Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/323830343a6533383a3a2f33342d3334203d3e20323632393432.roa
File:                     323830343a6533383a3a2f33342d3334203d3e20323632393432.roa (raw, json)
Hash identifier:          FzPAoykYO2nw9CLfnMYPgAqffNGV6hkmvtl0UBcNdq0=
Subject key identifier:   08:DE:7A:C4:B8:B3:24:45:D3:71:B2:5B:7C:29:32:29:F4:35:09:F2
Certificate issuer:       /CN=C7D2D4B830F24D1323D706EAEFB759AC47A5304F
Certificate serial:       6823FC263E7E2AFF61507A618C7F7E2D683724EE
Authority key identifier: C7:D2:D4:B8:30:F2:4D:13:23:D7:06:EA:EF:B7:59:AC:47:A5:30:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D2D4B830F24D1323D706EAEFB759AC47A5304F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/323830343a6533383a3a2f33342d3334203d3e20323632393432.roa
Signing time:             Wed 03 Apr 2024 18:31:35 +0000
ROA not before:           Wed 03 Apr 2024 18:26:35 +0000
ROA not after:            Wed 02 Apr 2025 18:31:35 +0000
asID:                     262942
IP address blocks:        2804:e38::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:23:fc:26:3e:7e:2a:ff:61:50:7a:61:8c:7f:7e:2d:68:37:24:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7D2D4B830F24D1323D706EAEFB759AC47A5304F
        Validity
            Not Before: Apr  3 18:26:35 2024 GMT
            Not After : Apr  2 18:31:35 2025 GMT
        Subject: CN=08DE7AC4B8B32445D371B25B7C293229F43509F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cb:fe:4b:e8:10:c4:18:06:7f:d2:de:aa:f5:
                    f1:42:16:eb:4b:a2:17:b0:c1:42:b6:4f:69:fc:f7:
                    cc:5f:b0:aa:ff:f7:af:17:6e:0f:56:df:86:bf:4e:
                    3c:bf:20:d8:17:3e:3e:7f:4b:dd:f6:14:06:e5:5a:
                    af:b8:cb:24:20:82:89:3d:de:65:65:85:c7:ac:62:
                    2d:7f:3c:f1:3f:be:58:af:75:21:63:33:1b:6a:aa:
                    83:26:43:07:bc:62:e7:93:3a:9b:e2:77:5b:ce:01:
                    af:ba:8c:e9:47:66:be:c3:b5:a4:6d:76:ea:78:5b:
                    4c:6c:ac:88:25:e0:49:4f:fa:1b:c9:37:a8:40:b5:
                    cb:63:fb:0e:53:fb:80:b3:6a:cd:f7:ab:12:e2:33:
                    b5:e4:82:5a:77:a4:c5:95:f6:61:60:0d:00:85:07:
                    1f:1c:90:6c:a5:fa:fa:2f:37:3d:59:d4:95:aa:7d:
                    fa:16:3d:57:cc:22:9f:03:13:bf:a4:73:88:79:29:
                    fb:02:8e:8f:6f:b7:7c:f5:48:9c:d9:f6:20:05:ba:
                    49:65:1d:08:c5:19:35:8c:ba:65:a5:87:21:a8:70:
                    b0:fa:65:94:82:06:70:38:c7:b0:ec:54:fd:64:a0:
                    8b:b5:d5:8e:ca:af:7d:ac:42:34:aa:58:8e:ba:86:
                    f1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DE:7A:C4:B8:B3:24:45:D3:71:B2:5B:7C:29:32:29:F4:35:09:F2
            X509v3 Authority Key Identifier:
                keyid:C7:D2:D4:B8:30:F2:4D:13:23:D7:06:EA:EF:B7:59:AC:47:A5:30:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/C7D2D4B830F24D1323D706EAEFB759AC47A5304F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D2D4B830F24D1323D706EAEFB759AC47A5304F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/323830343a6533383a3a2f33342d3334203d3e20323632393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e38::/34

    Signature Algorithm: sha256WithRSAEncryption
         a3:0c:fb:2f:74:06:06:30:59:e9:d9:75:a1:e2:5b:20:07:5f:
         2b:6b:9c:09:b5:d9:e2:9c:e4:42:c6:3d:ea:19:1d:5b:2f:e9:
         f6:44:ef:60:7f:d9:e7:db:39:a0:55:7c:1a:b6:3d:84:0a:d2:
         b1:9b:05:88:a8:6c:9e:dd:5c:37:6b:cb:d0:a2:cf:20:c9:05:
         70:f3:0b:50:1c:ce:83:b2:e0:37:5b:b7:c4:8d:24:57:ae:c5:
         66:cd:04:fc:ea:b3:4e:7c:ed:e3:c6:07:49:b0:1d:85:b8:d7:
         82:a9:c0:e7:22:47:a3:e8:e5:87:39:a4:f1:c6:dd:69:1a:02:
         c2:12:9f:a6:1d:5b:45:b9:1d:85:fb:e8:75:33:dd:b3:c9:94:
         53:5f:5b:26:f5:1f:9a:5c:74:82:52:0d:13:ce:88:80:33:b6:
         f3:17:70:86:1f:34:b2:43:c8:18:fe:f0:43:50:ff:35:df:e9:
         3c:82:9c:95:43:ed:a1:55:ba:c3:e4:c8:69:86:8f:fd:cc:dc:
         e5:c1:cf:0d:06:bb:aa:a9:03:37:67:fe:58:00:ce:87:0b:30:
         b5:5f:bc:30:3e:cf:5d:2a:d2:3b:1a:b0:5a:86:40:bd:8a:86:
         87:71:9d:50:a2:66:c5:73:97:81:d9:b5:43:7d:3d:ba:69:71:
         9d:09:b1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 16:21:29 2024 by rpki-client on console-fra.rpki-client.org