Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/323830343a383865383a643030303a3a2f33362d3336203d3e20323733353638.roa
File:                     323830343a383865383a643030303a3a2f33362d3336203d3e20323733353638.roa (raw, json)
Hash identifier:          aj+9TLldh44NDFO9RzBI37jg97MaAW/Xy7ggiFq/cnM=
Subject key identifier:   D4:2C:6A:D3:35:4B:3F:63:40:B6:59:BE:45:87:6F:44:90:61:B9:F2
Certificate issuer:       /CN=6F4A647AFA002C03109D6A323355E36ABA9C7284
Certificate serial:       730A01CF4FB8261DA7A5A0552D3C996F640A4D9C
Authority key identifier: 6F:4A:64:7A:FA:00:2C:03:10:9D:6A:32:33:55:E3:6A:BA:9C:72:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F4A647AFA002C03109D6A323355E36ABA9C7284.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/323830343a383865383a643030303a3a2f33362d3336203d3e20323733353638.roa
Signing time:             Tue 31 Oct 2023 18:38:58 +0000
ROA not before:           Tue 31 Oct 2023 18:33:58 +0000
ROA not after:            Tue 29 Oct 2024 18:38:58 +0000
asID:                     273568
IP address blocks:        2804:88e8:d000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:0a:01:cf:4f:b8:26:1d:a7:a5:a0:55:2d:3c:99:6f:64:0a:4d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F4A647AFA002C03109D6A323355E36ABA9C7284
        Validity
            Not Before: Oct 31 18:33:58 2023 GMT
            Not After : Oct 29 18:38:58 2024 GMT
        Subject: CN=D42C6AD3354B3F6340B659BE45876F449061B9F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bf:37:2e:1d:7e:7c:d1:cb:a3:da:08:4b:5c:
                    58:d3:7d:57:09:89:36:1c:b8:19:1c:d7:28:51:fc:
                    a3:ce:43:97:f8:10:13:13:bc:64:e3:d6:bd:ee:ea:
                    d0:46:ab:d4:6f:45:a2:98:a8:b7:aa:d9:0a:66:7d:
                    cd:29:b7:95:08:c4:1c:bc:66:19:15:41:60:84:58:
                    b1:23:fc:bd:0f:5c:fb:1b:50:84:8e:4c:8b:05:00:
                    be:ae:8a:ec:ea:05:8a:63:49:3c:15:f7:7f:97:5a:
                    11:a9:18:9c:5a:3e:3f:0b:c2:33:50:5c:a5:0d:0f:
                    2c:25:ff:e6:fc:5b:9f:df:6a:62:1d:b0:74:bd:06:
                    9e:43:2d:f4:02:d4:f4:93:50:f1:64:8c:6a:e4:bb:
                    d6:47:5e:c0:6d:4d:96:84:19:84:3d:88:3b:66:ca:
                    a5:b4:3d:95:3e:f4:9c:69:5e:b8:00:2f:67:37:16:
                    1a:08:1b:48:f9:36:17:1a:bd:cb:a9:d1:0b:9a:43:
                    cb:b4:38:f8:64:be:2f:a2:4f:6f:33:2a:04:78:78:
                    1d:d0:4e:0d:0e:75:0f:2d:52:8f:7e:ee:4a:18:51:
                    6f:68:b8:47:21:ba:42:40:d0:75:e2:6c:51:52:f2:
                    b2:20:ea:d6:f2:12:77:bd:d1:62:90:54:e6:eb:69:
                    c8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2C:6A:D3:35:4B:3F:63:40:B6:59:BE:45:87:6F:44:90:61:B9:F2
            X509v3 Authority Key Identifier:
                keyid:6F:4A:64:7A:FA:00:2C:03:10:9D:6A:32:33:55:E3:6A:BA:9C:72:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/6F4A647AFA002C03109D6A323355E36ABA9C7284.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F4A647AFA002C03109D6A323355E36ABA9C7284.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/323830343a383865383a643030303a3a2f33362d3336203d3e20323733353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:88e8:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9d:65:91:ee:3b:fa:83:24:01:ba:03:f4:a2:18:d1:9f:1d:06:
         39:f6:df:c6:5c:d9:8e:d6:07:ba:67:41:15:b9:b7:de:35:c2:
         1e:5b:bc:e1:cf:34:ab:51:51:64:fc:e1:79:cc:20:10:38:c0:
         f3:01:cc:ec:b0:81:ee:b3:b2:3b:db:d5:0d:33:4e:8d:ce:88:
         01:f9:21:52:aa:c3:8d:44:97:09:66:bd:a1:e3:0d:8d:c8:2f:
         c3:da:2c:22:05:21:c8:90:2f:e5:c8:77:8f:7c:ca:40:b3:b0:
         0a:fc:44:9e:46:4c:a3:75:b2:4e:21:e4:1f:db:fd:4d:98:b4:
         46:d1:2b:23:7b:d7:14:ee:65:74:14:a1:ea:dd:4b:8a:5c:84:
         2a:e6:e3:08:12:10:f4:6a:86:94:87:9d:8d:d4:13:2b:ef:f5:
         79:3d:5a:bf:b7:0f:95:6c:12:24:d3:0a:d6:32:06:bc:6d:94:
         05:1b:a4:95:3a:8e:6c:bd:3a:89:97:81:60:e4:b5:91:28:06:
         d7:5e:29:9c:19:7d:ae:52:19:22:bd:ff:99:13:24:19:0c:54:
         ad:d9:21:01:6b:19:86:be:79:ef:ed:82:c3:4e:e5:ff:fe:19:
         5e:81:00:93:37:e4:5e:63:fc:8b:8e:8c:53:01:45:87:13:9a:
         cf:41:92:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org