Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a3a2f33322d3438203d3e20323639353636.roa
File:                     323830343a363638383a3a2f33322d3438203d3e20323639353636.roa (raw, json)
Hash identifier:          U1qpfNWhPpdIrfMpfi4G6lDrQECNp6l8LPwOFQwEnQ8=
Subject key identifier:   13:F4:F0:84:97:D3:54:73:25:19:28:5A:D5:50:CD:B0:6F:0E:83:2E
Certificate issuer:       /CN=D1AFA2F091C9D049DA7C881AF2A692163AAD4643
Certificate serial:       1031B61C629CC6E2F57F4D60490ADEC8E13922ED
Authority key identifier: D1:AF:A2:F0:91:C9:D0:49:DA:7C:88:1A:F2:A6:92:16:3A:AD:46:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1AFA2F091C9D049DA7C881AF2A692163AAD4643.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a3a2f33322d3438203d3e20323639353636.roa
Signing time:             Fri 29 Mar 2024 07:00:01 +0000
ROA not before:           Fri 29 Mar 2024 06:55:01 +0000
ROA not after:            Fri 28 Mar 2025 07:00:01 +0000
asID:                     269566
IP address blocks:        2804:6688::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:31:b6:1c:62:9c:c6:e2:f5:7f:4d:60:49:0a:de:c8:e1:39:22:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1AFA2F091C9D049DA7C881AF2A692163AAD4643
        Validity
            Not Before: Mar 29 06:55:01 2024 GMT
            Not After : Mar 28 07:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:07:03:ac:3f:f6:a9:98:db:00:d1:46:a0:76:
                    7d:33:04:02:9b:b6:45:49:10:f7:1e:9b:aa:a3:43:
                    4e:85:60:f9:6a:9d:c9:a6:9a:70:29:4d:1a:11:50:
                    a2:eb:2c:ec:e1:76:1a:c0:be:19:7c:cb:c7:ed:bc:
                    47:fa:eb:3b:5b:a3:ef:0c:53:a1:2c:c6:54:6c:62:
                    8c:51:60:4f:28:6f:21:5a:a7:dc:05:a2:5e:d3:52:
                    37:3e:71:55:21:da:e2:3d:1b:4b:4b:d4:9b:1d:89:
                    7a:88:ba:1c:c5:2b:f9:48:9b:6f:87:d1:71:8a:66:
                    4f:25:13:2d:a6:04:c9:55:ba:99:b7:bf:51:d5:10:
                    f8:03:ce:ed:df:77:bf:4e:3c:c6:0a:12:c4:e3:4a:
                    ab:5c:6d:0d:e0:14:17:81:34:80:0c:76:17:29:7b:
                    22:8c:94:03:4f:52:d1:b5:a6:51:1c:c5:52:e0:90:
                    d7:45:e6:21:76:e3:56:0c:77:c7:ef:8c:75:3f:9d:
                    2c:e2:ae:df:46:53:e5:04:63:20:a1:57:3c:17:29:
                    fd:01:8f:91:77:0c:ac:f5:16:92:e8:b6:4b:12:f8:
                    79:b2:49:d3:ec:a9:6f:d9:67:f1:9d:5a:27:2f:05:
                    6c:87:c4:1e:80:0e:66:19:c3:57:49:3b:69:ad:2b:
                    e7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F4:F0:84:97:D3:54:73:25:19:28:5A:D5:50:CD:B0:6F:0E:83:2E
            X509v3 Authority Key Identifier:
                keyid:D1:AF:A2:F0:91:C9:D0:49:DA:7C:88:1A:F2:A6:92:16:3A:AD:46:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/D1AFA2F091C9D049DA7C881AF2A692163AAD4643.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1AFA2F091C9D049DA7C881AF2A692163AAD4643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a3a2f33322d3438203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6688::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:36:b0:d8:2c:f0:bb:a5:a7:f4:bb:3a:48:15:05:10:92:cf:
         95:08:d8:8e:a9:2f:77:22:94:92:8e:4c:1e:c4:3c:7c:22:09:
         01:3a:f1:f7:47:aa:5c:83:4f:ac:a0:91:60:92:2f:76:d8:3a:
         6c:a5:77:76:ad:4a:de:cf:3b:c1:64:3f:05:79:58:d3:91:3e:
         9b:ad:da:11:82:ef:31:26:0f:d7:35:29:bc:2e:2d:61:33:5f:
         c7:3f:90:32:be:d1:38:aa:1c:36:9d:76:1c:aa:90:f4:74:c4:
         53:53:56:49:99:da:a6:e5:7d:67:b3:b7:7a:16:2d:3a:68:8e:
         ed:99:b0:24:13:f9:31:c3:2d:bb:97:7e:6d:2c:da:f2:fb:2f:
         d3:90:70:86:3b:f7:0a:ab:15:95:1a:b9:9e:56:be:02:0f:12:
         09:51:e7:ed:3f:e1:d1:44:00:20:b7:87:6a:04:b6:b2:fa:54:
         de:db:0c:14:29:93:76:bf:8c:d3:d8:01:84:60:65:35:3e:3f:
         21:e5:58:fd:18:de:2c:a2:56:71:0b:d7:a7:b7:be:3e:bb:d9:
         f6:30:3a:be:36:e4:6d:f5:2f:73:b4:9a:7b:aa:5a:65:7e:c5:
         7f:5d:23:78:68:a7:77:3b:11:7c:5c:f3:89:e0:89:0a:87:97:
         eb:36:4a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org