Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a3a2f33322d3332203d3e20323730343430.roa
File:                     323830343a366330343a3a2f33322d3332203d3e20323730343430.roa (raw, json)
Hash identifier:          2SVEHF28HSWmMLs4YOyzUUFcSvJxiLZsmbePyPyKMxI=
Subject key identifier:   5D:65:92:F6:5C:99:6A:D4:46:A0:EA:59:18:C6:64:64:3B:8C:DB:9C
Certificate issuer:       /CN=F47E33E6B433A862A7529799B6262FD3B97EBA14
Certificate serial:       4CBDC218B1AE0EAB9412F3DC611F0590D7A54827
Authority key identifier: F4:7E:33:E6:B4:33:A8:62:A7:52:97:99:B6:26:2F:D3:B9:7E:BA:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F47E33E6B433A862A7529799B6262FD3B97EBA14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a3a2f33322d3332203d3e20323730343430.roa
Signing time:             Thu 16 Mar 2023 20:45:57 +0000
ROA not before:           Thu 16 Mar 2023 20:40:57 +0000
ROA not after:            Thu 14 Mar 2024 20:45:57 +0000
asID:                     270440
IP address blocks:        2804:6c04::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:bd:c2:18:b1:ae:0e:ab:94:12:f3:dc:61:1f:05:90:d7:a5:48:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F47E33E6B433A862A7529799B6262FD3B97EBA14
        Validity
            Not Before: Mar 16 20:40:57 2023 GMT
            Not After : Mar 14 20:45:57 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:61:7e:3b:ba:df:c5:08:a8:91:2e:aa:37:69:
                    52:b5:db:6a:25:94:35:32:ba:80:cf:5b:9d:d5:dc:
                    de:3e:d6:41:9d:13:f3:f3:1c:4f:c2:46:7d:99:d2:
                    e3:59:d0:5e:51:01:01:8c:9e:be:37:c8:4e:96:f6:
                    01:db:f0:07:49:a5:63:a7:b4:cb:b6:1b:33:9a:01:
                    91:37:35:16:63:0c:e8:f6:96:c0:52:ef:81:90:04:
                    0a:66:3b:90:e7:3f:87:f5:bb:e2:5b:a0:eb:6d:b1:
                    81:20:6c:25:92:e5:c1:ba:17:4a:99:c0:ef:f3:4d:
                    7b:3d:ad:f9:b0:3e:3a:63:a5:7f:36:db:21:07:32:
                    07:3a:43:e5:0e:50:76:c7:07:0b:9e:6d:1e:14:c3:
                    98:36:1d:ab:83:70:6c:88:18:22:de:4d:65:e8:e6:
                    17:8c:ed:9f:51:23:b4:ca:a7:45:ad:48:22:c9:92:
                    b3:f1:e2:d4:64:27:9d:70:e2:e9:81:ff:48:ee:84:
                    93:a3:60:67:00:02:87:37:73:80:b7:d9:2c:04:dd:
                    22:22:b9:41:3d:be:cd:e9:6a:57:00:b1:05:c1:12:
                    c2:88:73:8f:37:7f:94:bd:8c:fa:3f:51:fa:60:ac:
                    c9:1f:9f:dd:cd:dc:ca:8a:f8:88:ca:60:48:06:9b:
                    22:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:65:92:F6:5C:99:6A:D4:46:A0:EA:59:18:C6:64:64:3B:8C:DB:9C
            X509v3 Authority Key Identifier:
                keyid:F4:7E:33:E6:B4:33:A8:62:A7:52:97:99:B6:26:2F:D3:B9:7E:BA:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/F47E33E6B433A862A7529799B6262FD3B97EBA14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F47E33E6B433A862A7529799B6262FD3B97EBA14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a3a2f33322d3332203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c04::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:4b:8e:01:a0:cc:c0:b7:b7:41:cc:85:53:b3:2e:55:a9:b4:
         49:3a:06:f4:f4:cd:41:47:59:19:f1:a4:44:f1:97:00:01:46:
         9d:f9:5a:b9:c9:3c:8c:81:79:a8:17:6f:91:61:3d:6d:6c:61:
         0a:a2:db:b0:08:1a:d4:c3:5c:a2:d2:be:6d:80:98:3d:00:20:
         40:77:7e:9a:5f:8a:bb:2a:07:ac:4d:03:f4:c1:4d:6b:b1:83:
         ce:65:96:ca:28:65:4c:30:5e:a4:45:16:c9:65:35:a1:81:75:
         73:7d:14:9a:87:11:3d:d9:f2:15:3c:28:ef:86:be:a6:67:e7:
         f6:2c:6f:e0:96:f2:0f:86:72:cc:b9:6b:b9:a7:76:c7:5d:dd:
         1f:1f:1e:2c:d4:68:b5:55:2c:51:9e:48:9d:0a:43:7d:bc:b5:
         85:b2:00:96:75:9c:83:ae:93:eb:a0:8e:5c:78:02:4e:74:b9:
         cf:10:2d:d8:e0:92:0a:4e:33:c6:e6:7d:f5:78:a0:5b:38:cc:
         24:1b:1b:f6:a3:c8:33:40:86:5f:27:b5:22:a0:95:54:63:65:
         d9:c4:0e:73:98:42:d3:be:91:58:2f:3f:2c:ff:29:ee:fc:e2:
         96:b0:17:d5:7b:e3:c7:ff:97:1d:44:1b:0e:79:ee:91:7c:46:
         23:5c:06:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org