Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/2/323830343a376462383a3a2f33322d3334203d3e20323731353738.roa
File:                     323830343a376462383a3a2f33322d3334203d3e20323731353738.roa (raw, json)
Hash identifier:          Nh7tEx85P5nHa7IqfnsQJY29whYp3N55U0UQeAjA2Mw=
Subject key identifier:   D4:DD:23:AD:DE:FD:6C:19:55:A1:69:A2:6F:5D:26:B6:56:90:1F:48
Certificate issuer:       /CN=1FBBBDE796BFAB030B8A026EF10AB077CE94B92F
Certificate serial:       7D2C355F69B2831A5778FF826D49297B75EECBE6
Authority key identifier: 1F:BB:BD:E7:96:BF:AB:03:0B:8A:02:6E:F1:0A:B0:77:CE:94:B9:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FBBBDE796BFAB030B8A026EF10AB077CE94B92F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/2/323830343a376462383a3a2f33322d3334203d3e20323731353738.roa
Signing time:             Wed 03 Apr 2024 21:22:18 +0000
ROA not before:           Wed 03 Apr 2024 21:17:18 +0000
ROA not after:            Wed 02 Apr 2025 21:22:18 +0000
asID:                     271578
IP address blocks:        2804:7db8::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:2c:35:5f:69:b2:83:1a:57:78:ff:82:6d:49:29:7b:75:ee:cb:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FBBBDE796BFAB030B8A026EF10AB077CE94B92F
        Validity
            Not Before: Apr  3 21:17:18 2024 GMT
            Not After : Apr  2 21:22:18 2025 GMT
        Subject: CN=D4DD23ADDEFD6C1955A169A26F5D26B656901F48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a5:11:e7:93:86:15:4d:d0:ed:f0:d9:86:7a:
                    0a:cd:91:c1:3c:f7:ff:fe:de:74:79:cf:15:3f:17:
                    ee:e3:45:d9:87:e5:37:c7:fc:0a:0e:5c:92:8d:0e:
                    85:05:c6:4e:ac:54:b5:0a:03:6a:55:48:38:cd:35:
                    ea:0c:80:da:b3:dc:20:07:a0:aa:86:95:ce:0b:3c:
                    e3:dc:78:56:c9:99:18:9f:06:05:af:0f:6e:17:69:
                    b2:8e:00:29:d0:74:5f:6a:95:37:fc:c6:8c:38:fb:
                    a3:d4:92:f3:27:f0:2a:a8:7c:fa:c1:ae:ca:0c:c1:
                    ed:7c:aa:2b:c9:78:36:6d:cf:86:b2:4f:c6:6f:44:
                    27:55:89:22:88:37:05:ea:eb:5f:ab:22:98:a7:06:
                    72:7e:b5:73:49:6d:14:ad:41:64:87:49:31:de:9e:
                    c7:4e:e5:27:9b:c5:46:f7:78:8d:4d:19:8b:bc:10:
                    65:ef:1f:43:29:43:1f:9a:2c:7f:94:30:4c:74:ed:
                    a3:cb:5a:70:e3:8b:a5:0e:6a:7d:82:84:c1:ca:3f:
                    f9:d7:5d:ee:bc:8e:87:7d:d7:f5:bb:13:2c:f9:cc:
                    cb:88:86:8d:5f:56:95:28:f9:f8:76:e5:a7:13:37:
                    3d:03:0b:75:30:b8:7b:b1:b4:9b:26:8d:79:c2:61:
                    24:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:DD:23:AD:DE:FD:6C:19:55:A1:69:A2:6F:5D:26:B6:56:90:1F:48
            X509v3 Authority Key Identifier:
                keyid:1F:BB:BD:E7:96:BF:AB:03:0B:8A:02:6E:F1:0A:B0:77:CE:94:B9:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/2/1FBBBDE796BFAB030B8A026EF10AB077CE94B92F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FBBBDE796BFAB030B8A026EF10AB077CE94B92F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/2/323830343a376462383a3a2f33322d3334203d3e20323731353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7db8::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:19:d6:42:66:26:06:0f:93:fe:72:30:cb:92:a6:91:99:2f:
         c4:17:1f:10:b5:48:1d:0a:29:ee:19:d8:88:6c:f2:c5:3a:97:
         fa:8a:1f:4d:c9:b3:a6:6d:a3:f7:b7:97:c0:db:b4:5f:45:2c:
         fe:42:a8:87:d4:d8:d4:38:d5:57:e4:e9:cd:17:d1:21:e4:9f:
         56:71:f9:a5:03:32:fa:18:dd:4b:13:2c:7f:21:87:96:7c:dc:
         a5:30:86:c0:5b:85:09:61:bb:94:36:a7:e9:65:b7:3c:32:2d:
         44:b9:7e:da:cc:90:e6:48:57:b8:0f:8f:86:35:8b:96:f1:98:
         d8:7c:45:be:41:89:31:c0:ab:e3:c4:48:d2:72:c5:c9:9f:a9:
         b5:94:ed:f3:98:52:28:4e:ed:92:b9:46:b1:dd:05:f4:f8:7c:
         40:22:57:b3:03:a0:1c:f7:75:a7:69:88:1c:c3:c2:b2:1c:fc:
         76:4f:fe:db:bd:60:be:ab:ca:ff:0d:50:ed:29:2b:3e:3a:de:
         cb:ae:7c:91:77:13:46:25:cd:97:9f:81:27:f6:0f:23:3f:6a:
         38:4e:e1:64:a0:46:89:21:95:81:a0:28:21:ca:e9:6d:50:23:
         e3:fd:6c:15:b8:a2:0e:89:9e:e8:d1:86:3e:53:e5:25:cc:5c:
         ee:3f:70:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org