Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/0/323830343a366438633a3a2f33322d3334203d3e20323730353430.roa
File:                     323830343a366438633a3a2f33322d3334203d3e20323730353430.roa (raw, json)
Hash identifier:          PT4unl4pdV6/W4GyEPKDAFIdWrrsHC2iOCD4LMux0X8=
Subject key identifier:   15:23:B1:1C:7C:84:2B:91:0E:86:61:08:FD:13:ED:BB:16:A3:1A:EC
Certificate issuer:       /CN=88EE4CB4E5DFECFA5360BE824F04DD4D07A9CE3C
Certificate serial:       1BD2B62B222FB917396675B9976FF41387612572
Authority key identifier: 88:EE:4C:B4:E5:DF:EC:FA:53:60:BE:82:4F:04:DD:4D:07:A9:CE:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88EE4CB4E5DFECFA5360BE824F04DD4D07A9CE3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/0/323830343a366438633a3a2f33322d3334203d3e20323730353430.roa
Signing time:             Mon 05 Feb 2024 17:00:00 +0000
ROA not before:           Mon 05 Feb 2024 16:55:00 +0000
ROA not after:            Mon 03 Feb 2025 17:00:00 +0000
asID:                     270540
IP address blocks:        2804:6d8c::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d2:b6:2b:22:2f:b9:17:39:66:75:b9:97:6f:f4:13:87:61:25:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88EE4CB4E5DFECFA5360BE824F04DD4D07A9CE3C
        Validity
            Not Before: Feb  5 16:55:00 2024 GMT
            Not After : Feb  3 17:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:18:95:27:68:a6:5e:10:d9:18:08:b1:37:01:
                    f0:f8:d2:ec:66:41:66:06:e4:d3:ef:e2:95:6f:fe:
                    da:55:eb:53:74:42:0f:35:a6:0e:e4:10:c1:07:6a:
                    ce:9e:fd:8d:8b:66:25:09:84:75:1c:2c:b3:5f:39:
                    de:a5:8c:28:f9:b2:42:c6:d1:8b:f0:f5:f6:ca:55:
                    71:8c:6e:29:58:1f:b9:a9:8c:6c:cd:f4:d3:bd:85:
                    4f:96:0e:28:06:3e:19:b1:87:68:cf:25:77:0c:b1:
                    d6:a2:da:47:8f:79:d7:31:9e:3b:5f:f9:6b:56:5f:
                    a1:5c:d6:94:2c:70:0c:73:0d:23:33:6a:71:64:34:
                    02:a9:7a:15:3d:ec:84:ec:0a:82:24:d7:d5:23:65:
                    fd:4c:67:e6:ab:91:69:e5:4e:d1:7c:32:39:9b:b7:
                    7a:20:f9:02:04:51:95:1a:07:72:03:26:33:f2:f4:
                    3d:1f:91:c3:13:e3:8a:0d:a4:f0:db:1b:03:66:90:
                    59:40:f0:61:73:46:55:fe:5e:a7:9e:d5:63:22:93:
                    78:f9:e3:b4:6e:c4:9f:1e:b5:b2:04:46:20:61:f1:
                    b3:6f:01:27:0b:25:24:6e:99:8a:63:b8:f2:50:b2:
                    bd:e2:ba:96:28:40:68:e3:56:95:43:88:29:3e:3e:
                    ca:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:23:B1:1C:7C:84:2B:91:0E:86:61:08:FD:13:ED:BB:16:A3:1A:EC
            X509v3 Authority Key Identifier:
                keyid:88:EE:4C:B4:E5:DF:EC:FA:53:60:BE:82:4F:04:DD:4D:07:A9:CE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/0/88EE4CB4E5DFECFA5360BE824F04DD4D07A9CE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88EE4CB4E5DFECFA5360BE824F04DD4D07A9CE3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/0/323830343a366438633a3a2f33322d3334203d3e20323730353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:83:6c:2b:87:31:3c:39:9f:a9:65:d5:a6:d4:b8:2c:2b:bf:
         5b:3d:02:5b:99:c4:71:6b:c9:79:eb:55:3d:2b:d2:ec:f3:00:
         6d:22:6e:42:5a:cd:71:83:06:d3:9e:85:55:ab:cb:d8:f7:78:
         38:cd:d2:63:a2:96:41:73:2d:45:00:21:67:52:70:34:10:e3:
         44:13:8f:a7:cd:cf:25:45:5b:3f:13:ad:2d:13:ac:f8:a4:77:
         f3:3e:f3:c6:b6:6b:f4:d1:2c:e3:e6:a5:2f:10:c8:e3:e8:b1:
         a5:fa:3e:a9:85:f7:35:b2:cf:2a:50:e8:50:bb:6a:a4:80:b3:
         d8:78:d5:74:ca:77:77:6a:28:86:a4:28:d1:1d:c3:76:48:e0:
         d5:63:c5:97:44:b2:0a:d4:eb:a4:f0:3f:78:4c:f3:93:32:b2:
         fd:d6:53:1a:7a:5c:cb:1b:e0:57:72:1f:7b:63:4c:5f:29:a6:
         55:70:83:9b:bb:18:87:92:42:c0:07:1e:97:87:1c:fa:f2:79:
         82:6e:ba:cd:f0:a3:19:97:5a:12:c4:f4:5e:51:74:35:8e:03:
         5d:3a:a2:ff:47:25:7d:2c:5e:7e:6a:d8:98:23:ed:4c:57:dd:
         47:a8:3a:f8:8c:d3:7a:48:c1:a1:c8:96:74:4b:21:df:8b:e6:
         c7:ad:b6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org