Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/323830343a373034383a383030303a3a2f33332d3333203d3e20323730373137.roa
File:                     323830343a373034383a383030303a3a2f33332d3333203d3e20323730373137.roa (raw, json)
Hash identifier:          g4v8gZJhy4DK9ya1W3nS3bkaUadoyTnrINqEnVkmRmY=
Subject key identifier:   62:8D:8D:3E:6E:D4:4B:0E:C1:04:E3:B4:FC:26:A6:33:FD:A0:B7:6E
Certificate issuer:       /CN=E43FD017602A495594D333F8A9BF37138B3A9627
Certificate serial:       3A28C2786EBAFF3DF0622BB16BFA89BEB7B97252
Authority key identifier: E4:3F:D0:17:60:2A:49:55:94:D3:33:F8:A9:BF:37:13:8B:3A:96:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E43FD017602A495594D333F8A9BF37138B3A9627.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/323830343a373034383a383030303a3a2f33332d3333203d3e20323730373137.roa
Signing time:             Tue 22 Aug 2023 15:21:33 +0000
ROA not before:           Tue 22 Aug 2023 15:16:33 +0000
ROA not after:            Tue 20 Aug 2024 15:21:33 +0000
asID:                     270717
IP address blocks:        2804:7048:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:28:c2:78:6e:ba:ff:3d:f0:62:2b:b1:6b:fa:89:be:b7:b9:72:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E43FD017602A495594D333F8A9BF37138B3A9627
        Validity
            Not Before: Aug 22 15:16:33 2023 GMT
            Not After : Aug 20 15:21:33 2024 GMT
        Subject: CN=628D8D3E6ED44B0EC104E3B4FC26A633FDA0B76E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b7:40:5c:d8:2a:ba:61:ca:63:f8:39:0b:77:
                    b1:3e:9f:1a:2f:d2:8d:03:c3:8c:e9:8f:f7:1b:bd:
                    8e:2b:20:1a:e3:8f:68:0a:cb:55:de:32:b8:6d:a4:
                    60:a9:08:60:91:2a:71:33:f8:96:7c:65:cc:35:ac:
                    ce:21:de:4e:74:f4:59:56:61:31:1d:c4:36:da:8b:
                    a5:8a:eb:17:9b:6c:f3:b6:72:f4:ad:be:6d:22:06:
                    b4:45:30:42:f4:2d:ac:27:9a:bd:18:80:8b:81:84:
                    78:5c:e6:48:67:22:74:07:dc:2c:a6:b0:45:d9:43:
                    6c:6d:7a:b6:bc:cf:1b:db:c9:b7:91:f6:55:03:40:
                    a4:46:05:40:23:a6:7b:3a:ea:a9:3b:b4:b0:c5:60:
                    76:e1:ad:66:a6:fc:e1:ae:55:bf:aa:63:f3:43:70:
                    39:82:d4:77:0d:9f:5a:13:7c:14:88:bc:1c:1c:bf:
                    ba:9a:dc:17:f9:8a:03:e3:82:d6:8e:b3:f2:98:cb:
                    85:89:4c:ec:fe:ae:33:9e:34:f9:88:f5:a8:df:87:
                    7a:f6:40:a3:da:cb:5e:fd:c9:67:d9:93:35:19:a3:
                    ef:01:6e:34:99:0f:c8:35:b3:c9:6c:47:de:50:b9:
                    a6:24:97:0c:3a:d2:8b:fc:ef:c8:f4:fd:98:91:c5:
                    32:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8D:8D:3E:6E:D4:4B:0E:C1:04:E3:B4:FC:26:A6:33:FD:A0:B7:6E
            X509v3 Authority Key Identifier:
                keyid:E4:3F:D0:17:60:2A:49:55:94:D3:33:F8:A9:BF:37:13:8B:3A:96:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/E43FD017602A495594D333F8A9BF37138B3A9627.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E43FD017602A495594D333F8A9BF37138B3A9627.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/323830343a373034383a383030303a3a2f33332d3333203d3e20323730373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7048:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         50:6c:35:0e:2a:f8:a7:80:15:29:3e:2b:cb:0f:94:9c:d7:40:
         98:e2:2f:4e:08:ca:f5:ae:19:68:a8:55:a3:3e:d7:8b:78:a0:
         cf:4b:31:6a:58:ef:5f:e9:c7:ac:5c:fd:68:f8:eb:8e:48:09:
         a5:81:97:fc:c5:a4:c3:da:7f:3d:42:3f:df:58:aa:2d:4d:04:
         85:11:81:06:0c:57:46:a7:40:0c:5d:6f:5d:28:ef:87:67:31:
         b6:5c:5c:67:69:f5:f8:b4:9b:05:33:e0:d3:a7:7b:ef:c2:69:
         bd:eb:9a:fc:fc:6b:70:44:cf:f8:8a:83:2d:9d:e3:41:33:6b:
         ce:36:0c:20:13:f3:e0:31:1c:76:ad:a8:02:57:f5:e0:6a:39:
         15:a8:3e:5d:8a:12:96:ec:8f:e8:02:c2:62:52:f1:b6:af:6e:
         80:ee:90:af:9b:49:7d:32:35:04:e1:0f:d7:10:f5:38:92:02:
         5f:c0:14:78:60:af:72:27:e5:6b:03:20:65:73:cf:6f:e1:f8:
         b9:cb:ce:14:04:27:a8:f9:32:61:ed:c3:1b:76:a2:03:96:e7:
         a2:34:9e:b7:9f:39:f2:f5:1a:7a:dc:01:ed:aa:69:be:09:73:
         73:51:a7:12:5f:44:f7:af:50:41:2e:9a:80:7e:4e:e6:06:41:
         a2:5a:dc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org