Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/323830343a35343a316430303a3a2f34302d3430203d3e203238323230.roa
File:                     323830343a35343a316430303a3a2f34302d3430203d3e203238323230.roa (raw, json)
Hash identifier:          DFFinv1tYTordCs3jDjAKzU/1rNvjbVIbcy2sXsGX0I=
Subject key identifier:   76:1A:C7:50:F3:0B:3D:66:44:FF:65:DF:9C:8F:21:CE:6C:5D:72:47
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       41C41AC7B5B5F4C51FF75D68A878E4863FCA12CF
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/323830343a35343a316430303a3a2f34302d3430203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:26 +0000
ROA not before:           Tue 12 Mar 2024 19:46:26 +0000
ROA not after:            Tue 11 Mar 2025 19:51:26 +0000
asID:                     28220
IP address blocks:        2804:54:1d00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c4:1a:c7:b5:b5:f4:c5:1f:f7:5d:68:a8:78:e4:86:3f:ca:12:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:26 2024 GMT
            Not After : Mar 11 19:51:26 2025 GMT
        Subject: CN=761AC750F30B3D6644FF65DF9C8F21CE6C5D7247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7f:87:3b:14:34:7c:12:f6:f5:f4:80:eb:60:
                    36:7c:1a:99:d1:eb:16:1a:17:2d:19:84:b2:da:31:
                    32:e7:0c:d3:23:cc:9a:e1:8a:23:82:ed:57:ef:df:
                    c2:2e:0b:2a:9e:a9:27:bd:dc:48:92:14:9a:55:eb:
                    17:99:b2:43:59:17:ba:92:4a:b8:25:3b:51:48:1b:
                    32:5a:50:60:63:f9:90:ea:87:ef:15:f5:fd:5d:60:
                    c7:19:27:e4:b9:5e:43:26:ff:19:79:4b:22:11:aa:
                    b4:38:66:ee:30:38:50:5d:c3:31:55:98:1a:5a:19:
                    26:d6:d5:45:26:cb:78:ec:65:2b:91:47:03:ff:98:
                    bf:c0:88:ae:17:80:b1:36:ec:4a:af:33:38:e9:e1:
                    af:d5:51:25:56:13:fe:56:5c:86:cf:14:f6:b3:28:
                    79:7f:e0:9a:61:b2:9c:03:29:b4:4b:40:55:22:98:
                    05:c3:98:73:c3:db:10:af:24:8d:0a:f8:22:21:47:
                    df:ae:b2:f6:fe:33:5d:07:0d:0e:4f:76:72:73:01:
                    49:b9:60:00:07:14:b2:3b:9c:20:32:bf:26:f4:30:
                    97:7f:f0:17:4e:bb:51:ba:28:02:4e:88:c0:e9:19:
                    18:db:52:6d:9b:4f:5b:18:1c:e3:32:24:fa:e6:0d:
                    3f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1A:C7:50:F3:0B:3D:66:44:FF:65:DF:9C:8F:21:CE:6C:5D:72:47
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/323830343a35343a316430303a3a2f34302d3430203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54:1d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a0:03:68:1d:b8:2c:5f:91:5b:26:97:eb:4e:9e:28:13:00:07:
         1b:3e:fe:60:a7:21:1c:bd:70:ba:c0:ce:be:22:52:d0:a0:d2:
         da:15:86:38:cf:df:a2:f2:66:23:f0:83:88:26:f6:8d:d5:2a:
         45:eb:01:84:88:ba:01:01:ec:a0:41:f9:d5:83:25:a5:a6:b5:
         83:51:3c:c9:3d:6e:9b:80:78:0c:bf:10:fa:99:09:5c:97:f3:
         a0:7e:e4:99:b8:4f:90:4e:4b:3c:72:17:76:4e:8c:f4:cf:71:
         ff:34:84:c4:e2:55:47:44:29:81:2e:32:d0:f2:05:df:95:52:
         9c:96:34:a8:95:66:f9:98:05:4d:fb:51:42:54:e6:51:6f:51:
         6f:f0:09:5a:23:94:b7:a0:74:fc:27:ce:79:61:93:6d:29:a9:
         11:36:3c:44:45:62:17:09:3f:bf:96:44:a6:08:80:05:41:2a:
         d0:b7:d7:ac:9d:ab:69:0d:24:44:08:f4:cd:ba:dd:9f:8a:58:
         19:b9:c2:f7:a3:e7:ec:78:a9:6d:e4:d8:a8:09:d4:29:97:93:
         4c:31:50:e9:7d:08:66:9c:b2:2e:87:fa:c1:3f:9f:6e:05:cf:
         81:5c:42:66:f0:e3:d7:d9:31:2e:f4:2d:f1:b4:f1:47:e6:27:
         c1:70:6b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org