Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/323830343a346638343a3a2f33342d3334203d3e20323638333331.roa
File:                     323830343a346638343a3a2f33342d3334203d3e20323638333331.roa (raw, json)
Hash identifier:          eqh4wPtsOuL5hoe4AMVs/91CsQONJC8Vic3H0n/7w68=
Subject key identifier:   F9:A4:16:9E:BE:04:D5:FB:E0:AB:F3:12:EC:4A:D6:70:4C:A0:72:91
Certificate issuer:       /CN=FB55391412BDE10B53428AACB9E329201BF68D11
Certificate serial:       7358BE841537193DA738C59464EEB0B9C973A29B
Authority key identifier: FB:55:39:14:12:BD:E1:0B:53:42:8A:AC:B9:E3:29:20:1B:F6:8D:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB55391412BDE10B53428AACB9E329201BF68D11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/323830343a346638343a3a2f33342d3334203d3e20323638333331.roa
Signing time:             Wed 28 Feb 2024 18:43:06 +0000
ROA not before:           Wed 28 Feb 2024 18:38:06 +0000
ROA not after:            Wed 26 Feb 2025 18:43:06 +0000
asID:                     268331
IP address blocks:        2804:4f84::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:58:be:84:15:37:19:3d:a7:38:c5:94:64:ee:b0:b9:c9:73:a2:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB55391412BDE10B53428AACB9E329201BF68D11
        Validity
            Not Before: Feb 28 18:38:06 2024 GMT
            Not After : Feb 26 18:43:06 2025 GMT
        Subject: CN=F9A4169EBE04D5FBE0ABF312EC4AD6704CA07291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9a:80:c6:b1:d5:71:1d:35:a4:ea:4d:fa:0d:
                    a0:4e:68:4c:65:2f:d9:5b:73:f3:ed:17:d1:38:4c:
                    8f:15:4d:a6:a8:f3:50:92:2d:54:29:b0:78:9d:5d:
                    17:af:15:f4:76:b8:f3:d7:0a:9d:7f:4a:26:ad:3e:
                    20:0a:9e:2b:b8:b4:c6:18:77:20:14:23:ba:52:61:
                    94:4e:72:9d:b5:81:10:6b:51:8e:31:2b:21:5f:fe:
                    bd:15:42:04:c6:ab:18:e8:a9:ca:28:39:37:b3:dd:
                    68:57:09:ef:28:d9:18:df:ec:09:5a:a6:f1:f9:96:
                    2a:2a:2b:0a:45:30:31:4e:ad:4e:ac:d2:fc:ba:11:
                    50:c4:fc:d0:d1:56:9c:f5:39:32:ca:ae:44:95:2d:
                    d3:bb:46:11:e7:7f:75:f1:27:39:83:f6:c2:38:18:
                    be:2c:d4:64:94:8a:76:c8:53:e8:18:a6:7a:2c:c5:
                    a8:2c:fc:3e:bf:8e:75:76:34:ca:42:b4:60:d0:2a:
                    f8:31:d9:7d:d3:e7:15:7d:62:5a:b0:6c:ca:94:b6:
                    24:15:77:b3:07:b9:50:bf:b3:bf:84:a4:db:4f:a2:
                    ee:3c:e6:f8:77:32:84:1d:a7:cf:d6:47:16:a6:77:
                    f1:02:bd:09:e6:14:9f:e7:f1:44:60:5e:e0:32:62:
                    3b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A4:16:9E:BE:04:D5:FB:E0:AB:F3:12:EC:4A:D6:70:4C:A0:72:91
            X509v3 Authority Key Identifier:
                keyid:FB:55:39:14:12:BD:E1:0B:53:42:8A:AC:B9:E3:29:20:1B:F6:8D:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/FB55391412BDE10B53428AACB9E329201BF68D11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB55391412BDE10B53428AACB9E329201BF68D11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/323830343a346638343a3a2f33342d3334203d3e20323638333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f84::/34

    Signature Algorithm: sha256WithRSAEncryption
         4d:20:74:0c:2a:d7:4d:92:1a:3a:04:93:9f:9d:37:8c:50:4c:
         4d:06:52:3b:1e:bc:ad:4f:ee:0e:d3:cb:86:3b:ae:f7:ee:cf:
         a3:51:0d:eb:bf:81:bc:28:6b:3b:10:52:50:c6:2d:c4:04:17:
         a2:a8:06:49:eb:f3:7d:88:51:75:92:9e:d0:3b:dc:f4:59:34:
         6a:d3:73:3c:c5:6b:5f:35:0f:ce:18:95:c1:7e:a9:cb:15:d6:
         8b:73:d2:48:99:5e:31:3a:36:e8:b8:f6:44:b0:b6:6e:6d:7d:
         d4:3f:2b:77:bd:2c:ee:b4:4c:5b:9b:13:39:32:65:f7:c3:ca:
         c0:28:e0:6b:23:fd:03:d6:b1:9e:07:a2:d5:52:7e:18:f3:2d:
         5b:95:56:71:43:f4:53:e2:d1:37:36:a3:05:b8:52:a8:48:ca:
         14:aa:b5:b3:b4:fd:9d:be:b2:71:2c:39:6f:f2:03:67:ba:a3:
         c1:ab:35:ec:90:d2:92:4f:d1:f5:b1:f8:cf:a4:b3:6e:97:dc:
         ee:3f:26:5d:c3:e7:8b:ad:0f:56:7f:43:1f:d7:c9:86:cc:e4:
         0c:4f:d3:56:5d:99:be:b5:7d:aa:8c:68:91:1d:b5:6e:b0:b8:
         dc:35:e8:40:51:65:f5:1f:9c:3d:31:f1:3d:06:fa:07:23:82:
         fe:0e:cf:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org