Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/323830343a353933633a3a2f33322d313238203d3e20323638313737.roa
File:                     323830343a353933633a3a2f33322d313238203d3e20323638313737.roa (raw, json)
Hash identifier:          prcZovsdEilbSOYtJS0wed1lHM2RFiniW7dg1uw0jeM=
Subject key identifier:   6B:82:F7:83:6A:E2:29:D5:19:CA:76:E2:84:29:7F:17:47:B1:94:D1
Certificate issuer:       /CN=D89B0FED7D290296B533B374765DEA8424476141
Certificate serial:       06478C2DC93A89BB4A6E4A39E30A2748017B7C55
Authority key identifier: D8:9B:0F:ED:7D:29:02:96:B5:33:B3:74:76:5D:EA:84:24:47:61:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D89B0FED7D290296B533B374765DEA8424476141.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/323830343a353933633a3a2f33322d313238203d3e20323638313737.roa
Signing time:             Mon 25 Mar 2024 13:22:32 +0000
ROA not before:           Mon 25 Mar 2024 13:17:32 +0000
ROA not after:            Mon 24 Mar 2025 13:22:32 +0000
asID:                     268177
IP address blocks:        2804:593c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:47:8c:2d:c9:3a:89:bb:4a:6e:4a:39:e3:0a:27:48:01:7b:7c:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D89B0FED7D290296B533B374765DEA8424476141
        Validity
            Not Before: Mar 25 13:17:32 2024 GMT
            Not After : Mar 24 13:22:32 2025 GMT
        Subject: CN=6B82F7836AE229D519CA76E284297F1747B194D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5a:b8:d4:96:16:82:99:22:ec:75:35:11:bd:
                    e0:f7:c6:2a:19:28:af:23:28:07:80:d4:a9:0d:ad:
                    39:ef:75:32:e5:86:a9:e9:71:05:86:59:6f:b4:4c:
                    cb:f7:4a:70:b3:9d:b0:0d:a1:e6:ae:bd:b7:01:1d:
                    a0:54:b7:89:db:79:01:77:25:60:7d:1b:b8:c8:a5:
                    fe:7e:e5:ae:65:7f:5e:de:9a:be:b3:9a:b3:ea:11:
                    40:8b:52:35:26:5d:a4:83:00:da:15:ff:bb:79:fb:
                    78:4d:24:2d:8c:14:42:df:d6:8a:24:4c:21:e4:66:
                    5c:9d:22:98:aa:1c:60:dc:6c:d2:39:e3:97:45:e9:
                    cf:80:19:ba:01:87:ef:ba:79:a0:ef:5b:78:59:cd:
                    8f:04:98:bf:68:32:8e:d3:ef:79:a3:11:e5:6c:2d:
                    ff:c7:be:e8:d5:0e:a7:a5:40:85:e5:e9:4e:75:4d:
                    22:49:96:75:a8:c4:29:cf:6a:e8:4c:4d:93:79:b7:
                    9a:35:ec:fc:63:c2:da:95:c3:93:77:d7:94:49:a4:
                    f2:a7:be:64:05:fb:b7:53:fa:2c:09:3b:4c:52:87:
                    c3:d6:42:13:25:18:fe:05:eb:6d:b9:b7:47:fc:ac:
                    8e:aa:c2:0b:cb:13:f8:34:c0:7b:58:53:38:65:22:
                    31:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:82:F7:83:6A:E2:29:D5:19:CA:76:E2:84:29:7F:17:47:B1:94:D1
            X509v3 Authority Key Identifier:
                keyid:D8:9B:0F:ED:7D:29:02:96:B5:33:B3:74:76:5D:EA:84:24:47:61:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/D89B0FED7D290296B533B374765DEA8424476141.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D89B0FED7D290296B533B374765DEA8424476141.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/323830343a353933633a3a2f33322d313238203d3e20323638313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:593c::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:d0:d4:b7:c0:ce:cd:b5:19:95:f6:ba:48:15:fa:da:91:78:
         f4:da:78:7b:7b:4d:5e:5e:61:e8:16:b4:47:87:35:d6:3a:b4:
         9d:13:d7:d2:e9:c2:b4:c7:b5:c2:36:6c:ad:eb:3f:5f:0d:34:
         ed:4c:47:b1:57:3f:80:df:d6:3e:2f:2e:36:63:17:9e:24:e4:
         5f:df:8b:50:5f:23:5c:f5:e5:28:93:01:33:4d:5c:46:85:8e:
         6e:8f:8b:22:22:06:cc:03:bd:2a:11:7a:c4:f6:e2:16:ee:22:
         81:e4:23:a4:24:ce:08:71:74:b0:76:2c:18:6a:87:33:77:2b:
         69:66:17:48:ef:a0:04:a0:1b:e4:23:12:83:21:1f:70:6b:c9:
         16:c1:14:1a:94:8f:d0:3d:f3:c3:5e:17:6c:73:39:5f:69:60:
         6e:02:7b:8a:ee:50:68:fd:73:05:0d:51:34:a3:f8:e5:9f:28:
         72:35:75:c3:a9:06:16:59:d0:44:1a:27:0c:d0:46:51:3b:de:
         1c:ee:03:c4:4e:46:4e:84:ce:00:ef:5c:15:a3:52:fe:ff:ce:
         31:95:4a:bf:52:7b:b7:71:6d:ef:af:98:3d:79:79:bb:6d:71:
         f6:87:55:d7:5f:c7:50:0d:27:24:83:14:99:7e:67:89:9f:f3:
         1d:e5:96:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org