Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/323830343a35343a316230303a3a2f34302d3430203d3e203238323230.roa
File:                     323830343a35343a316230303a3a2f34302d3430203d3e203238323230.roa (raw, json)
Hash identifier:          OjVlU+y6kjo+C1orXMYdNfSNN3PUDGHDCm7Sp92vnes=
Subject key identifier:   B3:66:A1:0C:65:2D:04:6D:86:80:D1:1C:2A:EB:7B:2A:34:B1:09:DC
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       01C7AE281A5BAE0B2357C9DA529AEEBC7B2C8467
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/323830343a35343a316230303a3a2f34302d3430203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:15 +0000
ROA not before:           Tue 12 Mar 2024 19:46:15 +0000
ROA not after:            Tue 11 Mar 2025 19:51:15 +0000
asID:                     28220
IP address blocks:        2804:54:1b00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c7:ae:28:1a:5b:ae:0b:23:57:c9:da:52:9a:ee:bc:7b:2c:84:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:15 2024 GMT
            Not After : Mar 11 19:51:15 2025 GMT
        Subject: CN=B366A10C652D046D8680D11C2AEB7B2A34B109DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:93:0b:c3:07:e3:a8:de:d0:ad:11:1b:e7:57:
                    be:ec:bb:0e:26:0c:f6:15:d6:9a:6e:60:84:04:9d:
                    3e:bb:10:f6:3f:63:78:f9:f2:f4:5c:f6:50:5a:29:
                    2c:ca:ee:8d:55:e3:09:4a:07:e9:d9:74:0b:77:28:
                    b3:7f:32:00:a9:22:60:53:87:10:a3:0b:48:d2:67:
                    3f:60:6b:71:f0:8f:ba:d9:af:94:cd:92:a4:d3:f6:
                    8e:1d:7b:92:e4:4a:ed:95:bd:18:d2:af:27:90:5b:
                    c2:0a:94:6a:67:21:a7:ce:0b:41:13:cd:b2:30:f5:
                    ff:2b:89:d9:f9:01:11:8f:af:5a:37:cc:da:1d:3a:
                    ea:5a:00:06:b0:46:0b:7b:f2:26:d7:65:3c:26:c2:
                    49:f4:bd:85:2e:9f:83:73:cf:3c:8a:98:49:bd:7d:
                    57:6e:e4:49:67:40:29:cd:2c:ba:fe:3a:84:ac:ee:
                    f7:5a:77:2a:c2:69:b6:8f:32:d2:c9:6c:58:05:72:
                    2f:53:e2:5e:f1:1c:2d:ae:84:74:81:d7:15:0e:b1:
                    56:e6:fc:1a:a9:de:44:a9:19:80:64:3e:88:c9:4e:
                    84:dc:77:86:88:f2:58:e0:55:34:af:a1:a1:76:6c:
                    d5:03:f5:ad:c0:3c:45:0f:9e:a2:42:ae:f9:c8:32:
                    28:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:66:A1:0C:65:2D:04:6D:86:80:D1:1C:2A:EB:7B:2A:34:B1:09:DC
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/323830343a35343a316230303a3a2f34302d3430203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54:1b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:3a:23:e5:16:af:99:2b:7e:1d:09:3b:67:9d:e8:82:57:82:
         e9:d4:c9:bd:c1:0f:6f:cd:3a:15:84:be:04:f7:d2:a1:8b:63:
         8d:44:25:6b:03:1f:16:56:db:07:4b:54:5c:91:82:d9:3b:66:
         bc:b7:67:91:a1:72:d9:9b:75:9e:83:37:30:96:41:aa:35:6d:
         cf:2b:9b:3b:db:a5:db:59:31:14:24:35:2e:0e:24:ec:ec:09:
         47:b4:76:55:d9:7c:9b:7a:27:74:3e:20:99:d3:dd:6b:81:1b:
         34:a5:39:3a:47:a6:29:7c:b3:72:d0:c0:bc:12:3e:64:9c:ba:
         ff:23:6d:6c:7a:9c:98:86:9d:0a:70:17:b1:e0:7d:b3:f5:42:
         68:e5:87:3d:ad:af:1e:0e:11:d0:ff:27:8e:bc:2a:19:cb:2f:
         4e:40:db:f3:92:32:28:8b:2b:e6:f2:d2:07:2b:15:70:b4:a1:
         73:ef:d2:15:89:a7:86:85:7d:a6:09:63:96:d9:b1:93:73:82:
         d1:2b:cc:4b:74:4e:21:0b:ea:6b:4e:4e:74:d6:1d:bd:3c:c8:
         bd:b4:dc:71:79:cb:63:07:18:be:31:de:04:a0:0a:c7:81:67:
         19:40:4d:39:60:80:02:a9:f5:68:09:65:16:3e:27:68:1e:d8:
         03:cc:56:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org