Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/1/323830343a386566383a383030303a3a2f33332d3333203d3e20323733343539.roa
File:                     323830343a386566383a383030303a3a2f33332d3333203d3e20323733343539.roa (raw, json)
Hash identifier:          +/FSVqiLuUdIFEClVqmaBiWmIy/EGYueLl0l4DEciWU=
Subject key identifier:   42:F6:A1:20:62:D4:6E:2C:84:BB:7E:8A:85:34:F7:D6:A4:4A:38:73
Certificate issuer:       /CN=F47CFE1B713FCFB30846A675DD6E55170E08B272
Certificate serial:       1511A5F17F6E8FDFD92725C8C5A08B66EEEA7183
Authority key identifier: F4:7C:FE:1B:71:3F:CF:B3:08:46:A6:75:DD:6E:55:17:0E:08:B2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F47CFE1B713FCFB30846A675DD6E55170E08B272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/1/323830343a386566383a383030303a3a2f33332d3333203d3e20323733343539.roa
Signing time:             Fri 05 Apr 2024 02:23:04 +0000
ROA not before:           Fri 05 Apr 2024 02:18:04 +0000
ROA not after:            Fri 04 Apr 2025 02:23:04 +0000
asID:                     273459
IP address blocks:        2804:8ef8:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:11:a5:f1:7f:6e:8f:df:d9:27:25:c8:c5:a0:8b:66:ee:ea:71:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F47CFE1B713FCFB30846A675DD6E55170E08B272
        Validity
            Not Before: Apr  5 02:18:04 2024 GMT
            Not After : Apr  4 02:23:04 2025 GMT
        Subject: CN=42F6A12062D46E2C84BB7E8A8534F7D6A44A3873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5b:21:55:1f:04:66:b2:7e:8c:05:b4:8b:f0:
                    d9:33:a3:b5:bf:9f:78:a4:29:98:d6:0d:b8:ab:12:
                    71:85:f6:79:87:72:b0:56:41:1d:70:8e:6b:e2:b7:
                    22:b6:83:04:11:3c:35:f2:c6:1f:df:e5:a6:62:56:
                    3a:d2:7c:0a:a4:23:7d:94:20:3b:34:f8:b2:6e:b8:
                    2b:b5:af:0a:01:fb:be:be:4c:bb:05:0b:79:5f:b2:
                    98:86:76:a2:23:31:87:e1:5a:5e:dc:b2:90:22:f0:
                    0f:84:20:e1:38:cf:b0:c3:40:d0:09:ca:92:67:81:
                    ce:3c:10:23:57:77:3f:a0:a3:13:f8:8d:0b:3c:4a:
                    2c:fc:5f:d9:33:ab:cc:3d:d3:d4:2c:22:5e:c5:8a:
                    28:99:7a:b5:35:b5:c0:c7:d6:70:d1:6b:df:2b:db:
                    8d:71:d1:74:46:9c:c8:50:4d:e2:ef:14:2f:a1:fd:
                    a7:db:f4:47:a1:85:89:89:e1:51:82:d9:f7:9a:f0:
                    0d:f6:9b:02:f6:a9:64:52:7b:c1:fb:1e:40:f4:06:
                    b6:7d:53:bf:fc:d6:8e:79:62:94:22:0f:e8:b0:97:
                    3a:81:eb:39:4a:63:e9:f4:09:62:d7:75:38:57:a9:
                    b6:53:0d:fb:8a:7b:0d:0e:4d:57:9d:78:2b:63:3c:
                    75:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F6:A1:20:62:D4:6E:2C:84:BB:7E:8A:85:34:F7:D6:A4:4A:38:73
            X509v3 Authority Key Identifier:
                keyid:F4:7C:FE:1B:71:3F:CF:B3:08:46:A6:75:DD:6E:55:17:0E:08:B2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/1/F47CFE1B713FCFB30846A675DD6E55170E08B272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F47CFE1B713FCFB30846A675DD6E55170E08B272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/1/323830343a386566383a383030303a3a2f33332d3333203d3e20323733343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ef8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         73:0e:c3:e3:98:38:2b:7e:d4:e2:e9:c0:6c:84:df:f6:4c:8a:
         ac:e6:2a:78:82:26:ac:98:18:76:1f:ed:fa:5b:66:07:76:fc:
         f9:e3:f8:3a:7e:8c:5a:5c:17:1c:d6:3a:c5:f8:b8:c4:8c:31:
         61:bd:ae:88:f2:84:16:2b:14:ef:e2:72:b0:1a:e6:3f:30:25:
         b7:74:29:30:ef:3b:05:89:9e:9b:3f:45:9d:4a:b2:97:db:d2:
         08:13:e8:f0:86:15:3a:75:a9:d2:e8:f1:de:61:df:ed:27:74:
         a1:10:ed:24:16:05:fb:69:4e:d6:ae:ba:36:af:a3:8d:89:b6:
         7a:8d:7d:e9:48:c1:2d:5d:db:18:8e:ea:26:c6:bb:14:d3:9e:
         73:da:18:51:66:ac:d0:93:6d:ea:2c:6c:d4:82:fa:0e:fc:2c:
         b9:aa:5b:22:fb:39:c6:36:3f:44:eb:86:2d:fe:23:9f:e6:28:
         00:47:e0:bc:e4:6b:dc:60:1a:0d:ec:0d:b7:aa:9f:c1:53:d8:
         56:38:61:3a:0d:ce:27:6a:f8:e4:48:ab:f4:8e:ec:29:79:30:
         b9:a0:f2:bc:2a:29:4c:ab:50:47:a9:79:48:bd:07:af:99:65:
         1c:65:88:57:c1:47:3d:cf:77:b1:71:43:62:4b:ea:62:69:b5:
         9a:38:57:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org