Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/323830343a373738633a3a2f33322d3333203d3e20323731313835.roa
File:                     323830343a373738633a3a2f33322d3333203d3e20323731313835.roa (raw, json)
Hash identifier:          1sEqnyRsORBTbm0Ie/wTX8JEmmAgcg37S3XGwjranGE=
Subject key identifier:   3B:A0:DC:23:D0:2E:5A:9F:5D:4C:67:3A:AE:E5:67:BA:49:1B:A8:1F
Certificate issuer:       /CN=59451EF4A72A0FA9F420A5EDB6ECC80EE4F449A4
Certificate serial:       2156999C3237D816E1762F7C93E8CC7426F53FAB
Authority key identifier: 59:45:1E:F4:A7:2A:0F:A9:F4:20:A5:ED:B6:EC:C8:0E:E4:F4:49:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59451EF4A72A0FA9F420A5EDB6ECC80EE4F449A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/323830343a373738633a3a2f33322d3333203d3e20323731313835.roa
Signing time:             Thu 07 Mar 2024 13:56:27 +0000
ROA not before:           Thu 07 Mar 2024 13:51:27 +0000
ROA not after:            Thu 06 Mar 2025 13:56:27 +0000
asID:                     271185
IP address blocks:        2804:778c::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:56:99:9c:32:37:d8:16:e1:76:2f:7c:93:e8:cc:74:26:f5:3f:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59451EF4A72A0FA9F420A5EDB6ECC80EE4F449A4
        Validity
            Not Before: Mar  7 13:51:27 2024 GMT
            Not After : Mar  6 13:56:27 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:37:6e:dd:f3:d4:46:8c:6f:4d:1d:73:09:b2:
                    23:7b:3b:78:11:31:cf:c0:bc:11:d2:e7:77:c0:4e:
                    9b:cd:1f:6a:2e:0b:63:27:e6:b4:bc:4b:34:29:52:
                    e6:0d:a2:b7:c9:1f:1e:bd:b7:86:06:23:46:9b:0d:
                    3c:4b:57:ae:51:ca:f9:58:5d:f6:1b:d9:2b:6c:9a:
                    74:ab:c1:3c:c3:d0:34:ca:18:e0:91:7a:72:17:f0:
                    ea:a9:4e:e0:ff:a5:8c:bd:cb:62:ed:a0:7a:52:29:
                    03:9d:70:8c:fd:e3:57:9d:18:bf:39:d0:3f:2c:a1:
                    7f:ab:b3:c8:36:0b:b7:f9:45:c1:df:e6:a7:a0:1f:
                    4a:ac:86:46:f7:a4:5c:dd:21:f4:3c:60:03:b8:b1:
                    db:d5:a2:17:49:bc:0e:34:d0:cc:4f:06:00:c1:f7:
                    a7:33:e0:88:03:b4:18:26:b0:f9:ce:17:6f:7d:86:
                    87:0f:37:08:4c:0a:89:b7:1d:7a:af:6d:15:95:62:
                    f4:df:7b:7d:6b:81:51:41:7e:2e:da:3b:33:5a:5b:
                    e1:4f:34:81:cc:26:78:82:60:55:37:93:7b:9b:24:
                    03:9a:f5:e7:f2:fa:31:66:2b:84:eb:97:af:91:23:
                    e7:a5:e7:8f:0e:77:ec:8d:5a:ab:21:27:9d:f0:a3:
                    8f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A0:DC:23:D0:2E:5A:9F:5D:4C:67:3A:AE:E5:67:BA:49:1B:A8:1F
            X509v3 Authority Key Identifier:
                keyid:59:45:1E:F4:A7:2A:0F:A9:F4:20:A5:ED:B6:EC:C8:0E:E4:F4:49:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/59451EF4A72A0FA9F420A5EDB6ECC80EE4F449A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59451EF4A72A0FA9F420A5EDB6ECC80EE4F449A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/323830343a373738633a3a2f33322d3333203d3e20323731313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:778c::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:ce:39:e9:61:58:62:4e:9c:41:09:d7:fa:85:6d:c7:6e:d2:
         2a:ff:c5:20:16:f3:45:76:26:ff:ee:71:e3:92:08:6f:1e:87:
         4d:18:69:d3:d2:2e:c1:96:62:bc:54:81:d9:5f:55:1e:e5:e3:
         cd:a1:59:9d:35:2d:7d:a6:49:ee:56:08:c9:e1:2a:65:f6:cc:
         99:de:79:a1:8c:6a:76:de:fb:13:b2:d1:b8:87:14:ac:85:7f:
         da:5e:bf:39:62:9d:63:46:40:f2:eb:11:c7:27:27:d1:2f:a7:
         6b:85:46:e4:1a:68:71:ab:5f:e2:d3:50:e1:f3:3e:7e:59:60:
         f2:13:6c:43:d5:ad:4f:1d:42:d0:92:e4:ca:39:4e:8f:9e:f4:
         1c:cd:f8:ce:36:e2:95:e8:32:e6:a1:65:a5:68:ca:3e:42:06:
         ea:b5:b8:02:5d:6c:63:b8:a2:f5:b6:c0:f6:b2:d0:10:8b:6a:
         51:1f:43:05:e1:ae:a4:5e:fd:f7:00:49:88:25:59:07:dd:ce:
         1d:69:2f:5c:95:13:be:08:61:6a:24:06:38:ad:86:9b:9f:84:
         69:ef:aa:4f:4a:13:07:c7:8a:cb:35:86:db:93:8b:d8:79:52:
         4f:26:e6:f3:82:b4:be:6d:cb:21:42:df:5f:0e:4c:39:2e:03:
         35:7c:44:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org