Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/323830343a373034383a3a2f33332d3333203d3e20323730373137.roa
File:                     323830343a373034383a3a2f33332d3333203d3e20323730373137.roa (raw, json)
Hash identifier:          Xe2ESOJougB74WD8I/5/tm6251LtoMgd3cms78do35w=
Subject key identifier:   71:7E:7C:08:1C:E2:11:8D:D1:67:77:40:79:47:31:EA:F9:C1:C6:27
Certificate issuer:       /CN=E43FD017602A495594D333F8A9BF37138B3A9627
Certificate serial:       5F7B3B2085DE0299F30ED47A54EA9127A709EE61
Authority key identifier: E4:3F:D0:17:60:2A:49:55:94:D3:33:F8:A9:BF:37:13:8B:3A:96:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E43FD017602A495594D333F8A9BF37138B3A9627.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/323830343a373034383a3a2f33332d3333203d3e20323730373137.roa
Signing time:             Tue 22 Aug 2023 15:17:31 +0000
ROA not before:           Tue 22 Aug 2023 15:12:31 +0000
ROA not after:            Tue 20 Aug 2024 15:17:31 +0000
asID:                     270717
IP address blocks:        2804:7048::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:7b:3b:20:85:de:02:99:f3:0e:d4:7a:54:ea:91:27:a7:09:ee:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E43FD017602A495594D333F8A9BF37138B3A9627
        Validity
            Not Before: Aug 22 15:12:31 2023 GMT
            Not After : Aug 20 15:17:31 2024 GMT
        Subject: CN=717E7C081CE2118DD1677740794731EAF9C1C627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:85:7a:14:a2:4d:94:ca:ee:b2:47:52:97:be:
                    bc:47:cf:ae:b4:e2:f6:62:b9:60:67:0c:bf:61:08:
                    24:a2:eb:0e:2a:1b:46:e2:58:e7:d1:92:45:63:0c:
                    da:02:fc:11:a6:c0:e0:22:4b:9c:d1:b4:e9:12:63:
                    f4:2f:a4:e0:71:3a:f7:3d:1a:94:30:5a:c6:08:c9:
                    79:27:5d:68:27:9e:ba:05:94:1c:a4:be:1c:04:46:
                    b4:90:51:66:68:23:a7:5f:ad:77:7e:a3:ba:5a:02:
                    48:83:69:47:46:56:ad:a5:de:4c:b1:5d:36:01:56:
                    c2:29:fc:12:6e:8e:32:51:7d:4b:70:4e:26:d1:2d:
                    da:a9:63:25:a4:a2:25:da:e5:2d:b9:59:fe:9b:a1:
                    74:21:33:a5:14:ef:34:da:62:f0:3a:ae:b0:ee:e8:
                    e9:f8:09:6a:4e:dc:69:b2:3f:e0:37:a7:9e:73:41:
                    5a:24:11:ec:61:2b:1f:d2:c1:53:83:a9:fe:4f:01:
                    3c:1b:9e:e2:ed:4d:6a:4f:b1:52:8e:90:49:df:81:
                    bb:13:a9:04:e2:d4:51:d1:35:32:3b:c7:fe:a6:7f:
                    01:f1:4b:4d:16:76:6e:4b:f0:26:ac:c5:1c:82:4f:
                    6c:20:8e:fc:73:30:33:5d:66:5e:12:32:15:66:70:
                    87:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7E:7C:08:1C:E2:11:8D:D1:67:77:40:79:47:31:EA:F9:C1:C6:27
            X509v3 Authority Key Identifier:
                keyid:E4:3F:D0:17:60:2A:49:55:94:D3:33:F8:A9:BF:37:13:8B:3A:96:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/E43FD017602A495594D333F8A9BF37138B3A9627.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E43FD017602A495594D333F8A9BF37138B3A9627.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/323830343a373034383a3a2f33332d3333203d3e20323730373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7048::/33

    Signature Algorithm: sha256WithRSAEncryption
         b7:e9:8e:c8:78:66:0b:2e:49:19:79:5c:70:88:92:43:fa:21:
         46:00:bc:75:e6:6e:7a:b7:e6:39:4b:d8:da:b4:89:6e:69:a2:
         ea:30:f6:32:78:bf:d1:6f:2a:bb:9a:ed:93:ed:96:eb:99:65:
         97:93:b3:0f:a3:a0:04:25:4a:7f:c9:8e:a1:ea:4d:f3:7d:6c:
         06:ac:a6:4b:b4:0b:de:54:0e:c3:65:ac:a6:a4:1c:9a:d8:e1:
         66:f8:4b:b8:b4:bd:e8:61:58:bc:54:83:9e:0d:6e:32:96:c9:
         15:78:63:35:d0:ae:dc:76:c4:d4:77:1b:fa:b5:07:4d:3e:9b:
         8b:f7:26:a1:5d:c8:ce:e8:af:2a:a2:01:a9:8a:18:58:a7:7b:
         c3:51:19:9a:03:fa:71:fc:98:bf:b1:24:69:22:83:97:35:73:
         4a:c6:f3:40:61:a8:a8:1a:41:15:46:fc:76:4f:0b:30:68:27:
         c0:33:4e:a5:f4:41:90:2f:32:03:dd:55:57:6d:1a:a9:6c:7f:
         20:b9:2c:7c:45:a9:23:77:39:89:67:42:9c:d3:76:da:f8:be:
         96:45:81:2b:bf:c0:d4:54:d4:bb:0b:91:af:43:c1:2b:19:95:
         d9:76:5c:cf:30:0d:a2:83:b5:78:42:69:33:b0:f4:98:76:ad:
         b7:3a:6b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org