Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/323830343a323736633a343030303a3a2f33342d3334203d3e20323633393030.roa
File:                     323830343a323736633a343030303a3a2f33342d3334203d3e20323633393030.roa (raw, json)
Hash identifier:          VaSjH8lPtfz3OoUXhjC5Q5cQWkHrr66G2tKv9RSy4zs=
Subject key identifier:   76:C5:45:C8:A7:2F:A7:26:59:0B:4F:E9:0D:AD:17:CB:38:7F:8F:BE
Certificate issuer:       /CN=E09AEFBAB9FAA20F5629757DA668E610219ED98F
Certificate serial:       34B8EF453BD395537AD0735FB19BC872F39C11D0
Authority key identifier: E0:9A:EF:BA:B9:FA:A2:0F:56:29:75:7D:A6:68:E6:10:21:9E:D9:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E09AEFBAB9FAA20F5629757DA668E610219ED98F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/323830343a323736633a343030303a3a2f33342d3334203d3e20323633393030.roa
Signing time:             Wed 20 Dec 2023 14:06:15 +0000
ROA not before:           Wed 20 Dec 2023 14:01:15 +0000
ROA not after:            Wed 18 Dec 2024 14:06:15 +0000
asID:                     263900
IP address blocks:        2804:276c:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b8:ef:45:3b:d3:95:53:7a:d0:73:5f:b1:9b:c8:72:f3:9c:11:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E09AEFBAB9FAA20F5629757DA668E610219ED98F
        Validity
            Not Before: Dec 20 14:01:15 2023 GMT
            Not After : Dec 18 14:06:15 2024 GMT
        Subject: CN=76C545C8A72FA726590B4FE90DAD17CB387F8FBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4e:11:2d:fe:08:bf:bc:1d:41:de:64:fb:5d:
                    2b:31:3b:15:04:8a:96:00:51:96:d5:84:ba:4f:97:
                    2b:88:b2:e3:a7:21:12:98:86:82:a3:93:c9:91:5b:
                    3c:9c:c3:ce:d2:e5:c1:aa:11:bb:41:5e:1f:52:b2:
                    68:7c:0a:f0:db:dc:cc:bd:9b:ab:61:fd:e7:de:61:
                    54:d7:9b:84:5b:fd:1c:ef:ba:a2:33:ba:0c:8b:a2:
                    b8:79:c5:da:c9:cc:d1:02:89:d4:e4:55:1d:f1:b9:
                    3c:51:a0:11:52:d5:b1:ac:72:83:b1:cf:7b:d5:24:
                    dd:a8:77:4b:eb:fd:1f:59:84:46:b4:13:80:72:6c:
                    c4:8f:92:0c:e4:40:fa:2d:64:6e:88:cf:26:39:c0:
                    d8:34:ec:e4:b3:a3:d0:95:94:47:33:3e:df:8f:7c:
                    4e:bf:6b:7f:72:f4:c8:b3:f4:0d:83:1e:e6:35:ec:
                    db:4d:4a:89:82:19:a9:73:ca:35:bc:b1:9a:78:bc:
                    f2:07:93:0e:0f:5c:a4:7a:5f:96:0f:40:d6:4f:95:
                    d4:0c:c8:7c:a3:80:a3:9d:1d:e9:24:33:81:1e:c2:
                    a8:11:13:69:f3:23:e5:15:66:b1:82:a9:88:96:59:
                    35:21:de:e7:64:08:a9:da:4a:1e:2e:3f:3f:19:93:
                    bb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C5:45:C8:A7:2F:A7:26:59:0B:4F:E9:0D:AD:17:CB:38:7F:8F:BE
            X509v3 Authority Key Identifier:
                keyid:E0:9A:EF:BA:B9:FA:A2:0F:56:29:75:7D:A6:68:E6:10:21:9E:D9:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/E09AEFBAB9FAA20F5629757DA668E610219ED98F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E09AEFBAB9FAA20F5629757DA668E610219ED98F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/323830343a323736633a343030303a3a2f33342d3334203d3e20323633393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:276c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         87:e1:96:52:91:e3:ea:82:7b:25:1b:e9:0f:dd:b9:83:f7:bc:
         e8:86:79:2a:21:e1:64:9f:7b:18:fd:e1:f6:00:07:12:3d:8e:
         c2:8c:47:b2:2b:67:e1:dd:25:17:7d:50:63:cd:04:bb:1b:8b:
         3a:10:ce:19:8e:f1:71:69:8e:a6:83:6d:71:38:45:25:ca:23:
         f3:61:29:5d:f2:7e:2e:ba:05:d5:f0:57:20:fa:ec:16:cf:e9:
         1b:e5:e0:ea:8f:2f:0e:c9:21:b2:45:4e:41:25:0a:f4:eb:94:
         65:60:2d:71:a8:ea:e2:4e:09:21:ed:0c:e6:bd:0a:e0:2c:02:
         7e:6b:57:51:30:fc:bd:84:72:71:94:08:1d:2e:8c:7e:89:12:
         f9:d8:61:a2:1d:47:a0:44:54:09:8b:cb:70:ea:54:65:9e:b9:
         55:5f:1f:79:49:24:a4:3b:f5:d3:fd:a6:e5:24:01:06:a6:96:
         ac:e8:b8:b9:ad:12:bf:31:1d:81:a8:62:5e:48:12:7e:f8:80:
         25:7b:9d:30:39:ff:3f:8c:62:57:a4:a4:ab:8a:cd:a2:88:e8:
         bd:0c:fd:c8:68:a0:31:44:51:7d:f6:48:48:b0:1f:d0:93:4e:
         b7:29:d7:98:e6:52:0f:1b:8b:f5:17:3c:dc:f1:e8:99:58:23:
         19:f4:dc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org