Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a313030303a3a2f33362d3336203d3e20323637333235.roa
File:                     323830343a346262343a313030303a3a2f33362d3336203d3e20323637333235.roa (raw, json)
Hash identifier:          Obel4HisJcfYDXXo9bvfqusA4BbEzlBgK2dt6269Uxo=
Subject key identifier:   03:B9:D9:F3:C1:DC:9B:2A:45:42:A6:4D:95:A0:B2:8F:5B:77:A2:72
Certificate issuer:       /CN=5FF400439781FE8490A8662BF8C3E0E5C82C89A2
Certificate serial:       0BFAC6E51E2262726082EDD88F4DA22535F1E8D7
Authority key identifier: 5F:F4:00:43:97:81:FE:84:90:A8:66:2B:F8:C3:E0:E5:C8:2C:89:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FF400439781FE8490A8662BF8C3E0E5C82C89A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a313030303a3a2f33362d3336203d3e20323637333235.roa
Signing time:             Tue 05 Dec 2023 17:44:45 +0000
ROA not before:           Tue 05 Dec 2023 17:39:45 +0000
ROA not after:            Tue 03 Dec 2024 17:44:45 +0000
asID:                     267325
IP address blocks:        2804:4bb4:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:fa:c6:e5:1e:22:62:72:60:82:ed:d8:8f:4d:a2:25:35:f1:e8:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FF400439781FE8490A8662BF8C3E0E5C82C89A2
        Validity
            Not Before: Dec  5 17:39:45 2023 GMT
            Not After : Dec  3 17:44:45 2024 GMT
        Subject: CN=03B9D9F3C1DC9B2A4542A64D95A0B28F5B77A272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:09:cd:ea:0e:87:74:d6:cf:d7:e8:da:8d:ec:
                    20:e5:6a:03:4d:f7:8e:90:af:5e:31:b0:9b:71:a3:
                    48:2b:e1:8a:1c:b9:6b:ba:4a:0e:47:31:2a:2a:a8:
                    0a:99:64:4a:94:a1:60:97:6e:89:7b:0e:de:92:b4:
                    2e:1e:5f:90:28:b4:12:e7:1d:93:6f:d7:86:67:1a:
                    c0:7e:ce:32:e9:00:b3:17:54:46:0b:42:e2:74:ea:
                    b5:fc:8f:5b:8e:3d:42:96:e3:a7:7f:11:31:82:78:
                    51:dc:58:3d:d8:dc:f0:7f:ae:24:8f:2a:ae:ce:c6:
                    8e:c7:31:47:e4:c2:f7:c1:f0:53:09:23:68:99:63:
                    ea:0a:cc:a4:a0:f2:6a:5f:fe:b7:38:ca:d2:7d:2d:
                    f1:5d:65:d2:72:61:4c:ab:93:f6:bd:0a:a4:c3:be:
                    74:93:eb:cd:c0:56:50:7f:75:33:17:ba:50:58:21:
                    76:e7:4d:ec:ec:50:01:ba:69:91:50:0c:a7:9a:38:
                    0f:08:ad:04:17:af:b8:c3:fb:4c:b3:fc:ea:58:bb:
                    b9:b5:ce:78:37:8c:be:00:d8:30:65:15:b5:fe:19:
                    fa:cc:ca:99:07:21:11:eb:69:b7:2e:7b:09:73:bd:
                    58:9a:7e:14:9d:62:dc:ea:b3:85:42:31:c8:7a:9d:
                    95:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B9:D9:F3:C1:DC:9B:2A:45:42:A6:4D:95:A0:B2:8F:5B:77:A2:72
            X509v3 Authority Key Identifier:
                keyid:5F:F4:00:43:97:81:FE:84:90:A8:66:2B:F8:C3:E0:E5:C8:2C:89:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/5FF400439781FE8490A8662BF8C3E0E5C82C89A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FF400439781FE8490A8662BF8C3E0E5C82C89A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a313030303a3a2f33362d3336203d3e20323637333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bb4:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1a:11:4a:ab:e3:b4:40:be:9e:c4:b0:bc:5f:ae:e3:21:ed:0b:
         8e:e1:a9:fe:cd:5a:e7:d1:69:8c:40:3e:03:1f:46:90:f6:d9:
         0e:54:7f:45:2b:25:5a:ff:99:b9:fb:21:5c:89:a8:53:1b:cb:
         11:4b:a0:7e:a4:da:3e:ee:c5:9a:74:2a:98:64:5a:05:d4:4c:
         09:fa:e3:9b:4d:65:84:25:84:4d:2a:00:67:3b:9c:70:c8:82:
         62:ef:d8:44:c0:66:c5:fd:99:d7:13:b3:06:09:85:16:22:47:
         cc:9b:aa:03:85:2d:8c:a2:ac:ef:d2:c5:5e:e9:0b:a8:94:99:
         93:c0:fd:ef:8c:39:16:49:68:04:39:28:12:b2:f5:57:f6:f0:
         a6:0f:44:b3:f5:20:66:e1:e8:a2:12:7e:a8:0c:ca:8b:83:64:
         6d:e4:6b:18:15:91:f0:e4:ed:4a:5d:4d:57:71:0a:27:cf:9e:
         f1:82:76:67:b5:f4:75:86:c3:71:1f:65:22:47:bd:b2:3f:d7:
         ed:37:a0:93:35:23:e4:68:c6:f2:57:f1:45:43:c1:1d:b6:b6:
         85:82:b0:35:ef:12:e1:a9:cf:de:6c:2a:3a:dd:98:99:29:38:
         5a:34:d2:a9:76:09:f0:90:f9:e4:25:8f:57:b9:19:05:3c:b8:
         08:b6:a4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org