Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/323830343a376139343a313030303a3a2f34302d3434203d3e20323731333830.roa
File:                     323830343a376139343a313030303a3a2f34302d3434203d3e20323731333830.roa (raw, json)
Hash identifier:          xmVcf/Ewa5/6EmrJ1qseT8jcbFvML7kzjuBIdyEf4SM=
Subject key identifier:   4D:56:9C:DE:90:92:7C:71:40:05:3D:CE:CC:34:E6:77:D1:D1:4C:F7
Certificate issuer:       /CN=F29CBF3783E5E2250C27F456D15288BD25A3BCC0
Certificate serial:       5AD3A6EF6A0FAEFBCA35FA55CF756EEE8FD1EC10
Authority key identifier: F2:9C:BF:37:83:E5:E2:25:0C:27:F4:56:D1:52:88:BD:25:A3:BC:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F29CBF3783E5E2250C27F456D15288BD25A3BCC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/323830343a376139343a313030303a3a2f34302d3434203d3e20323731333830.roa
Signing time:             Thu 07 Mar 2024 13:58:41 +0000
ROA not before:           Thu 07 Mar 2024 13:53:41 +0000
ROA not after:            Thu 06 Mar 2025 13:58:41 +0000
asID:                     271380
IP address blocks:        2804:7a94:1000::/40 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d3:a6:ef:6a:0f:ae:fb:ca:35:fa:55:cf:75:6e:ee:8f:d1:ec:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F29CBF3783E5E2250C27F456D15288BD25A3BCC0
        Validity
            Not Before: Mar  7 13:53:41 2024 GMT
            Not After : Mar  6 13:58:41 2025 GMT
        Subject: CN=4D569CDE90927C7140053DCECC34E677D1D14CF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:34:7b:2d:7b:4d:9e:49:e1:30:8a:fe:17:33:
                    f1:08:5b:4b:98:85:f7:da:22:37:1d:03:b4:41:9f:
                    08:6e:12:43:11:1f:0d:52:c3:58:f2:bb:3b:f5:ca:
                    0a:5b:47:da:ff:dd:d0:51:2d:92:01:c7:34:9f:2d:
                    4f:8e:a7:fa:9d:90:34:86:5b:a6:a9:74:8f:00:38:
                    b8:db:39:99:fb:c4:80:c6:7d:98:69:a0:da:bd:97:
                    d4:86:c1:07:b4:a9:af:cd:50:fc:ba:52:f9:db:48:
                    00:08:26:46:31:ea:70:02:e6:b0:77:5c:f5:5c:bd:
                    7e:3e:58:d8:5a:bd:c6:86:e6:75:b5:3e:83:a4:15:
                    fa:b9:b1:45:3d:55:f8:15:6a:10:ce:dc:65:e6:d8:
                    95:d4:95:5f:15:8f:5b:ac:c4:48:d2:67:9d:1e:78:
                    e0:80:be:34:38:2f:ec:d3:3c:c1:0e:b8:06:ad:9d:
                    c8:90:15:e1:de:e3:78:ce:f8:39:20:6b:96:f5:52:
                    ec:8a:f2:0d:9d:71:5d:68:fc:a5:97:d1:cf:1c:63:
                    95:9c:7c:21:05:88:ff:6a:10:c3:a0:f2:3b:f2:7a:
                    0d:52:6c:8d:35:af:1c:4f:c4:6d:f5:00:aa:54:bf:
                    f4:24:b6:ba:28:6f:b8:4f:d0:17:d5:40:e0:e1:37:
                    46:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:56:9C:DE:90:92:7C:71:40:05:3D:CE:CC:34:E6:77:D1:D1:4C:F7
            X509v3 Authority Key Identifier:
                keyid:F2:9C:BF:37:83:E5:E2:25:0C:27:F4:56:D1:52:88:BD:25:A3:BC:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/F29CBF3783E5E2250C27F456D15288BD25A3BCC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F29CBF3783E5E2250C27F456D15288BD25A3BCC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/323830343a376139343a313030303a3a2f34302d3434203d3e20323731333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a94:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         e1:b1:0b:be:0c:7d:a8:59:53:e8:60:91:45:d5:44:34:b9:4c:
         c2:3e:f4:27:51:46:8a:aa:b2:cb:fe:79:89:c8:7a:6a:f2:29:
         9d:23:a5:69:99:65:05:ab:a9:17:4c:5a:6f:79:cd:88:db:9c:
         60:53:cb:0b:10:f5:d4:b4:31:e4:b6:9b:65:78:a9:cc:82:d1:
         46:cb:2f:56:97:17:3d:3b:a7:de:62:b9:1d:8d:97:13:01:08:
         88:08:65:3c:63:43:b5:a7:43:ee:a0:ff:9b:58:f5:29:11:bc:
         02:16:43:b6:f4:e6:66:38:d6:69:54:68:3c:68:93:ec:36:8a:
         89:02:d5:c2:f6:c8:8b:5c:60:2c:2e:4f:39:f9:8a:12:9e:b7:
         e9:8b:c6:86:f7:78:75:f6:39:07:5a:d2:74:de:fd:b6:1b:62:
         eb:04:68:35:c0:31:fb:91:c5:6b:ae:57:0c:91:04:ff:57:ef:
         ca:59:ce:69:e2:aa:a7:7f:16:80:da:44:73:66:a3:6f:ae:3a:
         11:14:1f:ff:a6:00:14:40:a5:4e:35:07:ba:c3:d0:7e:dc:76:
         5a:bb:8b:32:93:ca:fc:c0:3b:6f:0d:01:49:dc:23:be:c9:3a:
         8f:98:a0:43:e9:b2:49:ca:7c:b9:3d:71:76:c9:f2:4f:b0:c5:
         9b:7b:3b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org