Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FhRziqXYCwmz7n1dcbrpGU7VwNeR9VUDroqDsMBcYkzT/0/323830343a366366633a3a2f33322d3438203d3e20323730353035.roa
File:                     323830343a366366633a3a2f33322d3438203d3e20323730353035.roa (raw, json)
Hash identifier:          0YB5XwxmFSWGFkAarw0cu0gIVHQpp0wNMGpK5pTVVvY=
Subject key identifier:   66:E0:62:8F:CD:B3:0A:D7:79:9B:64:EE:14:E7:B2:E6:09:F5:B7:D9
Certificate issuer:       /CN=B7248B6C2218358CA66F4C00C8B3D6EE32D67BEA
Certificate serial:       4FF679B46BA66C68BEDB181C9EFA192A1B760B7E
Authority key identifier: B7:24:8B:6C:22:18:35:8C:A6:6F:4C:00:C8:B3:D6:EE:32:D6:7B:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7248B6C2218358CA66F4C00C8B3D6EE32D67BEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhRziqXYCwmz7n1dcbrpGU7VwNeR9VUDroqDsMBcYkzT/0/323830343a366366633a3a2f33322d3438203d3e20323730353035.roa
Signing time:             Fri 22 Mar 2024 23:45:08 +0000
ROA not before:           Fri 22 Mar 2024 23:40:08 +0000
ROA not after:            Fri 21 Mar 2025 23:45:08 +0000
asID:                     270505
IP address blocks:        2804:6cfc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f6:79:b4:6b:a6:6c:68:be:db:18:1c:9e:fa:19:2a:1b:76:0b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7248B6C2218358CA66F4C00C8B3D6EE32D67BEA
        Validity
            Not Before: Mar 22 23:40:08 2024 GMT
            Not After : Mar 21 23:45:08 2025 GMT
        Subject: CN=66E0628FCDB30AD7799B64EE14E7B2E609F5B7D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b5:79:a5:e5:3c:14:b6:47:b3:c0:98:17:ef:
                    b4:fb:09:4e:95:14:c8:6c:aa:5a:46:87:3e:45:41:
                    c5:09:0a:ac:50:dc:c7:b8:e4:dc:c6:12:da:47:bf:
                    35:a4:57:91:be:89:8e:34:10:d2:77:2b:05:51:f6:
                    21:c7:29:a1:1c:8e:df:5c:76:c4:44:ed:58:b7:28:
                    f7:27:f1:98:60:7a:ea:0e:9a:b0:bf:d2:43:de:b9:
                    ac:98:c4:59:d8:8f:06:b7:4b:e8:d6:a4:ce:f5:38:
                    fc:9e:31:89:9c:7f:18:19:f4:19:03:58:ad:a0:1c:
                    90:0f:b9:c9:e3:11:a7:1e:94:ae:24:97:91:a0:eb:
                    be:dd:c4:3c:b2:68:c4:5e:39:4e:02:12:86:6b:2b:
                    70:02:e4:64:4f:e3:ad:cc:e2:af:e5:51:94:79:56:
                    dc:0c:9b:73:2c:00:30:47:f3:69:8a:9e:9b:db:19:
                    02:d0:84:3c:74:4f:0c:b5:ac:5e:8a:87:31:3e:85:
                    b2:15:fb:71:f0:83:85:47:9f:86:c0:83:35:72:64:
                    82:3e:e3:04:f1:af:74:97:2b:b9:a4:12:76:69:09:
                    5e:d4:7e:2e:71:c3:d0:08:d0:17:cf:06:6e:68:6f:
                    16:6f:2f:3c:b1:e0:3e:39:8a:64:59:7e:cd:dd:06:
                    4b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E0:62:8F:CD:B3:0A:D7:79:9B:64:EE:14:E7:B2:E6:09:F5:B7:D9
            X509v3 Authority Key Identifier:
                keyid:B7:24:8B:6C:22:18:35:8C:A6:6F:4C:00:C8:B3:D6:EE:32:D6:7B:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhRziqXYCwmz7n1dcbrpGU7VwNeR9VUDroqDsMBcYkzT/0/B7248B6C2218358CA66F4C00C8B3D6EE32D67BEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7248B6C2218358CA66F4C00C8B3D6EE32D67BEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhRziqXYCwmz7n1dcbrpGU7VwNeR9VUDroqDsMBcYkzT/0/323830343a366366633a3a2f33322d3438203d3e20323730353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6cfc::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:4d:2a:be:34:b4:44:f7:14:8b:7f:0f:41:95:9e:66:d9:9d:
         41:04:5b:48:a3:10:dd:6b:79:8b:42:c4:73:64:fb:5c:17:b9:
         7e:30:0b:14:92:cb:b7:25:45:3f:81:13:5f:38:0e:95:30:56:
         63:ce:8f:2f:7a:05:56:6b:11:c4:c1:a6:a5:15:ac:3f:c5:38:
         0a:cd:1d:dd:a5:7e:2c:e1:d1:39:9b:16:08:89:ef:f6:8d:12:
         92:cd:8d:d3:91:bb:d1:e5:55:ab:c1:7b:68:e4:dd:67:1f:70:
         c0:28:67:07:5c:c5:f5:ee:f6:f6:11:1c:4d:5c:67:b9:6d:b6:
         f9:60:83:58:45:d8:c4:f4:e2:cc:c0:98:d1:60:5c:29:3a:55:
         f1:f9:04:38:78:2a:1a:d5:e3:c5:12:cd:e8:5a:42:6b:86:ef:
         ba:f5:bb:2e:29:9b:c8:90:28:88:15:89:3f:0f:99:0a:42:72:
         fa:91:a9:33:c9:20:3d:d4:e1:0e:27:3d:1c:26:37:e4:db:40:
         43:0a:7f:71:92:81:8f:c4:ff:f0:ca:9c:a3:a9:e4:0a:69:53:
         2d:c6:6f:8e:77:00:d2:92:7b:94:26:2a:56:59:d1:db:3d:b7:
         a7:17:d7:99:22:15:09:15:de:bb:ec:05:9a:7b:84:b5:13:df:
         af:b6:90:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org