Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/323830343a373536303a633030303a3a2f33352d3335203d3e20323731303432.roa
File:                     323830343a373536303a633030303a3a2f33352d3335203d3e20323731303432.roa (raw, json)
Hash identifier:          daxP6ltWuyHy42uvny8UUi/ZrHkAedqZNyVhGxu9d/8=
Subject key identifier:   F9:54:22:CB:1E:CC:1F:89:4C:FE:E1:F7:B3:49:F1:DC:3F:41:1D:69
Certificate issuer:       /CN=615FAEA4CCDC7F702D4F5FA4C12583956179073A
Certificate serial:       0E8E2F1A42F7FDB76050233C4A3620D5ACE249EA
Authority key identifier: 61:5F:AE:A4:CC:DC:7F:70:2D:4F:5F:A4:C1:25:83:95:61:79:07:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/323830343a373536303a633030303a3a2f33352d3335203d3e20323731303432.roa
Signing time:             Tue 07 Nov 2023 16:19:16 +0000
ROA not before:           Tue 07 Nov 2023 16:14:16 +0000
ROA not after:            Tue 05 Nov 2024 16:19:16 +0000
asID:                     271042
IP address blocks:        2804:7560:c000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:8e:2f:1a:42:f7:fd:b7:60:50:23:3c:4a:36:20:d5:ac:e2:49:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615FAEA4CCDC7F702D4F5FA4C12583956179073A
        Validity
            Not Before: Nov  7 16:14:16 2023 GMT
            Not After : Nov  5 16:19:16 2024 GMT
        Subject: CN=F95422CB1ECC1F894CFEE1F7B349F1DC3F411D69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:00:72:b1:94:43:18:29:37:7f:85:99:e7:ae:
                    3b:07:92:d2:0f:fb:32:74:12:e0:b4:88:e0:ef:29:
                    3b:5d:f7:01:58:55:3a:0b:5e:ac:a7:7c:85:a3:6d:
                    d8:ce:e1:2e:6e:47:60:d6:fc:ba:ac:5a:e9:3a:05:
                    4b:d2:2a:15:6b:35:13:e1:83:69:ec:f1:77:5c:26:
                    68:e5:7d:0c:82:f1:f3:71:72:4f:78:d1:42:3a:b7:
                    c7:85:c7:3b:94:63:2c:73:4a:e6:8c:ef:c2:bf:c0:
                    aa:3a:46:56:8d:d3:69:54:13:62:f1:5a:dd:30:3a:
                    ac:7c:11:c9:6e:77:93:3b:e0:77:23:c2:19:80:21:
                    d9:c2:26:ad:7e:6f:d8:1d:fd:9a:78:bf:0f:16:52:
                    e0:4f:aa:99:af:a2:c6:3f:94:ae:4f:8d:4c:d5:9a:
                    a6:f5:97:ba:aa:03:00:18:44:dc:f8:1b:68:a4:2d:
                    33:cb:4e:54:24:16:bc:c1:e2:aa:bb:0d:fb:14:08:
                    9d:5a:09:0c:02:1c:cb:fe:c7:9b:91:bb:ac:d0:dc:
                    22:1f:49:a0:eb:5b:91:d2:45:a8:b3:23:15:39:7b:
                    8b:73:61:d6:c8:9b:60:c9:b3:cd:4b:79:05:e7:92:
                    b4:2a:95:30:ef:13:83:ac:c9:65:98:51:f3:f4:df:
                    5e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:54:22:CB:1E:CC:1F:89:4C:FE:E1:F7:B3:49:F1:DC:3F:41:1D:69
            X509v3 Authority Key Identifier:
                keyid:61:5F:AE:A4:CC:DC:7F:70:2D:4F:5F:A4:C1:25:83:95:61:79:07:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/323830343a373536303a633030303a3a2f33352d3335203d3e20323731303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7560:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         5d:f2:48:ba:7b:5d:19:79:d8:2b:8e:21:20:96:5f:b1:2b:19:
         f4:90:06:7c:c9:75:44:4f:be:7f:3f:2b:21:cf:27:c4:eb:a7:
         8e:20:be:f1:55:1d:cd:7b:29:1d:d2:25:1d:1b:6a:5e:0a:b7:
         37:21:ad:c3:18:70:17:da:dd:f2:3a:99:69:93:e3:59:11:e2:
         52:6a:53:d6:70:f2:20:61:3f:04:ec:3a:b6:76:e7:f2:cf:b8:
         be:8e:78:9a:1f:fa:c2:00:77:0e:c2:e5:53:5d:4d:a8:46:9b:
         92:cf:7c:1a:35:ec:ab:99:c5:d8:4e:8f:5f:d3:c0:99:ad:d1:
         cd:e1:e8:fe:48:6a:2c:ce:49:d5:49:d1:70:48:1c:71:cb:3c:
         34:9f:2a:a2:8e:25:ac:c5:e0:e5:59:10:d2:77:75:a4:0e:0f:
         a2:95:bf:92:84:14:67:d9:c2:bd:ef:49:f2:fd:e0:bb:85:96:
         47:a7:b9:90:44:36:38:d8:15:20:c4:5f:9f:2e:54:b9:14:4f:
         a7:cb:e5:d8:77:b3:11:6c:74:67:01:ab:a1:e5:c9:51:46:af:
         4a:11:e9:e3:3f:86:c7:f4:13:bf:a6:c2:74:10:a5:0d:43:9f:
         0a:e6:b3:f8:0a:94:a8:4f:d7:b1:b9:10:a5:7e:97:33:d5:78:
         06:23:b9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org