Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/323830343a373034343a383030303a3a2f33342d3334203d3e20323730373136.roa
File:                     323830343a373034343a383030303a3a2f33342d3334203d3e20323730373136.roa (raw, json)
Hash identifier:          TS3KneGrGK60kn7HuWcKf1YIouN65kFl6uXgAvHGf7I=
Subject key identifier:   89:0F:BC:9E:3A:3F:78:93:77:D8:B6:72:60:48:E7:6E:F3:38:C7:3E
Certificate issuer:       /CN=2F014380139A8673C23E2CF9AF6EDAC4216E1059
Certificate serial:       4F13A58D5134CD3923767BD756BA5CAA9AEF33D1
Authority key identifier: 2F:01:43:80:13:9A:86:73:C2:3E:2C:F9:AF:6E:DA:C4:21:6E:10:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F014380139A8673C23E2CF9AF6EDAC4216E1059.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/323830343a373034343a383030303a3a2f33342d3334203d3e20323730373136.roa
Signing time:             Sun 19 Sep 2021 23:58:38 +0000
ROA not before:           Sun 19 Sep 2021 23:53:38 +0000
ROA not after:            Sun 18 Sep 2022 23:58:38 +0000
asID:                     270716
IP address blocks:        2804:7044:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:13:a5:8d:51:34:cd:39:23:76:7b:d7:56:ba:5c:aa:9a:ef:33:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F014380139A8673C23E2CF9AF6EDAC4216E1059
        Validity
            Not Before: Sep 19 23:53:38 2021 GMT
            Not After : Sep 18 23:58:38 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:29:e2:c9:fb:7f:8e:dc:17:04:5f:d8:91:b1:
                    8a:bb:b5:c0:6f:98:4c:67:8e:97:4e:8b:29:d6:0b:
                    e2:b2:5e:fb:31:05:6e:8a:3e:9c:9d:6c:02:42:2d:
                    2e:0c:9c:42:44:ae:39:58:70:d4:01:82:6b:18:d6:
                    c7:1f:b9:a0:9d:e9:f5:aa:bd:a0:39:cc:9a:61:e8:
                    eb:dd:19:38:ce:33:27:76:04:ef:b6:9f:01:59:18:
                    36:fe:b7:44:8b:22:cc:be:de:a8:1c:95:84:49:8a:
                    52:e4:6e:c0:1b:cc:cb:ea:8f:41:f5:16:7e:9d:98:
                    a6:0d:29:96:d3:cf:2a:b4:15:1c:d5:7e:3c:5b:36:
                    26:34:3f:83:cd:21:86:75:4f:47:db:3c:a0:e5:4c:
                    a5:17:3f:89:eb:bc:e9:1f:60:b0:04:3d:3d:bc:b8:
                    b2:7f:d3:ad:33:17:a9:ff:4d:44:ca:5f:0a:47:bd:
                    c5:57:64:3f:3b:56:11:0a:8b:76:5b:74:1a:44:58:
                    7d:08:ab:07:50:6f:73:e3:2f:ec:20:97:af:8d:e9:
                    08:df:5b:e8:14:87:4d:8c:1f:2e:99:b4:e5:05:bd:
                    20:83:7b:00:5b:2a:26:e5:49:a6:6a:07:26:6f:b0:
                    e8:13:a2:b9:d6:80:44:db:74:b7:bb:aa:e0:77:9e:
                    06:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0F:BC:9E:3A:3F:78:93:77:D8:B6:72:60:48:E7:6E:F3:38:C7:3E
            X509v3 Authority Key Identifier:
                keyid:2F:01:43:80:13:9A:86:73:C2:3E:2C:F9:AF:6E:DA:C4:21:6E:10:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/2F014380139A8673C23E2CF9AF6EDAC4216E1059.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F014380139A8673C23E2CF9AF6EDAC4216E1059.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/323830343a373034343a383030303a3a2f33342d3334203d3e20323730373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7044:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         99:00:ec:0f:51:b8:e9:8f:4f:2c:f7:30:d3:aa:58:59:e3:37:
         13:e8:98:00:c6:d2:12:be:d0:48:11:1d:ff:25:2f:4b:1b:9d:
         0d:80:3b:46:c8:c1:94:25:ac:1a:42:88:a1:22:76:30:a4:ac:
         0c:f9:38:11:4e:47:ae:a3:b4:d2:aa:f5:4c:04:6c:e5:46:97:
         4b:ec:cc:6f:27:59:13:01:71:28:60:75:ba:49:14:3e:0d:e1:
         02:57:44:fd:6f:6f:8e:da:0e:c7:89:e5:a2:3e:91:34:71:ee:
         3a:87:b2:f4:b8:0c:84:94:d0:29:e2:66:e7:e0:25:fb:e0:fb:
         0a:d5:fa:b9:fd:90:e3:12:94:90:13:07:6b:7a:93:e1:78:e7:
         92:6a:16:e4:53:64:83:6f:fb:ee:42:07:82:ff:c4:59:55:3b:
         37:9a:dc:d9:a2:d1:25:fc:4c:22:aa:47:d1:7a:62:a0:eb:50:
         01:55:ad:39:78:7e:48:03:39:7a:b8:a3:4a:fc:66:32:89:3c:
         2b:e2:b1:fb:9b:a9:e9:97:04:d2:41:5b:52:49:1c:20:62:49:
         1a:3b:25:4c:78:89:09:8b:ce:86:b7:7e:b3:e4:33:78:b3:08:
         30:b5:df:6c:7f:83:56:c8:e3:03:22:d8:3c:a2:c2:93:cb:b2:
         6f:ca:97:0f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org