Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/1/323830343a386566383a3a2f33332d3333203d3e20323733343539.roa
File:                     323830343a386566383a3a2f33332d3333203d3e20323733343539.roa (raw, json)
Hash identifier:          0Qtn9VxeCOFIZUJ+G5lYAog7U1xuxWAHzGKd2+v35pA=
Subject key identifier:   09:81:26:56:54:22:F3:EA:30:E7:30:66:67:26:AC:30:0E:5C:95:B8
Certificate issuer:       /CN=F47CFE1B713FCFB30846A675DD6E55170E08B272
Certificate serial:       1A6A868244D2015A8C59DF43A85DD30C7C119875
Authority key identifier: F4:7C:FE:1B:71:3F:CF:B3:08:46:A6:75:DD:6E:55:17:0E:08:B2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F47CFE1B713FCFB30846A675DD6E55170E08B272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/1/323830343a386566383a3a2f33332d3333203d3e20323733343539.roa
Signing time:             Fri 05 Apr 2024 02:23:04 +0000
ROA not before:           Fri 05 Apr 2024 02:18:04 +0000
ROA not after:            Fri 04 Apr 2025 02:23:04 +0000
asID:                     273459
IP address blocks:        2804:8ef8::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:6a:86:82:44:d2:01:5a:8c:59:df:43:a8:5d:d3:0c:7c:11:98:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F47CFE1B713FCFB30846A675DD6E55170E08B272
        Validity
            Not Before: Apr  5 02:18:04 2024 GMT
            Not After : Apr  4 02:23:04 2025 GMT
        Subject: CN=098126565422F3EA30E730666726AC300E5C95B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5b:74:7d:17:2a:77:89:57:0f:c9:13:f9:09:
                    08:1d:73:f8:86:83:70:15:cf:3a:ab:ea:c6:ea:f8:
                    f5:90:34:dd:25:06:43:89:1a:08:8f:2c:ed:27:0d:
                    09:99:8d:3f:1e:9d:20:87:25:a4:6c:3a:43:4f:06:
                    d9:b7:32:67:aa:4e:d6:a5:52:1d:23:c9:46:bd:ad:
                    80:2b:ae:97:3d:79:7c:1d:07:62:ef:f6:07:7a:8d:
                    dc:89:3f:a3:65:15:fa:7b:7d:79:97:97:6a:78:ac:
                    e7:ae:f0:17:1a:bd:89:11:6e:d2:ad:2c:59:17:fa:
                    b1:95:c3:8b:41:41:f6:4d:f1:71:4e:22:2f:6c:3d:
                    69:60:36:ba:a4:67:7f:7e:f8:3a:a9:9b:4f:7a:ce:
                    f5:31:b4:5f:32:9b:1a:6d:07:12:e9:3e:d1:7e:ee:
                    9d:99:f3:c6:96:77:59:7d:4a:30:6a:bb:0b:e0:e6:
                    56:d5:50:23:cc:11:a4:63:ec:c5:31:5f:86:51:c6:
                    32:88:1e:5e:fb:09:12:8e:2e:c2:d6:d5:44:d8:ae:
                    b0:61:c9:c7:57:f0:13:9f:2b:c4:74:d1:12:0d:6e:
                    42:a8:c6:9d:b3:25:ac:35:f0:da:9f:05:30:24:15:
                    3f:88:e8:9f:db:1e:09:c6:12:20:7d:3a:eb:77:04:
                    3c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:81:26:56:54:22:F3:EA:30:E7:30:66:67:26:AC:30:0E:5C:95:B8
            X509v3 Authority Key Identifier:
                keyid:F4:7C:FE:1B:71:3F:CF:B3:08:46:A6:75:DD:6E:55:17:0E:08:B2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/1/F47CFE1B713FCFB30846A675DD6E55170E08B272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F47CFE1B713FCFB30846A675DD6E55170E08B272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/1/323830343a386566383a3a2f33332d3333203d3e20323733343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ef8::/33

    Signature Algorithm: sha256WithRSAEncryption
         a9:32:a4:06:ed:4d:9b:66:a8:37:ce:c2:e7:c3:1b:7d:4c:3a:
         5c:48:85:70:c4:18:27:63:8a:d8:98:18:7d:3b:0c:f0:b5:22:
         6b:86:74:37:82:4f:a2:f9:e8:35:21:80:d3:58:07:20:a7:36:
         39:10:be:11:9f:1b:1e:83:43:30:e8:8b:a1:23:ed:28:bc:57:
         32:9c:84:4f:f3:34:eb:d9:87:25:82:82:cf:d5:56:59:26:ca:
         0b:4d:71:24:28:09:da:3f:6c:b0:d5:04:c9:12:bc:0a:1a:46:
         1f:ba:c7:1f:02:1d:79:14:af:d7:4f:83:9b:57:ce:3b:cc:86:
         fb:c5:63:f6:42:1c:ad:71:6a:0a:bc:b2:70:c0:49:f6:08:e0:
         f3:c5:2c:84:60:cd:13:7c:2c:f6:b2:cb:2c:3c:81:e7:23:74:
         33:f7:43:29:9a:f5:0f:59:e0:48:fb:67:22:da:7f:a7:0b:68:
         af:69:31:fd:a0:d2:c4:b9:0b:be:69:fb:cf:a1:7b:fb:eb:8e:
         a5:92:91:12:5b:18:a2:a7:ed:8e:e3:5e:8d:61:67:4c:5a:d4:
         2c:c4:87:45:d2:24:99:2c:bf:a2:59:ec:e1:40:cb:2c:86:2b:
         48:ce:6e:9e:16:b4:ae:a3:6d:0a:04:00:8f:b1:5c:a7:6e:42:
         b5:4b:04:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org