59:4c:e4:b7:32:
         52:c7:e8:0e:e9:49:5f:e2:0f:f6:c8:94:5b:af:ed:41:49:9d:
         81:a9:0e:cb:61:9b:76:70:f7:a2:8b:f2:5e:41:55:4f:1a:d0:
         a0:a9:7e:cf:87:f3:b5:82:5b:75:95:7b:1f:41:4b:33:a3:34:
         ad:c4:52:30:e6:85:50:cc:d9:f7:5b:75:88:85:7e:77:ca:1f:
         7a:75:62:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:42 2024 by rpki-client on console-ams.rpki-client.org