Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/0/323830343a343334633a3a2f33332d3333203d3e20323637353631.roa
File:                     323830343a343334633a3a2f33332d3333203d3e20323637353631.roa (raw, json)
Hash identifier:          9O38IWkxP4b6Lbn/cUEhCdgCdRcI6bFgUJ0TJK6yZzk=
Subject key identifier:   DA:DE:07:72:FF:66:F2:D4:DF:94:A0:93:B4:40:81:A4:62:77:19:33
Certificate issuer:       /CN=E4BB7B7EEFAB6DFDFD4441966045A23CF06D02E5
Certificate serial:       02A0F357B79BFFEF391C9814A71CCA7EFB7896DF
Authority key identifier: E4:BB:7B:7E:EF:AB:6D:FD:FD:44:41:96:60:45:A2:3C:F0:6D:02:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E4BB7B7EEFAB6DFDFD4441966045A23CF06D02E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/0/323830343a343334633a3a2f33332d3333203d3e20323637353631.roa
Signing time:             Mon 04 Mar 2024 19:32:10 +0000
ROA not before:           Mon 04 Mar 2024 19:27:10 +0000
ROA not after:            Mon 03 Mar 2025 19:32:10 +0000
asID:                     267561
IP address blocks:        2804:434c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a0:f3:57:b7:9b:ff:ef:39:1c:98:14:a7:1c:ca:7e:fb:78:96:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4BB7B7EEFAB6DFDFD4441966045A23CF06D02E5
        Validity
            Not Before: Mar  4 19:27:10 2024 GMT
            Not After : Mar  3 19:32:10 2025 GMT
        Subject: CN=DADE0772FF66F2D4DF94A093B44081A462771933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4f:bd:05:c6:14:7c:3c:b2:4d:6d:b0:95:f0:
                    56:b0:77:6e:79:db:37:1b:65:47:49:05:d8:00:00:
                    18:d8:03:3a:6c:c3:ed:d7:7d:75:da:8b:a9:d4:0c:
                    19:07:27:80:1b:bc:ce:64:c3:d8:81:dc:be:d8:17:
                    cf:0f:58:4e:9f:db:eb:a5:80:fc:5d:d2:79:53:5c:
                    f4:8f:05:61:28:fb:b1:31:e8:81:5f:24:19:33:2b:
                    b0:ec:75:af:eb:a6:55:bd:19:aa:bc:68:43:c7:68:
                    d6:33:67:b8:8c:e2:1e:ed:5f:12:8c:49:b8:38:bf:
                    ef:cf:f9:8a:27:4b:31:0f:9c:b4:78:28:40:49:8f:
                    4b:cf:5a:4e:70:bc:18:98:76:fc:76:64:35:a1:38:
                    10:52:c9:74:01:ce:f2:c5:a7:62:78:cf:83:98:bc:
                    71:78:68:78:64:8e:92:f8:6e:df:d3:41:61:06:07:
                    ad:05:53:ad:2d:a9:70:ed:dd:96:ca:59:31:7c:af:
                    c2:6b:1f:04:1c:97:6a:b6:ae:d3:31:a7:d0:33:37:
                    20:9b:06:a9:33:a4:c1:56:0b:b5:39:58:70:99:ed:
                    f2:38:dc:05:7a:8b:48:b1:26:07:53:1b:be:c8:8e:
                    f1:6d:22:d4:14:ce:f0:63:18:d7:29:32:78:c5:fc:
                    9d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DE:07:72:FF:66:F2:D4:DF:94:A0:93:B4:40:81:A4:62:77:19:33
            X509v3 Authority Key Identifier:
                keyid:E4:BB:7B:7E:EF:AB:6D:FD:FD:44:41:96:60:45:A2:3C:F0:6D:02:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/0/E4BB7B7EEFAB6DFDFD4441966045A23CF06D02E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E4BB7B7EEFAB6DFDFD4441966045A23CF06D02E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/0/323830343a343334633a3a2f33332d3333203d3e20323637353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:434c::/33

    Signature Algorithm: sha256WithRSAEncryption
         aa:76:e9:dc:6f:8c:6c:34:eb:26:4d:0a:49:97:86:d1:17:92:
         23:4b:26:42:13:4f:b1:0b:11:b2:87:f5:c2:23:3c:85:72:c6:
         15:f0:ca:1d:f4:ab:91:06:59:a1:9a:c3:e0:0d:b0:f3:94:60:
         be:51:74:98:68:2f:3d:b9:0d:48:1a:9e:31:56:24:9a:33:cf:
         b2:4b:45:7e:c9:48:e4:5e:96:0f:54:dc:7a:f5:3f:2b:b4:23:
         ef:bc:74:49:96:af:1a:0c:d0:99:13:ee:ac:e6:7f:2a:37:b7:
         bb:0e:24:37:2e:08:c3:53:9a:87:15:41:45:88:fb:2a:4a:2b:
         96:52:79:07:98:4c:1d:43:46:2c:6a:60:f5:ad:41:46:80:93:
         85:73:85:da:ae:11:64:12:1d:ee:b3:22:ff:06:e2:8e:6e:00:
         81:b8:87:49:2b:0c:78:ed:99:5d:55:7f:0e:46:ab:7e:12:8f:
         ac:91:b7:c9:d3:e1:56:e6:a4:dd:37:37:a0:f2:21:66:2c:d7:
         cc:70:37:b5:02:50:43:b0:b6:db:4b:a7:97:c7:86:c2:8c:14:
         f5:d3:e6:af:ce:44:fe:1c:07:cb:67:fa:5a:75:4d:4a:5e:5a:
         51:96:4e:2b:80:ef:7d:14:41:a0:1a:a4:ce:1c:8a:46:f4:ca:
         18:7e:74:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:35 2024 by rpki-client on console-ams.rpki-client.org