Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/323830343a356234303a3a2f33322d3336203d3e20323638383239.roa
File:                     323830343a356234303a3a2f33322d3336203d3e20323638383239.roa (raw, json)
Hash identifier:          RlO+wAZ9zNgmgytxoFwPhkzd59loS7TPidQvLftRvPo=
Subject key identifier:   26:A0:66:D2:C0:5C:71:86:E4:0D:35:16:F3:E0:B9:45:76:D1:F3:63
Certificate issuer:       /CN=A8047243CA61478408F3E9EB76E147CCFDB50E8F
Certificate serial:       701F0D8BD338FBE12B7FAB78DC39846026F03E61
Authority key identifier: A8:04:72:43:CA:61:47:84:08:F3:E9:EB:76:E1:47:CC:FD:B5:0E:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8047243CA61478408F3E9EB76E147CCFDB50E8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/323830343a356234303a3a2f33322d3336203d3e20323638383239.roa
Signing time:             Fri 12 Jan 2024 18:36:01 +0000
ROA not before:           Fri 12 Jan 2024 18:31:01 +0000
ROA not after:            Fri 10 Jan 2025 18:36:01 +0000
asID:                     268829
IP address blocks:        2804:5b40::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:1f:0d:8b:d3:38:fb:e1:2b:7f:ab:78:dc:39:84:60:26:f0:3e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8047243CA61478408F3E9EB76E147CCFDB50E8F
        Validity
            Not Before: Jan 12 18:31:01 2024 GMT
            Not After : Jan 10 18:36:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c0:43:04:80:69:f0:29:73:19:1e:66:88:3b:
                    f5:41:90:60:23:2c:fc:3e:55:0c:f6:fb:61:7d:e4:
                    cb:1b:5a:2f:f6:33:35:df:2c:8a:bb:bc:4c:17:fa:
                    ee:8a:7b:13:a1:ab:cc:61:74:b0:6d:f8:3d:3c:cc:
                    66:62:c0:42:b0:5e:df:cc:f3:f6:0e:7b:76:94:49:
                    1e:60:0a:c8:06:4a:e4:4a:f1:6c:af:b9:78:a8:77:
                    0b:6c:bc:66:fa:26:39:02:99:6d:ad:22:0e:86:af:
                    62:34:8f:b2:21:c5:f1:f6:96:a4:06:5b:7d:4b:02:
                    7b:91:96:0d:7a:78:dc:2f:40:a0:e3:5d:ce:65:92:
                    c1:e5:f0:a9:7c:78:84:81:63:c7:af:2c:fe:4a:d2:
                    fc:1f:f2:c1:6f:c8:34:51:ee:e9:89:77:ef:d1:fd:
                    af:39:1e:ca:8d:02:06:34:77:17:a6:31:9e:15:8f:
                    84:a4:02:6b:9a:80:a5:25:5d:dc:39:c4:e7:60:44:
                    3b:4e:90:48:4c:a2:52:d5:98:95:40:82:4e:77:6b:
                    56:2b:75:ca:d8:90:74:24:31:41:d8:fc:5c:4f:9c:
                    e5:26:1e:5a:88:72:9f:b5:fd:60:98:4d:05:f0:59:
                    bd:1e:90:68:63:ce:f0:30:ac:2a:f9:f6:4a:2f:d9:
                    38:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A0:66:D2:C0:5C:71:86:E4:0D:35:16:F3:E0:B9:45:76:D1:F3:63
            X509v3 Authority Key Identifier:
                keyid:A8:04:72:43:CA:61:47:84:08:F3:E9:EB:76:E1:47:CC:FD:B5:0E:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/A8047243CA61478408F3E9EB76E147CCFDB50E8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8047243CA61478408F3E9EB76E147CCFDB50E8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/323830343a356234303a3a2f33322d3336203d3e20323638383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:9b:27:18:8c:07:16:fb:2a:6f:f4:62:55:48:a8:a2:87:4c:
         eb:96:b1:b9:aa:e3:39:65:8c:75:f2:b4:a9:19:78:36:b6:b4:
         10:75:79:22:65:83:7f:fc:ce:87:f9:6e:cf:04:e0:ec:ba:57:
         7d:83:00:be:45:10:86:07:bd:15:96:86:21:74:11:fc:94:0c:
         a9:7c:c9:f9:22:7e:c6:02:b8:3e:96:1d:ca:33:2a:10:4a:3a:
         c6:d1:53:b9:3f:63:21:31:17:fb:e4:e0:8d:50:cd:a7:af:fc:
         7f:e9:69:ad:a3:3d:71:8d:d9:bb:0e:b8:25:0e:8a:2c:5d:1c:
         10:39:b9:cf:db:dd:81:56:a2:95:a3:a5:d6:58:4e:d0:92:ed:
         f1:0f:10:88:f5:24:4d:f6:aa:30:a7:fd:ce:46:d4:04:07:9a:
         46:0e:69:d3:d8:92:3e:91:0b:3e:b5:c1:64:82:bb:a3:c8:8f:
         fa:8a:5c:e8:17:f3:91:be:cc:52:9b:15:39:7c:89:97:1e:f9:
         5f:ae:12:b8:97:26:35:01:2e:1c:e1:ea:a9:45:cc:c0:df:df:
         f6:6c:0a:cd:3e:ee:cd:e1:f4:3c:5e:4a:6c:3e:da:27:d7:4a:
         b7:67:3d:95:fc:7d:25:e4:92:2e:1e:2b:e1:e4:04:66:80:c1:
         1b:b2:20:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org