Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/323830343a6533383a383030303a3a2f33332d3333203d3e20323632393432.roa
File:                     323830343a6533383a383030303a3a2f33332d3333203d3e20323632393432.roa (raw, json)
Hash identifier:          r+SZ9WB0bDXuT9n1UuZIPdPJ9uujqi1sqdLQUIDeXuM=
Subject key identifier:   C0:0E:CB:3A:BA:20:3F:DB:44:A2:DC:25:C5:C9:9B:D9:54:CA:A8:27
Certificate issuer:       /CN=C7D2D4B830F24D1323D706EAEFB759AC47A5304F
Certificate serial:       7CAD86A1EE00A6D80DD41BA4F388BF975DB1B2ED
Authority key identifier: C7:D2:D4:B8:30:F2:4D:13:23:D7:06:EA:EF:B7:59:AC:47:A5:30:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D2D4B830F24D1323D706EAEFB759AC47A5304F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/323830343a6533383a383030303a3a2f33332d3333203d3e20323632393432.roa
Signing time:             Wed 03 Apr 2024 18:31:36 +0000
ROA not before:           Wed 03 Apr 2024 18:26:36 +0000
ROA not after:            Wed 02 Apr 2025 18:31:36 +0000
asID:                     262942
IP address blocks:        2804:e38:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ad:86:a1:ee:00:a6:d8:0d:d4:1b:a4:f3:88:bf:97:5d:b1:b2:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7D2D4B830F24D1323D706EAEFB759AC47A5304F
        Validity
            Not Before: Apr  3 18:26:36 2024 GMT
            Not After : Apr  2 18:31:36 2025 GMT
        Subject: CN=C00ECB3ABA203FDB44A2DC25C5C99BD954CAA827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:25:17:8f:6d:5a:d1:29:29:59:76:2b:89:3a:
                    9e:0e:81:cf:02:2b:d9:d9:fc:43:72:72:53:f6:25:
                    74:5d:65:45:76:c3:4f:21:7e:ca:92:77:98:89:1d:
                    ea:b7:6b:cb:c3:0d:34:9b:d6:51:47:d7:b2:8e:c8:
                    34:a6:06:62:45:77:d1:ab:ae:e7:c7:f3:20:20:f7:
                    63:a8:52:fc:4c:c5:fc:f7:77:e0:04:ba:04:93:86:
                    45:1a:c0:0c:56:db:29:4f:58:82:74:f1:1d:a5:2a:
                    16:7f:b2:18:ab:a2:28:97:c1:dc:e4:dc:fa:a8:78:
                    b0:e8:dd:db:5b:f9:53:d0:28:28:63:ed:13:fa:f3:
                    d9:9e:a7:78:d3:f2:cb:67:23:20:04:a4:f8:c4:89:
                    d3:f2:13:ac:67:b6:19:31:18:0b:de:27:c8:e7:25:
                    13:30:a1:d5:b5:63:a7:2b:ea:d5:84:88:f9:71:ab:
                    84:00:35:18:c2:96:fa:1b:85:05:a2:18:b2:4e:6c:
                    27:d6:75:dd:3e:13:68:e6:30:96:af:8e:b0:38:9a:
                    36:ca:e1:ce:20:f1:18:6e:c0:23:3e:ab:51:51:59:
                    dd:c3:d9:f6:90:3a:54:61:1e:1f:06:1a:bd:44:ca:
                    8c:bb:19:38:ee:b9:99:c7:b6:2e:c6:a9:9c:25:80:
                    af:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:0E:CB:3A:BA:20:3F:DB:44:A2:DC:25:C5:C9:9B:D9:54:CA:A8:27
            X509v3 Authority Key Identifier:
                keyid:C7:D2:D4:B8:30:F2:4D:13:23:D7:06:EA:EF:B7:59:AC:47:A5:30:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/C7D2D4B830F24D1323D706EAEFB759AC47A5304F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D2D4B830F24D1323D706EAEFB759AC47A5304F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/323830343a6533383a383030303a3a2f33332d3333203d3e20323632393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e38:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         26:ac:3c:e9:c7:e9:11:01:ac:83:ed:32:28:c1:0a:1f:2e:dc:
         84:fa:4b:00:75:1c:2d:ec:8a:e2:0a:d9:1d:57:1d:ff:e2:14:
         d5:f7:75:3f:32:e8:7f:d5:06:e5:49:69:d8:97:8a:04:fa:0b:
         fe:af:6b:e9:f7:49:49:99:21:4d:a3:15:66:eb:55:c6:93:1a:
         0a:04:ef:c4:e4:fe:47:86:7f:f1:a9:4c:ed:c2:b6:5d:8b:bd:
         68:09:bb:d2:e1:09:6a:0e:0e:b5:43:94:08:cf:c0:f0:db:e8:
         39:e4:72:ad:e4:de:b8:aa:c3:2e:4e:16:6e:35:98:e9:78:21:
         cc:80:cb:d8:b1:39:cb:39:c4:af:8e:a7:62:89:8c:b6:39:26:
         08:91:4e:e4:9e:45:8f:7a:7d:9e:d0:dc:58:9e:fc:40:9b:af:
         9c:c0:34:3a:c6:ed:dd:81:76:7f:cd:2f:c3:8e:90:a6:05:3f:
         63:b4:76:52:ab:4d:cf:96:79:85:92:df:c1:35:2d:12:da:20:
         72:3d:1a:7d:86:47:8a:59:3d:6b:2e:0a:24:9d:12:5a:27:63:
         46:72:09:a1:c3:b1:6a:94:9e:b3:e1:7a:cc:e7:5b:91:75:d0:
         0c:d0:3a:31:b1:2e:8f:d1:3c:af:f6:e1:03:ac:3f:6c:be:58:
         8e:61:c2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 16:21:29 2024 by rpki-client on console-fra.rpki-client.org