Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/323830343a3265383a3738303a3a2f34322d3432203d3e20323632383437.roa
File:                     323830343a3265383a3738303a3a2f34322d3432203d3e20323632383437.roa (raw, json)
Hash identifier:          8O+TvGYbfyeocCczFD2hlIuCtLyZvTWxcWZ1VntgJEw=
Subject key identifier:   17:E6:73:1B:80:92:A9:42:EB:59:79:A2:48:FF:E1:1F:1E:95:21:03
Certificate issuer:       /CN=7E89C742D551BF248E147A7AC13D94D12B15C8F6
Certificate serial:       3869CCC2503CBFE2C0F7470AFBF55AEA49B6F3FF
Authority key identifier: 7E:89:C7:42:D5:51:BF:24:8E:14:7A:7A:C1:3D:94:D1:2B:15:C8:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E89C742D551BF248E147A7AC13D94D12B15C8F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/323830343a3265383a3738303a3a2f34322d3432203d3e20323632383437.roa
Signing time:             Fri 29 Dec 2023 18:38:39 +0000
ROA not before:           Fri 29 Dec 2023 18:33:39 +0000
ROA not after:            Fri 27 Dec 2024 18:38:39 +0000
asID:                     262847
IP address blocks:        2804:2e8:780::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:69:cc:c2:50:3c:bf:e2:c0:f7:47:0a:fb:f5:5a:ea:49:b6:f3:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E89C742D551BF248E147A7AC13D94D12B15C8F6
        Validity
            Not Before: Dec 29 18:33:39 2023 GMT
            Not After : Dec 27 18:38:39 2024 GMT
        Subject: CN=17E6731B8092A942EB5979A248FFE11F1E952103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b5:98:92:9e:35:2a:e5:3f:e4:57:ca:ab:ad:
                    c1:c1:42:67:20:ef:8b:2e:56:43:f9:34:87:81:29:
                    70:b8:a4:1f:5a:1b:7e:35:33:88:e3:d2:7c:b1:bf:
                    00:12:16:bd:ee:7d:05:a7:26:75:2b:d9:76:a8:8b:
                    5d:25:7b:52:b1:24:e8:eb:18:67:8b:a5:80:e0:ae:
                    19:6d:54:1c:a4:fc:e1:c1:df:53:dd:ce:0b:6a:b4:
                    3c:d9:6b:81:f5:97:76:00:5a:68:99:c5:76:8e:1c:
                    31:db:18:7b:a7:92:bf:89:b0:07:19:67:66:e7:f0:
                    36:e9:45:de:bb:c1:fc:82:a5:ee:6b:31:5e:49:33:
                    fb:c4:7e:cc:0e:91:82:35:98:bb:6e:66:4a:15:cd:
                    1d:db:9f:04:3b:3f:30:f0:21:39:fe:37:a6:e3:0d:
                    d5:94:44:76:c7:93:ac:1a:29:7d:d4:1f:8c:42:1b:
                    f6:1e:de:bb:09:67:93:d2:9d:7f:39:3e:60:3f:27:
                    55:45:a2:16:29:ad:72:e0:3e:b0:24:b7:7c:cc:73:
                    af:3c:b2:ed:bc:c7:74:74:31:d6:b3:e8:5b:88:1d:
                    f3:8e:88:81:ba:f3:59:4b:2e:81:f8:f5:1d:c2:9c:
                    53:9e:3a:4d:d6:e4:9d:dc:d1:8a:50:d5:eb:96:e7:
                    71:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E6:73:1B:80:92:A9:42:EB:59:79:A2:48:FF:E1:1F:1E:95:21:03
            X509v3 Authority Key Identifier:
                keyid:7E:89:C7:42:D5:51:BF:24:8E:14:7A:7A:C1:3D:94:D1:2B:15:C8:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/7E89C742D551BF248E147A7AC13D94D12B15C8F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E89C742D551BF248E147A7AC13D94D12B15C8F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/323830343a3265383a3738303a3a2f34322d3432203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e8:780::/42

    Signature Algorithm: sha256WithRSAEncryption
         0e:83:d6:99:76:d2:13:8e:db:c4:8b:9f:81:d1:7a:c9:bb:7c:
         16:1b:2b:6f:e5:d5:72:27:d5:42:55:68:f0:72:40:8c:bf:9b:
         ec:87:fa:fa:d5:a8:cd:0a:34:c5:cf:a0:ef:39:77:87:7a:7f:
         fc:e4:43:c8:34:81:9f:b8:b6:1c:c6:32:46:d3:f2:d0:b9:40:
         f4:95:e8:61:80:93:9a:1b:1c:10:7c:98:70:ad:c8:95:96:17:
         9b:82:63:35:7e:7f:50:fb:d5:f8:9d:f5:12:03:92:c8:01:79:
         80:72:56:04:d0:05:dd:e6:ce:7f:0f:1b:6f:8d:a9:5c:3e:64:
         ad:66:ae:3b:59:d0:0a:99:57:c4:67:c6:b3:7c:cd:81:a7:95:
         af:90:af:c6:c3:e0:99:71:50:fa:9a:16:a5:ba:00:c5:ef:f8:
         63:9a:8b:0a:49:d8:30:f0:c7:73:e0:a3:ae:f1:50:a7:e2:53:
         15:0a:74:c4:b9:13:27:4c:a3:f8:5e:8f:8e:7e:8d:7f:22:9e:
         ea:e5:33:06:1e:59:4e:58:e3:50:c9:40:ee:e2:bc:e4:c0:64:
         9d:c6:27:0b:16:da:cb:80:d8:4f:60:ec:3a:78:5c:42:f1:ce:
         65:c3:3a:0f:ac:9f:d7:32:1e:83:64:5d:0f:1f:84:35:9f:df:
         43:62:c2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:39 2024 by rpki-client on console-fra.rpki-client.org