Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a343030303a3a2f33342d3334203d3e20323733363036.roa
File:                     323830343a383937383a343030303a3a2f33342d3334203d3e20323733363036.roa (raw, json)
Hash identifier:          uhD0ganNaNlAD9GmpH/EtWdxpf0OZzWlHfILhOqMRxk=
Subject key identifier:   3F:37:3B:EE:26:B3:30:19:C7:BF:A0:38:E2:CB:44:C8:90:E1:43:44
Certificate issuer:       /CN=AF57D8ABF92B4526A323E0F5712CC22330A693BB
Certificate serial:       1A3E547AB3494F41628799FAF9FBD505CCFB8B5D
Authority key identifier: AF:57:D8:AB:F9:2B:45:26:A3:23:E0:F5:71:2C:C2:23:30:A6:93:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a343030303a3a2f33342d3334203d3e20323733363036.roa
Signing time:             Sat 24 Feb 2024 03:41:55 +0000
ROA not before:           Sat 24 Feb 2024 03:36:55 +0000
ROA not after:            Sat 22 Feb 2025 03:41:55 +0000
asID:                     273606
IP address blocks:        2804:8978:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:3e:54:7a:b3:49:4f:41:62:87:99:fa:f9:fb:d5:05:cc:fb:8b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF57D8ABF92B4526A323E0F5712CC22330A693BB
        Validity
            Not Before: Feb 24 03:36:55 2024 GMT
            Not After : Feb 22 03:41:55 2025 GMT
        Subject: CN=3F373BEE26B33019C7BFA038E2CB44C890E14344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bf:9d:eb:cc:74:17:c4:ef:25:9b:78:38:2a:
                    44:25:f7:06:c4:c1:96:76:aa:8a:8d:16:5b:96:0a:
                    f3:e6:3b:65:df:a6:65:0c:85:e6:ca:e8:99:cb:95:
                    a7:5c:1d:05:5a:3d:4a:93:77:83:d9:51:ab:2e:c6:
                    fe:b7:b6:ca:42:3b:d4:82:98:84:78:5e:c4:56:5f:
                    fa:59:d1:6f:49:4b:e1:e1:90:d0:5f:41:d5:0d:b4:
                    9c:0a:7e:89:6d:58:e6:7b:28:de:14:aa:de:9e:7d:
                    82:30:ec:d8:66:54:ab:5c:7d:e5:f7:d3:a5:27:9d:
                    f1:12:b4:32:71:7f:17:20:ff:aa:e1:1a:f9:ad:99:
                    31:62:cc:da:85:27:84:34:1c:94:91:1e:24:0e:4a:
                    0d:32:2f:71:ab:6e:96:fa:f9:58:a8:0a:e4:a7:15:
                    83:d6:31:49:16:4c:61:c8:41:56:4f:a4:cf:52:5c:
                    53:b5:f4:26:af:c7:1f:0b:1c:1d:d0:51:62:64:20:
                    49:dc:84:d3:b3:4a:70:a2:ac:34:fe:b5:07:e2:e2:
                    52:cc:f7:15:ea:d2:6d:49:14:6b:56:85:c4:d7:fd:
                    cb:f6:d1:bb:39:1b:f5:55:55:be:09:72:c7:b3:d6:
                    b1:2a:12:16:ed:fc:08:c8:3d:63:fe:55:fe:09:55:
                    0c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:37:3B:EE:26:B3:30:19:C7:BF:A0:38:E2:CB:44:C8:90:E1:43:44
            X509v3 Authority Key Identifier:
                keyid:AF:57:D8:AB:F9:2B:45:26:A3:23:E0:F5:71:2C:C2:23:30:A6:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a343030303a3a2f33342d3334203d3e20323733363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8978:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         d4:9c:21:6c:14:f4:45:d1:ca:c2:c0:5e:e4:d8:6a:41:62:50:
         24:4a:4e:c8:8b:ba:04:ed:4e:09:f9:94:b9:1f:f1:5e:e5:ad:
         3a:49:80:6f:fc:c1:a6:20:f1:f3:5c:fd:76:2c:00:1c:60:c4:
         e2:7f:04:40:24:19:21:8c:7d:03:74:51:fa:e2:db:9a:2d:3d:
         99:c9:92:61:6b:1f:56:f7:20:f1:30:aa:76:2c:fa:c9:20:e0:
         db:ba:37:fc:e0:27:25:95:e5:a6:5d:ff:4f:6e:d0:f5:cf:4b:
         e9:27:1b:ac:35:80:f6:a7:ad:5a:20:7d:91:45:80:0c:c8:ca:
         97:c3:03:43:7b:e6:d8:61:cd:ec:50:03:b3:90:32:ca:4b:84:
         72:95:37:35:d9:ec:4f:f9:97:2b:31:cc:06:85:9a:c0:c2:e6:
         9a:96:f6:2a:72:86:bf:5f:f6:dc:cf:8f:27:d6:1d:df:e0:5d:
         5a:72:07:2d:a1:24:06:f7:02:f3:74:96:ff:e5:09:3b:13:73:
         d0:2b:7d:d8:78:82:98:ab:f3:01:55:1c:09:d3:fd:66:07:0d:
         70:cc:a4:ab:9b:ac:bd:2b:ea:cd:bd:b1:d4:35:ab:a1:eb:e4:
         1c:91:2e:b6:8c:d0:d8:fa:ac:7a:e5:a3:2a:56:64:0e:36:a1:
         19:90:6f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:02 2024 by rpki-client on console-fra.rpki-client.org