Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/323830343a346263383a6130303a3a2f34302d3530203d3e20323637333239.roa
File:                     323830343a346263383a6130303a3a2f34302d3530203d3e20323637333239.roa (raw, json)
Hash identifier:          QoObTcqX0se9p9VS03qLQVSBiUQaRGg4hhhJz8LqwOQ=
Subject key identifier:   5E:2F:BE:32:DB:7C:0A:A6:71:DE:BB:80:B0:24:23:B3:20:13:65:F1
Certificate issuer:       /CN=115C12DC4C631C1412ED74BF15353D05F8F2974F
Certificate serial:       0D7945767E85259DF0E42DE696D64E0927072BD3
Authority key identifier: 11:5C:12:DC:4C:63:1C:14:12:ED:74:BF:15:35:3D:05:F8:F2:97:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/115C12DC4C631C1412ED74BF15353D05F8F2974F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/323830343a346263383a6130303a3a2f34302d3530203d3e20323637333239.roa
Signing time:             Thu 07 Mar 2024 17:45:28 +0000
ROA not before:           Thu 07 Mar 2024 17:40:28 +0000
ROA not after:            Thu 06 Mar 2025 17:45:28 +0000
asID:                     267329
IP address blocks:        2804:4bc8:a00::/40 maxlen: 50

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:79:45:76:7e:85:25:9d:f0:e4:2d:e6:96:d6:4e:09:27:07:2b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115C12DC4C631C1412ED74BF15353D05F8F2974F
        Validity
            Not Before: Mar  7 17:40:28 2024 GMT
            Not After : Mar  6 17:45:28 2025 GMT
        Subject: CN=5E2FBE32DB7C0AA671DEBB80B02423B3201365F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:17:de:9c:8d:68:88:b5:62:97:db:bc:2a:3d:
                    f8:a1:8b:9b:62:4d:ea:86:f8:29:8c:73:0d:9f:ff:
                    e7:a5:21:81:00:81:2f:6b:88:47:09:71:4d:84:d3:
                    e5:a0:f8:1c:e7:1f:ad:16:50:13:f6:6f:65:08:aa:
                    99:ec:c3:ed:c7:0f:a2:50:a0:35:3d:31:be:d0:b3:
                    f4:31:3e:4d:ab:b0:18:c5:8e:46:b2:32:36:f1:55:
                    b0:bb:97:6e:00:67:6f:b3:c6:18:51:2e:b8:28:e1:
                    64:4c:b8:a6:ce:25:fa:dc:b3:77:d7:96:ab:5e:68:
                    94:62:86:82:14:dc:73:fc:15:b9:60:d4:16:f8:7f:
                    92:f8:73:0f:9b:4d:2f:fb:10:16:eb:cd:1b:d0:9e:
                    09:05:10:cc:d1:8b:e0:c9:c6:d1:f4:e9:9e:39:d6:
                    ed:c6:9b:9f:d4:af:50:c3:61:1a:fc:d4:ab:52:ff:
                    d9:84:aa:2e:19:a9:a5:91:61:a2:27:a2:89:fb:13:
                    23:9b:0c:8b:3d:0d:0b:3c:4f:15:1b:43:52:2d:53:
                    45:9f:7e:45:cb:cb:e4:74:47:84:8b:e3:a7:17:a9:
                    3f:96:d8:1c:05:99:2c:d0:67:eb:af:f2:dd:4c:08:
                    91:fa:cb:e7:cb:90:94:e5:51:1a:3b:20:ff:c0:14:
                    6b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2F:BE:32:DB:7C:0A:A6:71:DE:BB:80:B0:24:23:B3:20:13:65:F1
            X509v3 Authority Key Identifier:
                keyid:11:5C:12:DC:4C:63:1C:14:12:ED:74:BF:15:35:3D:05:F8:F2:97:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/115C12DC4C631C1412ED74BF15353D05F8F2974F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/115C12DC4C631C1412ED74BF15353D05F8F2974F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/323830343a346263383a6130303a3a2f34302d3530203d3e20323637333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bc8:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:76:5f:de:1f:a5:d6:d5:95:79:13:77:45:97:52:fb:c9:3e:
         09:d5:bd:3f:b3:28:d4:ef:8a:b5:fe:de:3c:52:a9:40:99:bf:
         f3:45:1a:43:06:9f:bb:c1:19:9c:a3:f5:f3:0c:8f:e2:13:82:
         e1:26:b9:da:48:88:1d:de:46:98:41:ee:53:d5:37:8f:e4:64:
         72:77:c7:89:f3:5e:67:c0:50:d9:28:2b:82:1b:cc:77:d3:1e:
         e1:ff:d0:21:2c:2c:b1:66:a2:00:5d:45:14:ef:a2:0a:88:3b:
         ab:e3:fc:e0:0b:a2:a4:00:89:1e:4b:de:e6:04:e7:cb:98:18:
         17:ee:f5:f9:d7:d8:d1:61:6b:f9:aa:58:b8:52:29:9b:7a:ce:
         22:37:b4:b6:1b:f3:92:14:88:48:23:3b:f6:c0:ef:fe:4f:ec:
         b7:08:31:37:64:49:70:c8:dd:6b:b8:66:b2:47:7f:39:a6:db:
         47:86:87:e4:54:71:d0:04:da:5d:eb:6c:f7:25:15:77:ad:e2:
         46:85:36:15:be:9a:72:21:93:36:c0:38:14:66:a6:13:eb:2a:
         b0:db:d3:3e:a6:c7:54:ba:69:d4:4c:d5:b7:71:d4:62:85:ae:
         36:4e:d1:8a:11:ad:41:eb:d2:f8:98:50:81:50:a9:68:af:55:
         26:75:57:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:47 2024 by rpki-client on console-fra.rpki-client.org