Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/323830343a323734303a343030303a3a2f34302d3430203d3e20323633383837.roa
File:                     323830343a323734303a343030303a3a2f34302d3430203d3e20323633383837.roa (raw, json)
Hash identifier:          6PuVchObLX1/6+yML+TDQ4LRk3bM+Nsf9+8rpvoxyGw=
Subject key identifier:   18:40:A5:65:10:AF:F9:EE:95:45:0F:07:CC:D9:FE:AB:86:7D:5E:B2
Certificate issuer:       /CN=7258464143C44D8129F40A067027439DBCFB626B
Certificate serial:       6FF42177F5AAE2EF3FF1C113CD34ADEE4BD607DE
Authority key identifier: 72:58:46:41:43:C4:4D:81:29:F4:0A:06:70:27:43:9D:BC:FB:62:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7258464143C44D8129F40A067027439DBCFB626B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/323830343a323734303a343030303a3a2f34302d3430203d3e20323633383837.roa
Signing time:             Thu 04 Jan 2024 22:56:57 +0000
ROA not before:           Thu 04 Jan 2024 22:51:57 +0000
ROA not after:            Thu 02 Jan 2025 22:56:57 +0000
asID:                     263887
IP address blocks:        2804:2740:4000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f4:21:77:f5:aa:e2:ef:3f:f1:c1:13:cd:34:ad:ee:4b:d6:07:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7258464143C44D8129F40A067027439DBCFB626B
        Validity
            Not Before: Jan  4 22:51:57 2024 GMT
            Not After : Jan  2 22:56:57 2025 GMT
        Subject: CN=1840A56510AFF9EE95450F07CCD9FEAB867D5EB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ce:0b:7c:8c:23:6c:22:cc:94:6f:6f:b1:c9:
                    81:82:b7:67:4e:c5:ae:d9:af:6d:06:46:1b:cc:1f:
                    8b:c3:ac:3d:6f:00:b7:40:22:96:81:e1:c6:89:47:
                    de:41:79:66:56:0a:b3:d4:f8:4f:15:78:b2:3f:42:
                    b0:a0:77:2a:d4:6d:5a:55:da:a8:27:9c:5f:19:64:
                    0c:ea:82:de:38:ce:00:93:71:eb:00:9c:e2:cb:cf:
                    8b:4a:5f:2d:9b:60:83:1e:67:2a:18:7c:ed:9e:35:
                    71:59:e4:72:91:cb:f0:e5:3a:11:86:c9:b6:8b:e3:
                    35:f6:d7:b9:66:ac:aa:1d:cc:a9:d6:fb:5a:f1:3e:
                    47:70:09:a2:60:09:a7:bb:78:12:73:37:d2:7d:bc:
                    ee:1e:ae:1f:ee:a4:03:6a:b8:84:e2:ce:88:68:e5:
                    2e:9d:6c:c0:3f:11:27:d5:85:ab:43:fa:3c:c7:2c:
                    53:96:ad:96:e0:1e:06:10:3d:45:76:88:c6:17:39:
                    5a:bc:76:32:54:d5:8b:16:f3:38:f9:53:72:04:c8:
                    db:9b:99:44:fa:15:fb:45:51:92:a0:a3:a5:ce:49:
                    a5:ea:5a:e3:40:b1:1e:dc:55:b6:0c:01:a9:9d:23:
                    4b:bd:d4:21:2a:b1:44:b8:0e:cf:d0:5d:b5:30:b9:
                    c0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:40:A5:65:10:AF:F9:EE:95:45:0F:07:CC:D9:FE:AB:86:7D:5E:B2
            X509v3 Authority Key Identifier:
                keyid:72:58:46:41:43:C4:4D:81:29:F4:0A:06:70:27:43:9D:BC:FB:62:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/7258464143C44D8129F40A067027439DBCFB626B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7258464143C44D8129F40A067027439DBCFB626B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/323830343a323734303a343030303a3a2f34302d3430203d3e20323633383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2740:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a3:e6:e0:b0:d1:ce:18:ae:e9:ca:9d:48:26:25:69:8d:30:3b:
         75:b0:2b:86:a3:b0:52:b5:47:fe:a8:7a:80:e5:6c:56:8a:8a:
         bc:94:03:cb:9d:7c:81:0d:d4:32:fa:05:0e:4f:16:1f:46:a8:
         44:12:e8:a5:eb:44:c8:77:ec:69:9e:3a:52:03:e4:9a:96:29:
         b9:82:4e:70:5e:6c:48:ec:b7:04:df:ca:46:18:00:c7:6c:2e:
         1b:75:6a:50:f0:e2:5b:63:4a:ea:64:e2:9b:87:f8:ad:c6:66:
         90:22:15:d6:f4:68:1a:da:9b:9f:6d:44:d4:af:a2:8d:f4:cc:
         68:6a:ff:2b:21:37:83:2e:d7:ba:39:67:9f:34:a1:a3:2c:ee:
         5d:72:22:f6:c0:30:25:c0:ad:1c:45:18:84:57:45:b6:27:b5:
         59:0e:a2:23:d7:78:13:f6:60:1d:b5:2a:e3:e8:bc:1d:d4:5c:
         99:70:5f:87:0d:26:1f:4d:70:33:ad:47:b8:9c:38:de:c2:68:
         bb:9b:78:2f:fc:f3:8d:53:96:bd:79:79:fe:75:23:b7:36:10:
         6e:30:d6:6a:db:f3:8c:c6:32:16:81:42:56:b8:6a:75:d8:72:
         f5:21:cf:bf:23:1e:33:fe:3b:c1:9c:69:13:5b:9e:a4:90:f7:
         5d:2d:14:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org