Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/0/323830343a386364343a3a2f33322d3332203d3e20323733333136.roa
File:                     323830343a386364343a3a2f33322d3332203d3e20323733333136.roa (raw, json)
Hash identifier:          LM1jRq2LQgaTfMONjL19ps7UKwDFm8pvd2f12UtyFgk=
Subject key identifier:   4D:5B:BF:F5:42:0D:42:C6:41:8D:1C:DD:10:F3:09:27:6B:F0:5B:D0
Certificate issuer:       /CN=F2AF358E38DAD66120C87DB6C1201E9E226E2647
Certificate serial:       6FCAB9A34BF4182CA451CA7C28D6C22671E1AECF
Authority key identifier: F2:AF:35:8E:38:DA:D6:61:20:C8:7D:B6:C1:20:1E:9E:22:6E:26:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2AF358E38DAD66120C87DB6C1201E9E226E2647.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/0/323830343a386364343a3a2f33322d3332203d3e20323733333136.roa
Signing time:             Thu 15 Feb 2024 11:47:23 +0000
ROA not before:           Thu 15 Feb 2024 11:42:23 +0000
ROA not after:            Thu 13 Feb 2025 11:47:23 +0000
asID:                     273316
IP address blocks:        2804:8cd4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ca:b9:a3:4b:f4:18:2c:a4:51:ca:7c:28:d6:c2:26:71:e1:ae:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2AF358E38DAD66120C87DB6C1201E9E226E2647
        Validity
            Not Before: Feb 15 11:42:23 2024 GMT
            Not After : Feb 13 11:47:23 2025 GMT
        Subject: CN=4D5BBFF5420D42C6418D1CDD10F309276BF05BD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:50:db:e4:c6:45:69:85:58:a0:30:ec:a7:78:
                    a9:55:09:e5:84:2c:60:5b:76:0d:d7:f6:67:34:47:
                    ab:ed:78:1e:27:5c:0e:d5:22:06:41:26:24:55:53:
                    aa:87:44:ec:45:9e:22:ae:df:46:85:34:78:7d:45:
                    7f:fa:fd:6e:c0:5e:8a:ee:cc:6e:a5:48:36:be:4c:
                    e0:1f:ad:16:76:74:2f:db:a3:fd:b4:77:c5:4c:de:
                    15:d9:8d:4a:f0:c4:66:ec:17:1d:b0:d7:88:b2:f7:
                    69:3e:e2:be:98:d1:45:32:4b:fb:e4:30:b8:7d:be:
                    9e:52:ae:4a:64:e5:6a:d9:4f:d5:fd:93:48:3e:4f:
                    04:dc:37:88:b7:10:00:54:a1:9a:7d:ff:a0:aa:1a:
                    5d:ec:fc:b7:2f:d1:be:b7:bb:90:73:ab:b4:df:5b:
                    e8:1a:7a:61:2c:88:20:d8:9a:fe:dc:0e:3c:18:ce:
                    57:2d:db:6f:d7:72:31:1e:77:ed:05:9e:7e:94:a3:
                    79:60:06:ab:78:37:6f:03:c1:54:d2:9d:71:36:f7:
                    7e:fe:81:40:e6:3a:8a:f0:2a:cd:0e:ce:bd:b9:b6:
                    97:31:17:16:1a:54:65:56:97:92:f3:9b:d7:fe:d4:
                    30:93:f4:bf:a3:f0:a3:e9:c5:c3:35:e3:b4:d5:2d:
                    31:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5B:BF:F5:42:0D:42:C6:41:8D:1C:DD:10:F3:09:27:6B:F0:5B:D0
            X509v3 Authority Key Identifier:
                keyid:F2:AF:35:8E:38:DA:D6:61:20:C8:7D:B6:C1:20:1E:9E:22:6E:26:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/0/F2AF358E38DAD66120C87DB6C1201E9E226E2647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2AF358E38DAD66120C87DB6C1201E9E226E2647.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/0/323830343a386364343a3a2f33322d3332203d3e20323733333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8cd4::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:67:c4:b5:d2:be:4b:6c:84:46:2d:c9:63:27:c8:c9:86:2d:
         b8:33:1b:79:4c:b7:d2:d1:60:62:52:34:5b:80:19:7b:af:eb:
         35:3c:2e:2c:74:2d:ea:92:16:21:0f:28:02:19:0b:fb:c3:fd:
         df:cd:e0:b3:6a:0d:a7:57:d7:e9:92:b0:92:87:7d:bb:1b:84:
         2b:f0:44:07:4c:05:19:cb:9d:9d:f0:45:f5:95:55:f1:c3:89:
         78:9f:03:ca:b1:b7:3d:f6:c6:34:1a:6f:e0:62:25:2f:51:6a:
         89:c0:37:5d:12:ec:f2:c0:e1:f9:2e:49:4b:70:30:1b:8d:6e:
         6a:d8:d8:6b:2a:ed:47:12:36:a7:87:47:04:7b:b8:d4:2e:71:
         44:7e:77:6f:bb:b8:9c:55:45:6c:68:fe:a2:4d:c8:8f:c9:e1:
         23:fe:08:4b:93:b8:3b:c1:41:e9:ba:ba:3e:20:0e:89:09:b2:
         68:dd:a7:59:f3:a8:e2:ed:f6:35:fb:70:34:4c:66:7f:1b:9c:
         2d:c6:b5:bc:0d:92:3e:ac:76:b1:3e:02:d3:c2:7f:55:fd:39:
         45:1d:b7:74:4c:09:62:e1:43:b4:1f:56:5c:64:67:30:ce:44:
         c9:10:75:9b:2b:1d:c1:59:b9:ce:d9:f0:65:68:18:b2:d7:b8:
         0c:9b:0c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org