Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a383030303a3a2f33332d3333203d3e20323730343430.roa
File:                     323830343a366330343a383030303a3a2f33332d3333203d3e20323730343430.roa (raw, json)
Hash identifier:          WmMO7OBvBAvtFfj4OJLOedv8cj72h2fQfKk53JCWUK0=
Subject key identifier:   0C:9E:9D:08:16:E2:17:2A:2C:FB:BF:9F:E0:0E:8B:AB:47:6B:C8:AB
Certificate issuer:       /CN=F47E33E6B433A862A7529799B6262FD3B97EBA14
Certificate serial:       0DEE661C3C8DCF098A86C89210FA0919AB8FB0D7
Authority key identifier: F4:7E:33:E6:B4:33:A8:62:A7:52:97:99:B6:26:2F:D3:B9:7E:BA:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F47E33E6B433A862A7529799B6262FD3B97EBA14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a383030303a3a2f33332d3333203d3e20323730343430.roa
Signing time:             Thu 16 Mar 2023 20:44:08 +0000
ROA not before:           Thu 16 Mar 2023 20:39:08 +0000
ROA not after:            Thu 14 Mar 2024 20:44:08 +0000
asID:                     270440
IP address blocks:        2804:6c04:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ee:66:1c:3c:8d:cf:09:8a:86:c8:92:10:fa:09:19:ab:8f:b0:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F47E33E6B433A862A7529799B6262FD3B97EBA14
        Validity
            Not Before: Mar 16 20:39:08 2023 GMT
            Not After : Mar 14 20:44:08 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2a:f0:fe:f2:70:62:cd:e6:42:de:56:c7:98:
                    1f:59:3a:1a:39:1a:21:0c:b6:01:52:5d:81:50:74:
                    47:b5:60:25:53:37:ba:0d:3c:df:41:b3:88:1b:24:
                    de:00:92:8e:cd:2b:1e:10:02:58:44:ba:0f:3c:20:
                    ab:55:bc:83:70:e5:3a:5b:ce:06:5c:2a:54:70:a6:
                    82:4b:5b:04:50:45:d6:cc:02:20:4a:1b:30:13:8b:
                    30:19:a7:32:37:44:df:f6:ad:64:20:26:a8:19:cd:
                    00:16:c9:96:ba:71:9c:b5:99:51:60:61:7c:e8:00:
                    23:8d:19:47:99:f8:81:0d:a5:81:e8:c8:91:b2:40:
                    15:46:16:c3:07:39:56:33:95:ad:4f:fa:b7:b2:f0:
                    73:36:ef:d1:0f:e0:e7:b8:55:e4:ec:74:7a:96:17:
                    40:0e:68:d7:a7:de:ec:87:0a:22:fc:c1:9a:4f:0c:
                    7b:02:43:3a:4d:df:38:20:70:26:cb:22:49:5b:50:
                    f0:04:1b:e2:ba:60:50:ea:41:a4:fe:0b:5b:c7:e8:
                    cb:bc:41:b0:0a:12:60:4a:fd:a6:f9:23:5d:2e:9d:
                    33:bf:6a:83:1e:89:0c:43:65:87:39:5d:61:9d:0d:
                    06:72:5a:cb:25:29:90:a9:7c:e4:53:d7:27:4c:1f:
                    45:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9E:9D:08:16:E2:17:2A:2C:FB:BF:9F:E0:0E:8B:AB:47:6B:C8:AB
            X509v3 Authority Key Identifier:
                keyid:F4:7E:33:E6:B4:33:A8:62:A7:52:97:99:B6:26:2F:D3:B9:7E:BA:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/F47E33E6B433A862A7529799B6262FD3B97EBA14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F47E33E6B433A862A7529799B6262FD3B97EBA14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a383030303a3a2f33332d3333203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c04:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a8:9b:67:56:2e:0d:4a:14:66:18:43:fd:67:df:b5:a6:b8:a6:
         fe:ab:05:5a:3c:5c:d7:e3:94:b5:96:43:57:b3:01:d7:88:b7:
         61:8d:3a:98:0f:8c:f4:56:f2:05:42:a7:0a:fe:74:61:95:17:
         5d:16:74:b7:c1:68:b8:54:d1:2d:49:d2:ef:8a:73:52:19:8d:
         d9:38:cb:c4:6a:05:9f:d8:cf:bf:1b:f8:9f:7e:2b:69:b4:eb:
         1e:2c:b8:5a:65:89:08:81:65:6f:2e:10:12:44:c5:22:95:82:
         0e:66:19:42:2d:31:ed:1a:8c:e0:04:e8:80:8f:a3:d8:1a:2f:
         4d:41:91:9d:66:e0:47:5f:6b:79:de:e4:0a:41:d2:3b:c3:f8:
         16:5d:cc:f9:cd:47:25:41:93:c6:1a:71:b2:2d:4e:9d:d4:8e:
         8c:93:2c:3d:fd:ce:05:51:26:e2:2e:fd:20:b7:0c:66:e9:32:
         88:ed:30:51:19:64:91:3e:4a:9c:20:a6:f6:c8:83:52:0c:76:
         c9:eb:0e:81:2a:40:f1:8c:72:57:b8:a7:5c:87:8b:cb:24:29:
         d6:93:87:31:fb:aa:e7:b7:1b:c2:8a:85:d5:3b:fb:96:7a:51:
         27:31:c8:2a:ee:b7:75:7a:dd:12:86:d0:74:a3:ac:93:99:2a:
         8d:d7:dc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:31 2024 by rpki-client on console-ams.rpki-client.org