Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/0/323830343a376662383a3a2f33322d3438203d3e20323731373035.roa
File:                     323830343a376662383a3a2f33322d3438203d3e20323731373035.roa (raw, json)
Hash identifier:          jBSSzftlJRlYY0CRSwIkT7PMX4+9vvb+yQ+JPuR+bqQ=
Subject key identifier:   63:EF:CE:14:94:6A:06:B7:B9:8C:05:E4:6D:95:78:CA:AA:15:08:F7
Certificate issuer:       /CN=DD7FCBBC453CEAD2151004BDA36F24FEB766F1E3
Certificate serial:       0813D12515DD760A33CA06120684A769C7E53CAF
Authority key identifier: DD:7F:CB:BC:45:3C:EA:D2:15:10:04:BD:A3:6F:24:FE:B7:66:F1:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD7FCBBC453CEAD2151004BDA36F24FEB766F1E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/0/323830343a376662383a3a2f33322d3438203d3e20323731373035.roa
Signing time:             Wed 10 Jan 2024 14:01:24 +0000
ROA not before:           Wed 10 Jan 2024 13:56:24 +0000
ROA not after:            Wed 08 Jan 2025 14:01:24 +0000
asID:                     271705
IP address blocks:        2804:7fb8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:13:d1:25:15:dd:76:0a:33:ca:06:12:06:84:a7:69:c7:e5:3c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD7FCBBC453CEAD2151004BDA36F24FEB766F1E3
        Validity
            Not Before: Jan 10 13:56:24 2024 GMT
            Not After : Jan  8 14:01:24 2025 GMT
        Subject: CN=63EFCE14946A06B7B98C05E46D9578CAAA1508F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:56:d1:66:23:1f:db:79:f0:17:d9:ec:d2:97:
                    2f:c8:8c:bd:f0:93:53:91:9b:10:cb:c5:8c:d9:be:
                    7b:c8:1f:d2:cd:ab:0c:e8:91:10:e9:12:43:d2:cf:
                    fe:66:fe:0c:aa:7b:c9:02:90:9e:25:0c:d3:a6:f9:
                    dc:fb:3f:9f:ad:f2:ab:a4:1b:f1:bb:87:50:88:fb:
                    a8:cb:a6:7e:70:3d:92:83:90:46:4a:84:5c:ee:fb:
                    d1:71:4f:b5:b3:0d:1d:27:8e:de:e7:75:b7:4d:ca:
                    cd:92:9a:ba:32:f8:e8:c2:e5:d5:43:66:54:7f:45:
                    cc:65:e5:51:56:c0:5e:fb:3a:68:5b:55:77:da:88:
                    b8:e6:ef:5a:35:de:1e:f6:fa:70:ac:4f:b1:de:48:
                    b5:7a:50:fd:e4:6c:26:46:2a:ea:8a:6a:b3:7e:d9:
                    a7:74:b0:1e:9e:c8:c6:42:e1:30:ea:4d:e4:74:dd:
                    91:bb:9b:d0:9f:85:26:35:8d:2d:a6:fa:7f:e1:6f:
                    24:54:f7:c1:61:2c:16:d4:f2:d2:b8:4c:14:6a:65:
                    f9:08:49:01:3a:39:77:cf:be:6a:51:98:96:11:5b:
                    47:1a:ca:cc:91:44:b7:4a:de:85:09:e0:df:9b:c4:
                    ff:48:cb:02:7a:f3:5f:e0:ee:31:62:47:e8:86:30:
                    b8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:EF:CE:14:94:6A:06:B7:B9:8C:05:E4:6D:95:78:CA:AA:15:08:F7
            X509v3 Authority Key Identifier:
                keyid:DD:7F:CB:BC:45:3C:EA:D2:15:10:04:BD:A3:6F:24:FE:B7:66:F1:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/0/DD7FCBBC453CEAD2151004BDA36F24FEB766F1E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD7FCBBC453CEAD2151004BDA36F24FEB766F1E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/0/323830343a376662383a3a2f33322d3438203d3e20323731373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7fb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:b9:c2:ce:ab:93:64:f8:59:88:67:eb:c8:b9:6c:19:bc:65:
         c9:8c:5e:82:b5:80:8f:bb:90:23:bf:c9:69:4b:bb:84:44:77:
         11:e4:36:f5:21:b2:fd:6b:fd:a6:a3:fe:32:cf:9c:a6:d9:5f:
         d2:92:ca:bb:f2:b0:6e:be:c5:9d:3c:4d:e6:da:34:6b:c3:e3:
         3c:6c:7d:69:e4:bb:b3:c2:ca:0d:fc:77:73:e1:ed:47:86:6b:
         85:97:fb:af:d6:df:25:27:39:4f:3e:14:5b:44:8c:ee:05:35:
         51:31:c6:49:1d:1d:fc:12:d5:be:36:3c:b2:ef:0d:f2:26:db:
         12:51:d5:26:52:63:a6:c0:ca:4a:06:6e:53:a1:89:08:1a:05:
         da:59:55:be:37:3b:ec:a1:9e:fc:76:d5:ac:6a:08:cb:aa:5d:
         f8:08:75:c7:0c:c8:b5:b3:42:46:d6:e9:99:05:44:17:23:a3:
         b1:b2:a4:8c:56:34:7b:b6:93:31:36:f8:42:60:01:19:9f:7d:
         2a:78:3f:a6:9a:57:81:50:f5:1b:d5:c0:8b:4c:e2:4a:22:cd:
         64:f5:e4:10:17:ab:70:72:d9:0a:3d:be:4c:2a:96:27:6b:51:
         2d:9a:19:f5:42:36:4d:a3:47:fb:d9:f1:5a:84:e8:2b:0b:1b:
         28:54:02:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org