Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/0/323830343a3839383a3a2f33322d3438203d3e20323632333830.roa
File:                     323830343a3839383a3a2f33322d3438203d3e20323632333830.roa (raw, json)
Hash identifier:          +N0rfUa6e1DChdsuBOlaFRO8VOr1Cmlf8JMcIQdEGfU=
Subject key identifier:   3D:5B:0A:23:19:60:5A:03:CE:40:9B:4D:C5:54:30:A0:4F:E3:37:40
Certificate issuer:       /CN=765FFCEF80CB3600CD0EE5D290B92746FD98A9F6
Certificate serial:       30D4E6F2EB46B1303A66BAD62C0B415C71A4F8DE
Authority key identifier: 76:5F:FC:EF:80:CB:36:00:CD:0E:E5:D2:90:B9:27:46:FD:98:A9:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/765FFCEF80CB3600CD0EE5D290B92746FD98A9F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/0/323830343a3839383a3a2f33322d3438203d3e20323632333830.roa
Signing time:             Wed 07 Feb 2024 14:22:56 +0000
ROA not before:           Wed 07 Feb 2024 14:17:56 +0000
ROA not after:            Wed 05 Feb 2025 14:22:56 +0000
asID:                     262380
IP address blocks:        2804:898::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d4:e6:f2:eb:46:b1:30:3a:66:ba:d6:2c:0b:41:5c:71:a4:f8:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765FFCEF80CB3600CD0EE5D290B92746FD98A9F6
        Validity
            Not Before: Feb  7 14:17:56 2024 GMT
            Not After : Feb  5 14:22:56 2025 GMT
        Subject: CN=3D5B0A2319605A03CE409B4DC55430A04FE33740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d2:06:fc:58:fb:e9:e7:36:91:79:75:9a:88:
                    06:e6:6b:4d:72:fb:a7:77:55:11:ba:d5:b4:c0:57:
                    de:3f:7e:77:51:ae:db:1d:ce:0f:0c:cf:8d:18:a1:
                    05:b4:53:1e:16:a9:ed:0e:26:9c:27:b7:b4:58:ee:
                    48:14:c9:cc:5b:08:7f:23:11:6a:49:ae:2e:6d:2d:
                    46:87:f3:30:dc:f2:b2:34:8b:38:34:ba:f1:5b:bd:
                    28:9a:ac:97:a5:5e:1c:e5:6e:58:6d:4a:9b:81:b1:
                    05:d4:98:a0:fd:b5:f8:89:e3:ea:8b:3c:89:85:a8:
                    63:7c:f6:f4:a1:09:31:7b:b0:c4:cd:84:47:c1:f4:
                    6b:e9:48:b4:10:cf:73:d7:4b:bf:5a:4f:61:f9:73:
                    3a:1d:2b:4d:c6:38:9f:1c:71:7f:6e:f3:ff:6f:60:
                    6e:6c:fe:85:b4:cb:f1:c9:6a:6e:db:5e:4f:7b:bc:
                    0a:e8:a9:b2:3c:94:b8:a5:20:4f:fa:03:6c:d2:12:
                    33:cf:51:e1:42:c8:ea:40:7e:fe:be:23:c6:97:6f:
                    73:19:95:8f:8f:06:48:ce:2e:57:d2:dd:05:c3:30:
                    b7:55:f0:7f:16:eb:bc:e9:57:95:2b:89:0c:b7:20:
                    47:09:20:9e:41:b9:d2:e6:fd:5c:1e:db:43:7d:ad:
                    be:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5B:0A:23:19:60:5A:03:CE:40:9B:4D:C5:54:30:A0:4F:E3:37:40
            X509v3 Authority Key Identifier:
                keyid:76:5F:FC:EF:80:CB:36:00:CD:0E:E5:D2:90:B9:27:46:FD:98:A9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/0/765FFCEF80CB3600CD0EE5D290B92746FD98A9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/765FFCEF80CB3600CD0EE5D290B92746FD98A9F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/0/323830343a3839383a3a2f33322d3438203d3e20323632333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:898::/32

    Signature Algorithm: sha256WithRSAEncryption
         cb:a8:85:2b:75:35:d9:ec:87:8f:e1:42:6a:5c:da:c1:d4:23:
         10:f5:24:f9:98:13:dd:9e:a2:70:68:09:b9:dd:0d:f4:13:b6:
         34:78:be:fb:b9:a3:8b:a1:69:77:c8:13:32:71:f2:8f:9e:c2:
         a9:3c:f0:92:ef:11:03:fb:83:2c:6f:3d:fd:51:9e:18:d7:f2:
         97:9b:a4:07:b7:52:64:28:d0:f8:f0:9f:2d:04:ac:e1:a5:ef:
         c6:d9:cd:d5:d2:07:ea:98:2f:b3:91:23:58:92:85:d6:fb:dc:
         d2:ca:dd:48:d2:8d:12:a2:9d:57:2f:db:a0:7b:f4:9b:98:3d:
         55:15:fd:46:61:04:b0:6f:85:86:f1:99:ed:0d:96:bc:1b:10:
         15:bf:5d:25:09:2d:5d:3b:a8:5b:25:06:38:a3:5e:97:6b:c2:
         ae:0d:ca:2e:bf:72:85:b4:bb:58:b5:3b:15:d3:8e:ee:ea:64:
         90:c7:af:00:91:f1:ca:5e:94:fa:87:9f:6d:21:f4:7e:28:05:
         3a:25:25:d6:66:52:64:e0:da:7b:f9:cd:d7:91:10:c1:fc:18:
         78:0d:93:ef:52:c8:fb:71:93:6b:65:12:3f:15:d1:f2:e8:6f:
         c7:22:62:90:33:c3:47:b7:36:8e:f7:f1:98:1d:64:e0:93:03:
         78:0f:cf:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org