Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/323830343a333339383a3a2f33322d3438203d3e20323635343036.roa
File:                     323830343a333339383a3a2f33322d3438203d3e20323635343036.roa (raw, json)
Hash identifier:          JUBIzXA2E/oPvVW+nXZFVx4ZxG9Qt/7GswfV0PFx638=
Subject key identifier:   77:4D:EF:BB:F4:93:6D:AE:45:19:C1:8A:E6:80:BD:A9:DD:AA:04:D3
Certificate issuer:       /CN=9730BDC63CD0A76C9A7D3D8FA6CBD96924ACBD67
Certificate serial:       3FAC6B4F6550F1C0935FF524070E8E5D7AE7A291
Authority key identifier: 97:30:BD:C6:3C:D0:A7:6C:9A:7D:3D:8F:A6:CB:D9:69:24:AC:BD:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730BDC63CD0A76C9A7D3D8FA6CBD96924ACBD67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/323830343a333339383a3a2f33322d3438203d3e20323635343036.roa
Signing time:             Tue 22 Aug 2023 21:26:47 +0000
ROA not before:           Tue 22 Aug 2023 21:21:47 +0000
ROA not after:            Tue 20 Aug 2024 21:26:47 +0000
asID:                     265406
IP address blocks:        2804:3398::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ac:6b:4f:65:50:f1:c0:93:5f:f5:24:07:0e:8e:5d:7a:e7:a2:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730BDC63CD0A76C9A7D3D8FA6CBD96924ACBD67
        Validity
            Not Before: Aug 22 21:21:47 2023 GMT
            Not After : Aug 20 21:26:47 2024 GMT
        Subject: CN=774DEFBBF4936DAE4519C18AE680BDA9DDAA04D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e9:b2:ec:c4:f1:7a:00:19:1c:22:83:80:b3:
                    71:9b:35:67:19:57:2d:a4:24:b6:bc:85:fe:ac:f5:
                    87:1a:d9:e6:e0:1e:43:c6:f9:71:5e:ac:85:22:ed:
                    ee:03:3c:0b:7a:85:07:60:d3:1d:d5:6a:c7:8b:18:
                    c0:0f:24:77:43:30:e7:43:b7:2a:bb:61:15:0c:f9:
                    5f:7e:3f:24:0f:f0:0e:70:28:6c:ee:f0:6d:d9:62:
                    bc:2d:13:cb:a8:84:81:16:7c:de:e7:d9:68:bb:51:
                    42:50:84:d4:92:ad:4c:ea:1b:ed:30:1d:6e:fb:7e:
                    75:8c:76:e8:43:6c:a3:72:86:f1:d2:1d:b7:fd:24:
                    9d:52:93:45:bf:1b:50:f6:7c:35:d8:9e:7c:d0:59:
                    c0:15:fc:ed:f0:41:36:20:45:20:07:3d:a0:91:a7:
                    06:90:63:83:01:b9:39:39:54:49:77:0c:63:9a:5a:
                    d3:17:28:f2:9f:20:31:ae:56:b1:8f:aa:58:97:30:
                    08:fa:33:2c:19:3a:4d:0f:c6:d6:75:9b:82:d2:6c:
                    d0:89:49:31:50:29:ee:7e:83:a1:9f:4b:1a:0f:d1:
                    e4:da:3e:41:24:26:74:e3:29:e7:3c:c4:cf:e3:03:
                    75:df:02:a8:20:6c:20:f4:ec:ad:a1:4e:1b:a9:f4:
                    be:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4D:EF:BB:F4:93:6D:AE:45:19:C1:8A:E6:80:BD:A9:DD:AA:04:D3
            X509v3 Authority Key Identifier:
                keyid:97:30:BD:C6:3C:D0:A7:6C:9A:7D:3D:8F:A6:CB:D9:69:24:AC:BD:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/9730BDC63CD0A76C9A7D3D8FA6CBD96924ACBD67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730BDC63CD0A76C9A7D3D8FA6CBD96924ACBD67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/323830343a333339383a3a2f33322d3438203d3e20323635343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3398::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:4c:d6:76:1c:52:6d:56:5f:84:9d:9b:f8:77:e2:4c:04:92:
         09:66:ca:d2:2b:8b:ac:89:a5:8f:aa:aa:d7:be:f7:d2:8f:03:
         b8:3a:7a:68:9c:d9:49:44:c6:54:d4:4d:cb:ba:ad:3d:54:43:
         b3:5f:4d:46:5b:45:c1:53:5e:d2:ab:78:ec:36:fa:7e:c0:b3:
         21:de:48:61:4d:fd:9d:b6:53:3b:da:74:3b:64:87:1b:0d:0e:
         20:fa:d6:bc:2a:38:64:ef:db:0d:2a:9a:df:dc:19:e8:da:81:
         fc:3f:34:a0:ec:4c:50:fc:cc:c7:1e:5b:31:3a:0e:a2:8b:38:
         95:8f:a5:43:8f:7b:b5:dd:30:6b:fe:5b:c8:18:75:77:65:0f:
         4c:8f:81:da:63:dd:81:ef:7a:96:78:da:0a:87:4b:0d:b9:d4:
         43:f6:e5:2f:46:94:b4:15:f4:dc:4e:87:54:b6:20:e7:bc:be:
         e7:22:3d:4e:5f:03:bd:b6:e4:15:eb:88:5a:23:a2:69:6a:ff:
         00:43:d8:1f:c7:56:32:cd:26:18:74:9c:c3:0b:ac:74:22:42:
         03:1e:b1:37:7c:b7:b9:3d:5b:95:1c:69:f4:20:d6:9e:d1:52:
         7e:83:66:65:fe:a3:ae:e7:a0:06:aa:7f:dc:86:a7:5e:13:d8:
         3c:8d:ff:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org