Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/323830343a6533383a343030303a3a2f33342d3334203d3e20323632393432.roa
File:                     323830343a6533383a343030303a3a2f33342d3334203d3e20323632393432.roa (raw, json)
Hash identifier:          a9b4zVZBeItg1RTmSCLIiW1ycgnhPGCahz4LD+YLNBg=
Subject key identifier:   DA:5D:D7:85:5E:F5:5B:B1:24:DD:C9:32:05:0C:E6:E3:18:7A:A6:AE
Certificate issuer:       /CN=C7D2D4B830F24D1323D706EAEFB759AC47A5304F
Certificate serial:       120341C7741F0105F53A7B1DDDC475652EC458A8
Authority key identifier: C7:D2:D4:B8:30:F2:4D:13:23:D7:06:EA:EF:B7:59:AC:47:A5:30:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D2D4B830F24D1323D706EAEFB759AC47A5304F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/323830343a6533383a343030303a3a2f33342d3334203d3e20323632393432.roa
Signing time:             Wed 03 Apr 2024 18:31:35 +0000
ROA not before:           Wed 03 Apr 2024 18:26:35 +0000
ROA not after:            Wed 02 Apr 2025 18:31:35 +0000
asID:                     262942
IP address blocks:        2804:e38:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:03:41:c7:74:1f:01:05:f5:3a:7b:1d:dd:c4:75:65:2e:c4:58:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7D2D4B830F24D1323D706EAEFB759AC47A5304F
        Validity
            Not Before: Apr  3 18:26:35 2024 GMT
            Not After : Apr  2 18:31:35 2025 GMT
        Subject: CN=DA5DD7855EF55BB124DDC932050CE6E3187AA6AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:43:db:5c:8e:f3:57:2f:bc:02:06:c3:2a:11:
                    f1:af:ef:80:65:9f:82:4a:d8:b8:22:16:17:91:99:
                    82:36:5b:1d:e9:e2:a8:6a:04:a2:d9:d3:eb:e1:90:
                    d6:6d:5e:86:17:84:86:be:39:8f:0d:bb:ec:3a:78:
                    93:ba:b7:d8:be:7c:5e:85:ef:77:a6:2d:6f:da:54:
                    34:fd:74:98:ba:ba:dd:56:79:fc:b9:f3:d5:07:0e:
                    04:8d:9d:2e:9b:ae:02:74:c0:3f:ae:82:8e:02:56:
                    c9:6a:c3:4c:bf:42:66:d0:7d:0d:ec:49:bb:6f:4b:
                    db:1d:24:a4:8d:00:c0:44:55:24:b5:79:3f:41:98:
                    11:e2:b8:0f:ae:22:e3:a9:d0:b3:ae:c0:6a:7d:69:
                    28:2c:ee:d5:5b:09:f8:8d:50:bb:2b:fa:c8:b0:54:
                    b0:15:8b:73:a8:08:12:40:b8:89:fa:74:05:07:e5:
                    90:b9:b9:4c:d9:f6:5c:a5:ff:56:8a:22:76:36:b8:
                    1d:c0:af:2d:db:de:36:78:fb:28:7d:68:ae:14:6a:
                    6e:8e:6f:36:80:c3:af:24:9d:fd:02:ba:1c:cc:ee:
                    50:9d:34:3a:54:c3:8b:c2:9e:23:13:91:64:01:e5:
                    ed:fc:93:25:2e:d9:c7:0b:54:b2:12:8b:8c:8a:b8:
                    e4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5D:D7:85:5E:F5:5B:B1:24:DD:C9:32:05:0C:E6:E3:18:7A:A6:AE
            X509v3 Authority Key Identifier:
                keyid:C7:D2:D4:B8:30:F2:4D:13:23:D7:06:EA:EF:B7:59:AC:47:A5:30:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/C7D2D4B830F24D1323D706EAEFB759AC47A5304F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D2D4B830F24D1323D706EAEFB759AC47A5304F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/323830343a6533383a343030303a3a2f33342d3334203d3e20323632393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e38:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         74:61:4c:fb:54:df:dd:fa:41:66:76:d5:31:8e:44:85:b8:4e:
         3c:aa:47:fb:ba:7d:34:f1:8f:14:bb:fe:e7:3d:e3:3b:4d:d6:
         07:47:e2:2f:fe:3d:2b:2f:c2:4e:e4:ff:f9:7f:42:b6:67:92:
         af:56:ed:33:6b:aa:3c:59:63:f7:4f:39:41:81:dd:0a:33:69:
         d0:51:ef:43:1b:df:02:24:83:19:3a:36:91:d6:6a:35:b4:9d:
         b5:4c:51:02:4e:a4:38:4e:5d:fc:21:e8:10:ea:74:82:ca:e8:
         22:8e:86:39:c5:46:b3:95:4b:8e:52:7c:90:60:60:fc:25:52:
         9d:ee:df:68:60:18:64:41:8e:4e:dc:32:f6:23:9c:c1:ba:40:
         4f:24:5c:0b:14:d5:39:6e:99:6a:16:a9:fd:ad:c3:35:a0:ff:
         72:6d:48:3a:2f:a7:08:d6:76:b4:17:1a:6d:b2:3a:de:75:a4:
         53:1f:78:4e:4a:7a:b6:24:3a:3f:fc:00:7e:87:74:8b:24:0d:
         a8:95:fa:07:0d:8f:4f:08:55:94:ed:00:ea:41:0e:e6:aa:56:
         c5:54:c1:58:25:f5:cf:a8:1a:9b:a0:59:69:b7:72:ac:a3:73:
         30:6c:db:9e:19:a0:19:03:ab:03:b5:ff:9a:89:41:ef:d0:89:
         bd:f0:43:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 16:21:29 2024 by rpki-client on console-fra.rpki-client.org