Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/323830343a373230383a3a2f33322d3332203d3e20323730383238.roa
File:                     323830343a373230383a3a2f33322d3332203d3e20323730383238.roa (raw, json)
Hash identifier:          QL1K1GIw+t28zwQLVPYKcvTsZNZG2zRNBw9iJeicoV0=
Subject key identifier:   D3:84:D3:39:26:0E:1E:B0:91:0F:C4:A9:21:17:1F:45:4B:C0:14:C6
Certificate issuer:       /CN=11A59D7FC58DD93FD839E36B666F0A5295F98E5F
Certificate serial:       171A1559FEBD4DF2E02AE24FC879AD66AD179813
Authority key identifier: 11:A5:9D:7F:C5:8D:D9:3F:D8:39:E3:6B:66:6F:0A:52:95:F9:8E:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11A59D7FC58DD93FD839E36B666F0A5295F98E5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/323830343a373230383a3a2f33322d3332203d3e20323730383238.roa
Signing time:             Wed 03 Apr 2024 20:17:39 +0000
ROA not before:           Wed 03 Apr 2024 20:12:39 +0000
ROA not after:            Wed 02 Apr 2025 20:17:39 +0000
asID:                     270828
IP address blocks:        2804:7208::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:1a:15:59:fe:bd:4d:f2:e0:2a:e2:4f:c8:79:ad:66:ad:17:98:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A59D7FC58DD93FD839E36B666F0A5295F98E5F
        Validity
            Not Before: Apr  3 20:12:39 2024 GMT
            Not After : Apr  2 20:17:39 2025 GMT
        Subject: CN=D384D339260E1EB0910FC4A921171F454BC014C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a8:de:0b:71:3f:b1:e2:5b:87:79:80:fe:32:
                    5f:09:f8:1d:58:54:bd:6b:a3:86:21:a7:09:a2:8a:
                    28:09:1c:9a:3e:09:27:de:1d:16:dc:9f:a0:b6:31:
                    28:2a:ed:dc:64:03:e0:3b:51:af:dd:35:9b:91:af:
                    44:14:55:62:5b:e3:86:69:e4:12:7a:36:46:1b:d8:
                    42:c9:b0:31:d6:62:f1:01:08:ba:e7:af:d0:89:d0:
                    c4:5c:29:13:2b:08:4c:5c:07:c7:94:b3:92:2b:7e:
                    d9:24:c3:96:02:7b:64:0e:ca:d9:31:ed:3c:f1:75:
                    51:b1:06:b1:da:67:d2:b3:6a:37:7d:e8:96:9d:aa:
                    e4:ec:c7:cd:c7:c7:07:2f:ef:cf:6a:dd:d9:f1:dd:
                    ee:78:a7:9b:ce:13:00:9d:ef:f3:78:68:f0:85:57:
                    c2:b3:e0:45:09:a8:60:3a:c0:99:33:dd:14:f1:39:
                    2f:19:68:69:fb:31:dc:d0:0c:83:d6:d0:a4:4a:8e:
                    53:cb:be:b8:bf:2f:37:52:40:e9:f2:b3:d7:d9:95:
                    41:24:a1:32:b5:1b:95:45:0c:a8:18:5e:83:97:b9:
                    cc:e8:34:df:9a:28:e0:d1:5c:be:80:f1:bc:ee:3b:
                    d1:66:1d:c9:e8:07:0a:19:8f:0c:05:51:f5:e1:ee:
                    49:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:84:D3:39:26:0E:1E:B0:91:0F:C4:A9:21:17:1F:45:4B:C0:14:C6
            X509v3 Authority Key Identifier:
                keyid:11:A5:9D:7F:C5:8D:D9:3F:D8:39:E3:6B:66:6F:0A:52:95:F9:8E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/11A59D7FC58DD93FD839E36B666F0A5295F98E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11A59D7FC58DD93FD839E36B666F0A5295F98E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/323830343a373230383a3a2f33322d3332203d3e20323730383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7208::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:7a:fc:d1:9f:2c:9f:d6:64:df:b4:b5:67:6f:3f:06:6b:6d:
         17:a2:05:6b:c1:3a:93:6c:d4:32:37:3e:0f:ab:00:30:9a:91:
         bd:e1:cd:1e:f5:9f:20:4c:62:bc:cd:ec:82:1a:fb:4f:6c:ff:
         1e:07:fc:90:70:e2:c4:00:b1:b2:2f:64:03:f0:cb:33:be:f2:
         05:3f:fe:e0:72:31:00:af:e5:6f:f0:24:77:8f:12:f6:fa:9a:
         9a:23:b6:ad:1a:77:e3:6b:ca:fc:88:9a:de:e5:4c:c8:4c:2c:
         3c:a0:e3:d6:d7:d2:0f:e5:fe:a2:f3:b8:69:39:65:e5:cb:01:
         cc:52:54:ae:6e:8d:cb:64:06:f1:cd:82:5b:25:17:2a:78:fe:
         05:19:0c:f5:0b:be:11:e7:94:ba:a2:f4:07:98:d1:b7:cc:a4:
         22:d3:13:7a:58:96:96:76:d3:3d:fc:0e:5c:e1:e0:c7:ad:5e:
         12:ff:a8:49:e9:bd:ef:79:ff:54:ed:81:a7:0e:51:79:19:fc:
         71:76:61:4d:8b:76:bc:2e:f1:5e:20:e0:55:a7:3a:b0:e2:28:
         44:ad:5c:1f:c3:b8:54:7a:9b:88:8f:77:2a:a9:02:05:b1:b6:
         e5:a3:3c:fd:f0:8e:7e:e6:81:8c:1c:b8:9f:64:16:4f:57:e6:
         ab:ff:4c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org