Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/323830343a343365303a3a2f33322d3332203d3e20323637353936.roa
File:                     323830343a343365303a3a2f33322d3332203d3e20323637353936.roa (raw, json)
Hash identifier:          wWBclj0VZspyFsLr9MDlvka5eMtgfQ28PQb4b2ebFKg=
Subject key identifier:   74:3B:41:8B:0A:FD:58:25:C8:40:56:38:F7:B5:76:1C:19:F6:3C:07
Certificate issuer:       /CN=7A6E161A8B2B31DB30E03A950051D8233F43BE11
Certificate serial:       074B572045FAEAD327A42D2E67BA830C0C2B101A
Authority key identifier: 7A:6E:16:1A:8B:2B:31:DB:30:E0:3A:95:00:51:D8:23:3F:43:BE:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A6E161A8B2B31DB30E03A950051D8233F43BE11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/323830343a343365303a3a2f33322d3332203d3e20323637353936.roa
Signing time:             Thu 15 Feb 2024 17:54:28 +0000
ROA not before:           Thu 15 Feb 2024 17:49:28 +0000
ROA not after:            Thu 13 Feb 2025 17:54:28 +0000
asID:                     267596
IP address blocks:        2804:43e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:4b:57:20:45:fa:ea:d3:27:a4:2d:2e:67:ba:83:0c:0c:2b:10:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A6E161A8B2B31DB30E03A950051D8233F43BE11
        Validity
            Not Before: Feb 15 17:49:28 2024 GMT
            Not After : Feb 13 17:54:28 2025 GMT
        Subject: CN=743B418B0AFD5825C8405638F7B5761C19F63C07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f8:bc:0b:21:51:5c:56:fb:f4:31:a7:16:d2:
                    9e:08:e2:15:4e:96:95:ba:41:6f:73:04:00:5f:16:
                    30:f2:a6:e1:8d:77:ba:eb:87:c4:3c:40:6f:6c:21:
                    96:9a:85:2e:d2:ea:1a:38:28:e2:03:5b:38:fe:fd:
                    bd:63:b4:14:87:db:00:af:4e:3f:82:a8:8a:71:0b:
                    4d:ee:74:24:db:6d:6d:ab:38:af:2b:1e:ee:b3:1e:
                    cc:fa:f2:22:9d:a0:83:7b:f5:12:5e:d8:d8:60:1b:
                    f2:73:0c:63:fd:1e:87:6b:6f:ba:13:74:da:bd:d5:
                    99:c0:39:86:de:f0:50:01:82:63:db:c1:63:db:22:
                    43:ea:92:00:77:43:32:9b:e3:f1:2b:90:c7:e5:26:
                    03:a1:5e:e9:e8:8b:05:16:7f:97:8f:ab:26:65:09:
                    dc:bc:3d:14:11:99:06:9c:4a:8f:d0:0f:73:4d:31:
                    79:65:f7:51:f9:5d:af:ed:10:42:20:05:d6:6b:4f:
                    bf:73:1b:5d:d3:ae:69:9a:6e:40:4a:43:ff:d0:8a:
                    37:a9:bd:55:d9:3b:57:db:3f:9e:c2:41:f8:28:44:
                    63:5d:e0:e8:2b:f5:4a:6b:cd:97:c3:10:f4:c1:e3:
                    64:91:e8:de:d8:69:fb:a9:54:61:b6:aa:36:d9:f0:
                    88:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:3B:41:8B:0A:FD:58:25:C8:40:56:38:F7:B5:76:1C:19:F6:3C:07
            X509v3 Authority Key Identifier:
                keyid:7A:6E:16:1A:8B:2B:31:DB:30:E0:3A:95:00:51:D8:23:3F:43:BE:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/7A6E161A8B2B31DB30E03A950051D8233F43BE11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A6E161A8B2B31DB30E03A950051D8233F43BE11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/323830343a343365303a3a2f33322d3332203d3e20323637353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:76:1d:7e:63:99:55:be:34:0f:5b:fe:23:72:ea:a8:a3:0f:
         3a:9b:73:3d:67:da:e8:57:fd:6a:fa:69:cb:d4:d7:8c:2e:67:
         56:71:5f:fd:ac:b3:11:41:bf:c8:07:4f:9d:b8:9a:25:23:c7:
         9d:32:e7:b6:54:cb:16:dd:7d:3d:de:82:88:4d:19:c7:e9:5f:
         bb:4b:37:9c:53:ea:c6:00:33:e2:ad:cd:4b:f4:c2:f4:a3:00:
         fd:62:55:7c:9f:1d:a9:66:49:6d:5b:b2:09:0f:b6:6a:4c:bc:
         35:6e:26:d6:4b:be:87:b2:11:12:f0:ed:0f:e0:a4:54:13:33:
         f7:f2:27:1e:87:f1:45:f7:ec:f2:0a:03:06:9b:0f:c8:06:41:
         59:fa:4e:15:be:42:fd:1d:3a:db:dd:20:2f:1a:41:a8:91:de:
         c5:8c:39:b7:d8:3a:3c:d9:30:03:c9:d1:7c:07:ff:68:1e:2d:
         a1:01:2a:17:40:e8:a1:b8:38:e6:e5:bc:21:cf:3e:3c:3f:80:
         3e:4b:a4:1d:e4:b5:76:05:fb:d4:e8:52:fb:5e:83:ff:c6:85:
         08:e6:f0:51:10:c7:96:cc:8e:b3:4b:72:e1:34:51:7a:67:8c:
         0f:80:d5:ae:0d:d3:24:2f:fb:63:eb:36:95:9a:ad:82:d7:ad:
         1d:d6:6a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:13 2024 by rpki-client on console-fra.rpki-client.org