Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/323830343a323633343a3a2f33322d3334203d3e20323634333332.roa
File:                     323830343a323633343a3a2f33322d3334203d3e20323634333332.roa (raw, json)
Hash identifier:          IyV7pxG8SDhuUE3bjk8kfKUjPPvL+A43130V+a3MI1k=
Subject key identifier:   2D:9D:36:1F:9A:E3:6E:0D:4B:9A:96:51:9F:2D:EC:B7:2E:13:07:82
Certificate issuer:       /CN=F427EBED04EEA9E14CD726DEB3CC299993C1802E
Certificate serial:       1BEACF4AF8F3091D92CB94DC2FB51CB068BDAAA2
Authority key identifier: F4:27:EB:ED:04:EE:A9:E1:4C:D7:26:DE:B3:CC:29:99:93:C1:80:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/323830343a323633343a3a2f33322d3334203d3e20323634333332.roa
Signing time:             Wed 08 Mar 2023 14:00:00 +0000
ROA not before:           Wed 08 Mar 2023 13:55:00 +0000
ROA not after:            Wed 06 Mar 2024 14:00:00 +0000
asID:                     264332
IP address blocks:        2804:2634::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ea:cf:4a:f8:f3:09:1d:92:cb:94:dc:2f:b5:1c:b0:68:bd:aa:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F427EBED04EEA9E14CD726DEB3CC299993C1802E
        Validity
            Not Before: Mar  8 13:55:00 2023 GMT
            Not After : Mar  6 14:00:00 2024 GMT
        Subject: CN=2D9D361F9AE36E0D4B9A96519F2DECB72E130782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:61:de:b8:04:97:c3:b0:3a:16:a8:b5:a4:46:
                    48:68:a0:0e:c8:2b:98:ca:74:49:3a:41:e4:b1:84:
                    7d:01:53:83:8b:d4:3a:54:9a:15:b1:86:93:a9:2d:
                    15:a2:9d:82:72:17:66:d8:5d:91:df:7c:41:a9:07:
                    1a:93:99:11:ac:86:c4:de:f4:3f:6b:37:95:08:98:
                    bd:1e:61:38:b2:13:74:72:f5:1e:e7:c2:15:66:40:
                    26:47:8a:13:00:f1:c2:cd:b9:d8:90:11:67:0d:17:
                    3e:d3:81:30:cc:00:c2:1b:7a:c8:f5:7d:c6:5f:b2:
                    27:58:2b:5e:31:1c:4f:30:4d:68:fa:ad:7e:45:a6:
                    07:1b:84:dd:b8:58:ec:24:09:6b:81:28:77:3a:0b:
                    a9:fb:7e:91:70:da:a4:0f:a2:72:5d:a9:98:b4:05:
                    83:eb:c5:15:a5:90:4d:4a:a4:f7:18:b2:5f:6c:ae:
                    67:fd:47:37:77:4a:af:0c:ff:10:5f:2f:0d:a2:05:
                    86:99:cf:81:e6:d3:c3:64:d4:86:a8:b1:56:72:0d:
                    14:fe:89:10:65:65:47:fb:44:94:f6:60:57:ac:f8:
                    2a:72:60:e0:38:b6:95:85:32:d5:14:a4:2f:ff:ae:
                    92:45:01:f5:ea:2b:1b:5d:3c:51:ea:d0:82:87:9f:
                    ea:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9D:36:1F:9A:E3:6E:0D:4B:9A:96:51:9F:2D:EC:B7:2E:13:07:82
            X509v3 Authority Key Identifier:
                keyid:F4:27:EB:ED:04:EE:A9:E1:4C:D7:26:DE:B3:CC:29:99:93:C1:80:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/323830343a323633343a3a2f33322d3334203d3e20323634333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2634::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:fe:49:19:62:eb:46:5e:f1:13:f3:6d:bc:93:ff:1a:6c:c9:
         ee:cd:ce:2d:8c:c2:0e:0d:ae:82:34:9d:04:85:ac:d7:56:dc:
         99:ed:64:5a:d0:1c:46:79:0f:29:71:3b:a4:48:9b:5c:03:ed:
         4f:2d:d7:74:e4:9f:08:c7:ce:2b:e9:13:6a:c1:d7:6e:65:86:
         b3:db:97:e5:d0:c4:69:5c:6f:6a:21:63:a1:92:a5:d8:6b:32:
         00:78:32:76:56:97:93:dd:49:93:27:67:06:39:87:ea:43:f5:
         76:ea:ea:48:38:b8:7d:be:5d:7e:7e:ca:2a:58:4c:70:07:4d:
         28:68:7e:1d:93:50:43:18:ef:e2:e1:cf:1a:a9:47:80:74:47:
         04:db:af:de:56:a5:d1:fe:38:a0:f2:7b:72:3b:03:76:f4:3d:
         17:db:1f:49:73:39:6e:92:3d:be:5f:bd:2a:56:e9:05:a7:2b:
         d6:28:6f:30:b8:1a:59:f9:2e:cc:8f:fe:84:13:fa:58:a7:40:
         ff:33:45:8d:68:78:d6:a2:f0:f0:6c:42:1c:b6:da:c0:9f:af:
         36:ba:5a:94:1c:3d:e5:0f:a1:50:dc:52:a7:ed:8a:fe:b1:a3:
         0a:98:29:24:33:f4:61:39:fa:29:9e:54:66:e1:7c:9b:80:73:
         af:24:46:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org