Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/1/323830343a353439343a3a2f33322d313238203d3e20323638363539.roa
File:                     323830343a353439343a3a2f33322d313238203d3e20323638363539.roa (raw, json)
Hash identifier:          bN9GTXGn4Oc+39pEDB19BawxZrLgTXXMK64GZwhgdDM=
Subject key identifier:   C1:69:B3:3A:1D:BE:14:0A:7B:6D:01:08:94:17:7E:33:82:F0:70:D6
Certificate issuer:       /CN=C4DAA6BCF09F41036B316EE76161BD3834E13C9E
Certificate serial:       7077A9610E9ECB09A094AEBC66EA5290C24B77FF
Authority key identifier: C4:DA:A6:BC:F0:9F:41:03:6B:31:6E:E7:61:61:BD:38:34:E1:3C:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4DAA6BCF09F41036B316EE76161BD3834E13C9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/1/323830343a353439343a3a2f33322d313238203d3e20323638363539.roa
Signing time:             Thu 04 Apr 2024 15:05:23 +0000
ROA not before:           Thu 04 Apr 2024 15:00:23 +0000
ROA not after:            Thu 03 Apr 2025 15:05:23 +0000
asID:                     268659
IP address blocks:        2804:5494::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:77:a9:61:0e:9e:cb:09:a0:94:ae:bc:66:ea:52:90:c2:4b:77:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4DAA6BCF09F41036B316EE76161BD3834E13C9E
        Validity
            Not Before: Apr  4 15:00:23 2024 GMT
            Not After : Apr  3 15:05:23 2025 GMT
        Subject: CN=C169B33A1DBE140A7B6D010894177E3382F070D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:09:d8:41:37:5d:9a:82:ac:61:73:82:e4:f5:
                    b0:4e:d3:cb:1c:9e:a8:ae:87:59:75:a0:8b:6d:de:
                    b1:58:fe:ff:98:96:22:c4:37:b1:2b:2f:58:18:3a:
                    f9:15:e7:49:30:88:ed:99:ba:73:91:59:d9:e7:8c:
                    53:d2:f3:f4:33:44:33:c9:0d:50:99:25:64:49:43:
                    0d:f9:6a:e2:49:b7:e6:f9:ad:09:a0:b1:a3:f0:2a:
                    48:70:b6:66:7f:47:cf:6d:69:08:70:6b:85:75:d1:
                    24:a7:54:8e:60:d1:54:c5:46:e9:df:e9:38:f4:7e:
                    cd:0b:c1:0e:a8:ac:a4:a1:71:06:49:2a:fb:7b:19:
                    9c:79:3a:16:e3:c6:35:fd:68:1d:9e:9e:f3:ee:35:
                    c1:c2:aa:b6:04:f0:a3:a5:e5:96:8b:4c:25:a8:4c:
                    ff:b3:ce:f9:1e:e8:3e:a4:c1:cc:c0:5d:5b:ec:ce:
                    8a:88:19:fa:af:f7:43:c3:ba:6b:d1:40:a7:d2:2a:
                    37:b5:fc:b4:04:69:9a:74:e6:30:fe:44:80:16:d7:
                    36:b7:d2:81:4b:dc:b7:74:62:8f:24:31:ef:c3:ec:
                    77:cd:63:eb:af:1c:b3:7c:f6:81:93:9f:1d:fc:4e:
                    3b:a5:4c:c3:3c:f1:72:f2:45:d4:a1:f3:d9:82:60:
                    21:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:69:B3:3A:1D:BE:14:0A:7B:6D:01:08:94:17:7E:33:82:F0:70:D6
            X509v3 Authority Key Identifier:
                keyid:C4:DA:A6:BC:F0:9F:41:03:6B:31:6E:E7:61:61:BD:38:34:E1:3C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/1/C4DAA6BCF09F41036B316EE76161BD3834E13C9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4DAA6BCF09F41036B316EE76161BD3834E13C9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/1/323830343a353439343a3a2f33322d313238203d3e20323638363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5494::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:e5:c5:19:75:cd:63:58:6d:9f:aa:7b:10:b4:a8:de:38:b9:
         80:45:d1:5d:eb:23:60:8b:75:55:aa:36:62:76:17:8c:38:37:
         c1:8e:ab:04:98:e7:23:05:62:fc:9f:36:24:da:2f:53:c3:e2:
         a0:f9:77:18:e9:cd:1e:31:de:b4:85:97:cd:fe:a1:af:f8:f0:
         45:60:ea:e7:30:e4:6a:5e:fb:57:25:f0:85:6c:57:26:bc:d8:
         15:fe:2e:b1:d7:ea:8e:f3:3b:70:a0:7d:60:1c:a4:79:8d:cb:
         4d:e2:37:75:6a:2e:75:25:45:60:45:2f:2f:95:21:bc:ab:67:
         ef:59:97:73:36:75:d0:1c:7e:b2:f0:38:f2:9f:77:8d:7a:b9:
         f1:ca:f6:7f:00:70:d8:67:45:2a:6f:55:1c:03:06:59:4c:9c:
         f4:94:75:8d:7a:af:a1:f9:69:35:f3:06:4c:b3:7d:1c:7c:20:
         44:e3:43:9a:e2:9c:28:13:4e:7d:99:f8:cb:d5:90:45:ec:cb:
         e9:6e:20:ff:08:62:a0:0f:ab:5b:6e:25:ed:6f:b9:18:79:c1:
         c0:90:19:26:1f:14:3e:22:2f:2b:eb:2f:d2:69:fe:b6:f1:50:
         39:bd:ec:c3:c7:23:d5:7f:41:b7:85:64:50:dd:f6:04:7f:22:
         22:ed:7b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org