Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/323830343a343464383a383030303a3a2f33332d3333203d3e20323637363537.roa
File:                     323830343a343464383a383030303a3a2f33332d3333203d3e20323637363537.roa (raw, json)
Hash identifier:          e+5lRVIQQtwP3LXXHnzpktKstQ9gvzD+AjLL1Uizwrw=
Subject key identifier:   4E:93:EC:3D:2F:01:AF:7B:31:B6:21:13:13:9E:3C:C6:93:63:53:CE
Certificate issuer:       /CN=27B6248B1E058E2EE0A711BAAE5F6CBDF61C6104
Certificate serial:       304847C32F190EFD9295BD3B1ADC0217EEF2172A
Authority key identifier: 27:B6:24:8B:1E:05:8E:2E:E0:A7:11:BA:AE:5F:6C:BD:F6:1C:61:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27B6248B1E058E2EE0A711BAAE5F6CBDF61C6104.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/323830343a343464383a383030303a3a2f33332d3333203d3e20323637363537.roa
Signing time:             Fri 05 Jan 2024 11:59:11 +0000
ROA not before:           Fri 05 Jan 2024 11:54:11 +0000
ROA not after:            Fri 03 Jan 2025 11:59:11 +0000
asID:                     267657
IP address blocks:        2804:44d8:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:48:47:c3:2f:19:0e:fd:92:95:bd:3b:1a:dc:02:17:ee:f2:17:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27B6248B1E058E2EE0A711BAAE5F6CBDF61C6104
        Validity
            Not Before: Jan  5 11:54:11 2024 GMT
            Not After : Jan  3 11:59:11 2025 GMT
        Subject: CN=4E93EC3D2F01AF7B31B62113139E3CC6936353CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c0:8f:5f:45:dc:b0:3c:7d:7e:08:b6:2d:8b:
                    e4:c6:6f:c8:2a:8b:7e:7b:b9:52:26:d6:02:33:68:
                    ea:1d:94:75:46:af:1b:bd:6b:78:4f:d2:d3:e6:09:
                    4e:db:83:09:6b:6c:f1:92:5d:fb:a2:02:6e:38:ed:
                    d2:ca:48:4b:96:17:f6:20:6f:8f:cd:d4:b2:a4:38:
                    b7:c6:35:1b:09:14:fb:8a:27:25:4c:83:cd:9e:00:
                    c7:7b:7a:8a:41:d3:82:1c:f8:de:22:46:f2:93:a8:
                    12:9c:0c:0e:12:cb:ce:8a:45:f3:5c:15:98:1e:1b:
                    49:54:a1:af:5f:de:73:da:a0:aa:df:35:d8:02:8b:
                    a6:4d:17:e0:8f:29:64:91:66:8b:50:1c:8f:be:5a:
                    c8:e6:97:52:c4:f3:6b:77:e2:df:c0:01:a5:c2:7f:
                    2d:04:bb:e2:02:a2:1d:fc:5a:a7:16:51:d2:d5:93:
                    b9:5d:68:22:ad:92:30:e2:54:f4:2f:64:20:3f:90:
                    6c:a5:0b:5f:4f:ff:39:09:e5:f3:27:cb:a6:44:81:
                    e4:3c:11:39:21:94:18:52:01:e2:a8:32:66:e3:fc:
                    51:02:6b:f7:85:e1:4e:09:f0:79:28:bc:d7:d5:db:
                    9e:73:73:5a:af:5c:25:63:50:59:ce:c2:26:9d:d7:
                    2f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:93:EC:3D:2F:01:AF:7B:31:B6:21:13:13:9E:3C:C6:93:63:53:CE
            X509v3 Authority Key Identifier:
                keyid:27:B6:24:8B:1E:05:8E:2E:E0:A7:11:BA:AE:5F:6C:BD:F6:1C:61:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/27B6248B1E058E2EE0A711BAAE5F6CBDF61C6104.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27B6248B1E058E2EE0A711BAAE5F6CBDF61C6104.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/323830343a343464383a383030303a3a2f33332d3333203d3e20323637363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:44d8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         cd:7f:1b:94:ea:72:ac:3e:ca:14:71:95:fa:34:b4:3d:17:0b:
         cd:b3:76:f0:71:a6:93:91:13:a3:78:66:73:3c:9c:94:1b:b0:
         7b:d8:2b:20:94:88:be:e9:b1:61:bb:e4:30:9e:9b:92:dd:34:
         bd:1a:4e:75:ed:16:6e:b8:5d:c4:7b:c3:a7:cb:c9:84:a3:69:
         46:3f:08:60:93:7e:aa:20:3d:d2:c6:2a:00:ad:dd:f5:90:af:
         f7:c2:8e:5b:50:83:e6:3d:3f:1e:4d:4e:1e:2a:78:3a:0d:61:
         d8:98:62:f3:a5:54:ff:ab:58:af:ff:48:a2:0e:28:5e:bd:68:
         39:64:b7:f2:62:53:7b:12:7f:bf:6a:3b:84:9b:f2:e5:6c:88:
         0c:b3:66:cd:fb:8a:3b:ba:43:05:28:7c:09:3e:67:66:2f:72:
         36:db:e6:dd:d2:fb:0b:bc:5e:c3:c3:f7:17:7c:ed:ac:49:fb:
         43:3f:fc:ee:e4:38:93:b7:c5:ff:20:ea:1a:9c:9f:83:76:da:
         6a:9e:7e:24:49:d3:44:e4:07:6c:eb:63:bf:ea:bb:ad:b1:ab:
         25:87:3a:5c:44:66:1f:d1:17:d8:62:33:ba:03:b4:02:91:97:
         24:83:bb:6c:6c:5e:67:5f:3e:1b:72:69:ca:4f:88:93:55:66:
         6f:d9:f3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:06 2024 by rpki-client on console-ams.rpki-client.org