Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/323830343a373230383a373030303a3a2f33362d3336203d3e20323730383238.roa
File:                     323830343a373230383a373030303a3a2f33362d3336203d3e20323730383238.roa (raw, json)
Hash identifier:          kL+cUej7TCgVsjLlybcE5Z09nN28NQdcbymbcShV4pM=
Subject key identifier:   A5:F5:DF:5E:C9:F6:22:53:11:BF:3E:0F:A1:9E:09:7A:5C:E0:A4:5E
Certificate issuer:       /CN=9524EE8472B5FC7B7954627809F56CFEB45E6323
Certificate serial:       580FAFFBAD4557F451D5D1B7DA5923F728E5B813
Authority key identifier: 95:24:EE:84:72:B5:FC:7B:79:54:62:78:09:F5:6C:FE:B4:5E:63:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9524EE8472B5FC7B7954627809F56CFEB45E6323.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/323830343a373230383a373030303a3a2f33362d3336203d3e20323730383238.roa
Signing time:             Mon 08 Apr 2024 16:54:22 +0000
ROA not before:           Mon 08 Apr 2024 16:49:22 +0000
ROA not after:            Mon 07 Apr 2025 16:54:22 +0000
asID:                     270828
IP address blocks:        2804:7208:7000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:0f:af:fb:ad:45:57:f4:51:d5:d1:b7:da:59:23:f7:28:e5:b8:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9524EE8472B5FC7B7954627809F56CFEB45E6323
        Validity
            Not Before: Apr  8 16:49:22 2024 GMT
            Not After : Apr  7 16:54:22 2025 GMT
        Subject: CN=A5F5DF5EC9F6225311BF3E0FA19E097A5CE0A45E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ae:7d:3b:47:4f:80:eb:6c:93:33:b4:cc:63:
                    11:c5:2c:a9:37:52:5e:00:25:38:51:1c:a3:cf:17:
                    93:bc:6b:f7:4b:39:3f:e8:dd:73:78:91:18:47:0d:
                    de:2b:0e:da:58:c7:38:d0:d0:ba:bd:02:98:9e:1a:
                    23:55:8e:7b:b7:aa:b3:84:32:c2:15:00:10:90:cb:
                    3a:0d:54:aa:8a:6b:eb:33:41:f0:c0:da:cd:00:b0:
                    1e:92:2b:7b:dc:fe:a3:cf:67:a0:d1:f2:3d:74:fa:
                    24:8e:18:6b:91:5c:3d:33:ae:2d:bd:15:87:e1:8a:
                    3d:23:5c:07:1f:c0:6d:f5:e4:86:97:77:0b:50:3d:
                    a8:e5:ab:13:75:95:ac:ae:ba:bb:0f:da:8f:e6:43:
                    ba:3e:d2:b5:e5:7d:72:fd:7c:32:d2:ea:2c:45:f6:
                    e5:7d:3b:1b:f7:84:d2:58:ac:a2:f7:8c:4e:92:c7:
                    cc:78:f4:08:d0:a5:1f:a7:1c:d0:e9:a3:8a:4d:a8:
                    db:97:2d:28:52:33:03:c2:d4:6c:a6:1d:ca:75:2a:
                    a7:f1:4b:d9:4c:b0:41:e4:fa:4d:cc:ae:0f:fd:7d:
                    0f:17:3d:5b:ce:9c:e1:a9:3b:de:71:f1:da:06:cf:
                    b2:eb:58:84:29:be:fb:7f:0f:16:49:1f:4f:22:8f:
                    02:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F5:DF:5E:C9:F6:22:53:11:BF:3E:0F:A1:9E:09:7A:5C:E0:A4:5E
            X509v3 Authority Key Identifier:
                keyid:95:24:EE:84:72:B5:FC:7B:79:54:62:78:09:F5:6C:FE:B4:5E:63:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/9524EE8472B5FC7B7954627809F56CFEB45E6323.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9524EE8472B5FC7B7954627809F56CFEB45E6323.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/323830343a373230383a373030303a3a2f33362d3336203d3e20323730383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7208:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         81:28:57:04:a6:58:8e:f1:d3:67:2d:ba:52:2c:42:cf:5e:47:
         f9:3e:46:0e:a2:73:91:9f:f2:30:2d:2a:26:18:ca:7a:e5:e6:
         36:72:2c:b3:fe:45:bd:00:ac:aa:e3:05:71:18:2e:96:c9:ae:
         5b:64:c6:e6:7e:af:20:b0:99:e0:55:48:ea:d9:58:ac:9e:4d:
         5a:3d:a7:a5:d7:e9:f6:21:43:1c:5a:56:a8:cb:31:16:b3:d0:
         d3:82:b1:1d:ed:e9:1b:1e:53:86:4c:81:f7:c7:40:d8:a7:2d:
         de:2e:2d:f7:d6:01:37:89:27:f0:75:d1:53:f2:f1:75:fd:e7:
         49:8b:a7:a1:6a:96:ee:3e:40:59:d2:92:60:cc:e5:e7:ca:ea:
         70:3c:ea:39:7c:ac:3b:e5:95:21:32:9a:f0:10:b3:60:dd:f0:
         f1:d7:db:8f:21:9d:48:57:2c:ae:0a:b8:a0:67:55:ca:2a:06:
         64:39:cd:19:06:f7:be:61:b9:e7:e3:97:73:34:96:cd:57:6f:
         5b:75:92:00:fd:e0:9c:28:1c:12:0f:c7:6b:1d:87:cf:66:b9:
         ef:33:5d:d1:df:62:03:2d:ee:9a:1a:00:26:1a:2d:de:7a:37:
         3d:44:aa:47:87:4b:73:bd:be:fb:ff:7c:2d:73:e6:ad:4f:16:
         30:92:72:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org