Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/323830343a376139343a313130303a3a2f34302d3434203d3e20323731333830.roa
File:                     323830343a376139343a313130303a3a2f34302d3434203d3e20323731333830.roa (raw, json)
Hash identifier:          BYMaMMvI7p75DAwdt5CsGUYLrWVnP7bV7jkXnuk4cmM=
Subject key identifier:   6C:68:66:DE:70:87:29:61:C0:5E:2E:30:DD:93:B7:7E:4F:30:07:73
Certificate issuer:       /CN=F29CBF3783E5E2250C27F456D15288BD25A3BCC0
Certificate serial:       335C6766BF93F4C9A38171C59488B200324E35A2
Authority key identifier: F2:9C:BF:37:83:E5:E2:25:0C:27:F4:56:D1:52:88:BD:25:A3:BC:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F29CBF3783E5E2250C27F456D15288BD25A3BCC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/323830343a376139343a313130303a3a2f34302d3434203d3e20323731333830.roa
Signing time:             Thu 07 Mar 2024 13:58:47 +0000
ROA not before:           Thu 07 Mar 2024 13:53:47 +0000
ROA not after:            Thu 06 Mar 2025 13:58:47 +0000
asID:                     271380
IP address blocks:        2804:7a94:1100::/40 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:5c:67:66:bf:93:f4:c9:a3:81:71:c5:94:88:b2:00:32:4e:35:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F29CBF3783E5E2250C27F456D15288BD25A3BCC0
        Validity
            Not Before: Mar  7 13:53:47 2024 GMT
            Not After : Mar  6 13:58:47 2025 GMT
        Subject: CN=6C6866DE70872961C05E2E30DD93B77E4F300773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:fa:94:81:dc:c4:3c:7f:aa:f2:31:c1:49:dd:
                    9c:b6:31:87:64:54:d9:6d:51:d2:0c:71:20:b1:b5:
                    5f:f7:c5:04:de:64:3e:71:4a:69:13:6e:ec:d8:42:
                    0d:dc:56:11:ab:93:23:87:d4:67:db:fb:da:b1:70:
                    f1:02:cb:5e:97:48:33:9d:5d:0b:46:62:45:57:9f:
                    83:dc:43:9b:ca:b6:27:59:86:a2:15:55:2a:ab:9a:
                    44:ca:2d:75:1e:4d:18:63:8d:fc:ac:a4:c0:74:1d:
                    59:56:b4:71:f5:ac:9b:e0:43:5f:cc:f8:3d:98:30:
                    55:7a:05:f9:e3:6a:c0:bd:63:70:e1:79:bd:5b:a6:
                    79:5b:ce:49:39:e2:5a:b3:5a:9f:0b:b7:30:6a:91:
                    12:a2:da:12:fa:fe:36:1e:16:66:d9:cb:f6:b6:69:
                    e8:4b:8d:80:75:af:ad:3e:f6:a0:e9:b1:96:50:51:
                    ac:67:95:84:31:a4:14:2f:f8:4a:3e:f6:59:1b:e9:
                    23:e1:d2:d8:0e:41:75:4a:fd:ff:5b:13:e9:9a:f3:
                    30:09:87:b3:00:dc:1f:d5:66:6a:0e:cc:52:44:b3:
                    fb:d3:3a:a1:8a:5a:87:90:fb:81:13:df:3b:05:f7:
                    3c:ad:4f:94:a8:ff:7c:20:d4:9e:c0:d7:33:2e:e2:
                    c6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:68:66:DE:70:87:29:61:C0:5E:2E:30:DD:93:B7:7E:4F:30:07:73
            X509v3 Authority Key Identifier:
                keyid:F2:9C:BF:37:83:E5:E2:25:0C:27:F4:56:D1:52:88:BD:25:A3:BC:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/F29CBF3783E5E2250C27F456D15288BD25A3BCC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F29CBF3783E5E2250C27F456D15288BD25A3BCC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/323830343a376139343a313130303a3a2f34302d3434203d3e20323731333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a94:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:e1:55:26:ad:40:8c:36:5b:72:58:87:1e:ce:ff:b6:1c:df:
         64:fe:27:37:9e:52:a9:e7:08:1c:06:5b:41:c2:d2:0e:c0:9f:
         7c:01:9f:d9:9e:0a:47:9c:81:14:b2:ec:a6:26:ca:34:6f:ad:
         63:e8:c9:b4:d1:3f:81:72:73:cf:08:ba:cc:e8:da:65:91:aa:
         7f:e4:36:e5:ba:71:0d:07:8d:f9:08:5f:f7:16:b9:23:2c:d9:
         b0:fe:fa:39:8c:31:21:de:6d:3b:eb:a0:1f:1e:d0:79:da:57:
         e7:77:dd:20:a0:74:d9:54:f4:e3:f9:a2:bc:3e:21:d4:2c:d7:
         d6:19:ca:6a:f7:ab:50:39:5a:2d:45:8c:85:c0:42:5a:85:06:
         b6:3f:83:d7:48:1e:7f:84:48:89:79:cb:4a:0e:c1:50:46:66:
         49:e0:0b:94:53:29:08:f4:d9:f2:aa:4c:5b:fb:39:22:ef:aa:
         bd:38:9e:9a:b3:40:84:5a:19:af:f3:02:f9:96:19:db:9f:8a:
         7f:05:e5:cc:01:62:3b:fb:27:59:e0:cf:b1:cb:d4:e3:1c:f8:
         48:9f:06:32:09:c2:ee:b8:30:c8:a3:27:c7:ab:87:fe:5d:29:
         ff:5a:e9:bd:44:2d:7f:5b:53:1b:1b:8b:c6:65:4a:31:10:98:
         3f:cc:da:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:23 2024 by rpki-client on console-fra.rpki-client.org