Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/0/323830343a316363303a3a2f33322d3333203d3e203631363733.roa
File:                     323830343a316363303a3a2f33322d3333203d3e203631363733.roa (raw, json)
Hash identifier:          7ukOtblCQDXTpgamvmXNNPWY37tf39J0xSgWRy+mFBI=
Subject key identifier:   F7:EA:0E:25:16:13:D1:79:E4:C0:6D:16:09:42:A5:51:23:03:65:E8
Certificate issuer:       /CN=47B9FFEDFC0780C912B195ADF6D4F61D344ECC8E
Certificate serial:       1BBE46DE1EFEB9F7FD14FF7FA4149C7FD3D138DA
Authority key identifier: 47:B9:FF:ED:FC:07:80:C9:12:B1:95:AD:F6:D4:F6:1D:34:4E:CC:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47B9FFEDFC0780C912B195ADF6D4F61D344ECC8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/0/323830343a316363303a3a2f33322d3333203d3e203631363733.roa
Signing time:             Mon 20 Nov 2023 14:03:07 +0000
ROA not before:           Mon 20 Nov 2023 13:58:07 +0000
ROA not after:            Mon 18 Nov 2024 14:03:07 +0000
asID:                     61673
IP address blocks:        2804:1cc0::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:be:46:de:1e:fe:b9:f7:fd:14:ff:7f:a4:14:9c:7f:d3:d1:38:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47B9FFEDFC0780C912B195ADF6D4F61D344ECC8E
        Validity
            Not Before: Nov 20 13:58:07 2023 GMT
            Not After : Nov 18 14:03:07 2024 GMT
        Subject: CN=F7EA0E251613D179E4C06D160942A551230365E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ad:5b:fe:5f:be:9f:44:b1:38:8b:ab:fa:20:
                    b8:7a:fc:0f:86:b2:84:41:b8:dc:6d:a4:91:1f:1f:
                    08:ad:16:23:6b:45:0b:04:b2:47:ab:b1:89:c6:3b:
                    a3:99:e7:5b:6b:db:a9:77:c9:40:e2:4e:2f:a7:57:
                    9d:77:2a:2c:24:6e:86:91:53:64:76:d3:bf:f0:39:
                    a7:c2:db:e3:56:22:26:e5:0e:af:a9:ae:f3:5d:d0:
                    10:dc:c5:23:43:80:30:64:68:e7:dd:b3:4a:24:c1:
                    fc:fc:22:cb:fb:89:30:fd:26:78:6f:ac:eb:bf:05:
                    e0:30:48:dd:d4:60:3b:f0:a4:e4:9f:c1:3b:6e:dc:
                    b8:9b:7e:87:da:e1:9d:a3:e3:15:e8:51:3b:4f:0d:
                    d1:80:4b:8d:cc:10:4e:e7:43:bb:65:57:ab:2f:54:
                    e1:52:53:f4:b0:fe:38:9d:c9:7d:f0:8c:59:16:e9:
                    77:ee:aa:8a:40:0a:61:57:89:40:c8:09:a8:8d:d0:
                    c7:5d:1a:36:10:54:d3:ae:ed:3f:9b:79:be:9c:4e:
                    11:d5:ab:9f:76:cf:42:50:0a:7f:04:0b:a8:86:fb:
                    63:27:65:ca:f2:75:61:f9:bd:05:14:ad:31:fb:01:
                    0d:5c:f8:57:9a:c0:27:0a:a8:11:70:21:eb:fa:f1:
                    10:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EA:0E:25:16:13:D1:79:E4:C0:6D:16:09:42:A5:51:23:03:65:E8
            X509v3 Authority Key Identifier:
                keyid:47:B9:FF:ED:FC:07:80:C9:12:B1:95:AD:F6:D4:F6:1D:34:4E:CC:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/0/47B9FFEDFC0780C912B195ADF6D4F61D344ECC8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47B9FFEDFC0780C912B195ADF6D4F61D344ECC8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/0/323830343a316363303a3a2f33322d3333203d3e203631363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:21:5d:93:12:a9:48:14:84:31:e4:19:a9:5e:c6:65:84:b0:
         5c:3c:4f:43:b2:46:74:df:85:7c:04:bd:ec:51:6e:74:76:ed:
         05:2b:f7:ac:77:4f:3f:f1:07:46:a9:67:06:bf:e8:f7:77:db:
         a8:20:c3:cf:9b:26:6b:97:ab:c5:a6:b9:e9:a3:cb:8a:ca:41:
         30:4f:16:c8:7f:fc:cd:db:d2:d7:b4:f2:5a:db:2f:af:53:ae:
         88:c5:54:39:9f:7e:36:78:23:df:68:3a:ab:aa:3a:a2:bf:76:
         03:ca:07:dd:89:ab:27:1e:86:5b:b8:a8:b4:dd:19:5e:b6:b9:
         25:57:6c:3a:4b:85:6f:a8:d3:31:ec:da:c7:1a:b9:c8:94:77:
         e5:de:be:8c:78:35:5e:ba:5b:33:c0:a5:66:de:df:e6:55:31:
         ab:dd:4b:9e:34:5c:ba:1e:40:e3:e6:5f:38:54:68:0d:31:56:
         97:da:ca:8f:e1:c1:14:8c:74:3a:08:f8:0d:9f:5d:78:fe:6a:
         80:cb:56:4d:5d:f6:8e:9f:a6:40:58:1f:c3:a9:aa:11:1a:cc:
         02:33:e3:7d:16:31:9d:83:d9:19:53:49:e6:e5:3f:90:4e:99:
         f1:95:73:b0:ed:c8:39:93:50:2c:c1:fd:20:e3:65:95:15:ce:
         99:55:f1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org