Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/323830343a313165303a3a2f33322d3332203d3e20323633343435.roa
File:                     323830343a313165303a3a2f33322d3332203d3e20323633343435.roa (raw, json)
Hash identifier:          NsaAooxER4JLUfc7Z/y+gQIp36/iRDOLH/1o3Cc/f0I=
Subject key identifier:   84:05:53:8E:CC:3B:0D:C2:65:38:6C:49:F1:8A:B3:CF:2D:F5:7C:40
Certificate issuer:       /CN=F1076108B5AD0183155EEC96C47E216B36ED588E
Certificate serial:       3B4145A0DCFCBFAFEBE2FACB25E29348DD325012
Authority key identifier: F1:07:61:08:B5:AD:01:83:15:5E:EC:96:C4:7E:21:6B:36:ED:58:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1076108B5AD0183155EEC96C47E216B36ED588E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/323830343a313165303a3a2f33322d3332203d3e20323633343435.roa
Signing time:             Thu 04 Jan 2024 14:41:43 +0000
ROA not before:           Thu 04 Jan 2024 14:36:43 +0000
ROA not after:            Thu 02 Jan 2025 14:41:43 +0000
asID:                     263445
IP address blocks:        2804:11e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:41:45:a0:dc:fc:bf:af:eb:e2:fa:cb:25:e2:93:48:dd:32:50:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1076108B5AD0183155EEC96C47E216B36ED588E
        Validity
            Not Before: Jan  4 14:36:43 2024 GMT
            Not After : Jan  2 14:41:43 2025 GMT
        Subject: CN=8405538ECC3B0DC265386C49F18AB3CF2DF57C40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2b:a9:b7:2f:87:98:be:2b:1b:b6:13:0b:12:
                    1d:e8:02:09:5c:1e:6c:28:fd:fd:70:43:c9:47:33:
                    27:b5:f1:39:db:a7:bb:3a:f3:bb:4e:fe:24:6a:c9:
                    04:2d:3d:21:da:63:25:02:f5:3c:f5:8f:78:17:bc:
                    a7:d3:7f:fe:c9:37:de:ea:1b:1c:62:29:70:b8:45:
                    d1:10:c1:d5:52:77:02:8d:d7:21:cb:29:d5:04:c6:
                    6a:2d:d6:e4:c5:65:ea:92:bd:de:d3:8e:ff:45:98:
                    f6:99:73:1f:2b:0f:0c:dc:65:25:20:2c:dc:ac:ed:
                    f9:45:b6:09:bd:0f:21:c2:bf:a3:f8:77:65:2c:0d:
                    7a:ec:13:63:b6:3d:2c:cf:e3:a5:97:a6:2d:22:d5:
                    7e:4b:e2:ad:01:f0:52:d7:2e:ff:92:9a:13:fc:3f:
                    f3:be:cd:58:e7:db:e2:57:ce:b9:05:51:4c:21:ee:
                    e3:73:ea:4c:dd:0b:42:37:95:7c:22:22:68:d0:f7:
                    c6:9d:cb:70:c2:45:8b:25:f9:c0:c3:26:26:f5:0d:
                    4d:61:63:50:41:29:9b:a9:ab:0b:b3:91:eb:15:c7:
                    57:1b:b1:9d:7b:5f:4f:b5:38:bc:c4:63:c3:84:0f:
                    ab:8d:a3:0c:75:00:38:ca:ca:ce:6a:02:4c:ef:21:
                    05:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:05:53:8E:CC:3B:0D:C2:65:38:6C:49:F1:8A:B3:CF:2D:F5:7C:40
            X509v3 Authority Key Identifier:
                keyid:F1:07:61:08:B5:AD:01:83:15:5E:EC:96:C4:7E:21:6B:36:ED:58:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/F1076108B5AD0183155EEC96C47E216B36ED588E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1076108B5AD0183155EEC96C47E216B36ED588E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/323830343a313165303a3a2f33322d3332203d3e20323633343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:11e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:06:19:5a:d4:7b:97:51:ab:c6:fa:87:aa:15:cb:79:49:f0:
         85:ca:f1:3a:0e:1e:b1:e9:5b:2c:36:71:94:41:c0:fb:f2:7f:
         78:d5:ac:e6:67:32:a9:5b:4c:5c:da:ae:f1:39:a1:ba:68:6d:
         00:18:05:d2:d4:db:4a:34:fd:90:e9:c8:1c:58:d6:13:2e:fc:
         a6:ba:34:62:db:2a:9d:82:75:e8:66:96:de:88:c9:3c:6e:f9:
         78:76:4f:54:5b:40:06:29:b1:f3:a3:6a:41:be:94:f7:ee:a5:
         d0:d1:ef:ff:2f:d9:29:cb:31:1a:cb:9d:1a:95:8a:18:14:b5:
         e5:32:d2:90:de:49:cf:f1:f9:cb:76:d0:5b:9e:e8:77:a1:d4:
         17:d6:92:34:22:5d:19:65:df:df:00:8e:5f:6d:e2:39:4e:b8:
         e3:4a:bf:c7:f9:f7:4f:c8:90:b8:f1:a1:1e:0a:25:77:f8:1a:
         89:49:a6:7f:fb:d8:2c:1d:1b:5a:56:f4:1c:51:54:eb:d4:83:
         dd:80:59:ba:9f:cd:18:2f:9c:7d:00:38:d2:e8:07:a4:da:44:
         cc:79:28:19:39:42:46:ba:54:ca:06:e3:b5:e9:0c:f7:27:11:
         12:8b:c9:dc:d0:39:8d:57:94:45:30:6c:45:ed:da:71:fc:41:
         ba:da:f2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org