Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/323830343a323633343a323130303a3a2f34342d3434203d3e20323634333332.roa
File:                     323830343a323633343a323130303a3a2f34342d3434203d3e20323634333332.roa (raw, json)
Hash identifier:          ErmwQPMxofK976ZXlBebnOvviFlO9NUa1vsGM1cF7mE=
Subject key identifier:   3B:77:B9:F4:6D:98:DE:5F:9D:D6:8A:58:3C:ED:78:E9:98:FF:26:5C
Certificate issuer:       /CN=F427EBED04EEA9E14CD726DEB3CC299993C1802E
Certificate serial:       365F60B699B0246D217223B5CE8917A0BB327F10
Authority key identifier: F4:27:EB:ED:04:EE:A9:E1:4C:D7:26:DE:B3:CC:29:99:93:C1:80:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/323830343a323633343a323130303a3a2f34342d3434203d3e20323634333332.roa
Signing time:             Wed 08 Mar 2023 15:00:00 +0000
ROA not before:           Wed 08 Mar 2023 14:55:00 +0000
ROA not after:            Wed 06 Mar 2024 15:00:00 +0000
asID:                     264332
IP address blocks:        2804:2634:2100::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:5f:60:b6:99:b0:24:6d:21:72:23:b5:ce:89:17:a0:bb:32:7f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F427EBED04EEA9E14CD726DEB3CC299993C1802E
        Validity
            Not Before: Mar  8 14:55:00 2023 GMT
            Not After : Mar  6 15:00:00 2024 GMT
        Subject: CN=3B77B9F46D98DE5F9DD68A583CED78E998FF265C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b4:04:29:9c:5d:78:c5:57:59:24:67:bc:c2:
                    69:63:96:10:b0:0d:04:1a:59:df:2d:b3:f7:f8:a2:
                    17:d9:22:f2:8f:65:cb:26:d9:c1:69:e1:0e:9e:2c:
                    2d:d5:79:49:eb:44:a0:75:93:6f:47:18:1f:36:0f:
                    71:bd:a4:6b:bd:d6:bf:85:90:8f:29:a7:68:d7:c0:
                    ab:32:e9:93:91:c4:34:8e:40:52:a2:7d:35:1f:02:
                    45:be:c4:35:14:9e:dc:bf:de:48:16:de:b1:00:26:
                    99:4f:ef:d9:54:6a:ee:ba:0c:52:b3:b4:df:b9:7f:
                    e9:94:4c:f3:4e:60:94:8a:f1:82:bc:cd:4b:f0:a7:
                    c8:89:3b:d9:11:89:7f:16:72:1a:d4:f3:4a:a4:e6:
                    05:b6:55:03:90:4f:f2:09:51:de:65:70:48:b5:53:
                    1b:9a:e1:db:00:04:be:c7:31:2e:6a:f8:36:ba:b2:
                    71:2c:e5:90:a2:64:12:a6:be:2f:92:17:8b:75:18:
                    ac:f2:c8:56:ad:4d:8c:47:fb:8a:2f:47:28:0d:6a:
                    e9:e9:ca:f7:d0:dc:14:8c:ce:2b:81:3f:4b:37:3c:
                    74:18:6f:28:a6:ff:36:96:29:ea:06:d7:38:98:43:
                    10:b2:b0:2b:74:9b:87:36:6b:9a:1d:3e:c9:2d:b3:
                    37:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:77:B9:F4:6D:98:DE:5F:9D:D6:8A:58:3C:ED:78:E9:98:FF:26:5C
            X509v3 Authority Key Identifier:
                keyid:F4:27:EB:ED:04:EE:A9:E1:4C:D7:26:DE:B3:CC:29:99:93:C1:80:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/323830343a323633343a323130303a3a2f34342d3434203d3e20323634333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2634:2100::/44

    Signature Algorithm: sha256WithRSAEncryption
         bb:6d:fb:c0:a8:dd:f9:13:cb:34:be:8d:9b:d5:e5:a7:a2:e5:
         74:4d:b3:8d:75:b0:68:73:57:b3:ea:10:78:3a:c6:a3:27:e0:
         db:60:4b:91:a8:0b:6a:fe:18:d7:c5:be:2e:a3:68:1c:a5:19:
         46:e3:61:44:36:d6:04:70:00:89:49:01:c4:ec:ad:cd:57:82:
         fb:97:66:39:20:f6:92:7f:78:09:cb:78:61:8f:96:1e:05:5d:
         2c:97:b2:22:75:e3:ed:c6:79:cf:3f:a3:f2:2d:c4:e8:07:de:
         41:2f:b9:cc:2c:d9:2d:10:e7:b8:5b:63:54:77:97:f4:2a:fd:
         bb:49:4d:4e:c8:91:d0:38:2f:7e:7c:3b:46:16:ee:e3:5b:9b:
         41:c6:9e:2e:49:4e:e3:f9:07:19:a3:fd:e0:c1:fc:2c:96:b1:
         fe:7c:34:3e:04:94:ab:be:94:dc:53:67:b7:d4:8b:1d:7c:03:
         28:dc:5e:dc:9a:92:5c:3f:20:8a:7c:65:f3:fb:05:a8:9c:a6:
         52:ff:e1:49:d9:66:7e:77:91:26:75:80:b4:46:d1:e7:86:05:
         93:4f:dc:a5:6b:3c:c6:d9:7b:df:df:b2:c1:b7:f4:9e:c3:45:
         09:7f:ae:22:e0:59:47:0d:50:02:9b:0a:89:11:45:c1:97:86:
         b0:5a:ee:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org