Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/323830343a35343a363030373a3a2f34382d3438203d3e203238323230.roa
File:                     323830343a35343a363030373a3a2f34382d3438203d3e203238323230.roa (raw, json)
Hash identifier:          A5/i1HvJH6J+ymYscQZyWQ35LOZCdG7PQZpjAGGJZjE=
Subject key identifier:   77:74:B2:7E:0A:D3:6B:EF:4F:C8:65:69:9F:E3:EB:27:F7:5E:2C:6B
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       187589082242B093929C0E10F3864F18829FBC21
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/323830343a35343a363030373a3a2f34382d3438203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:27 +0000
ROA not before:           Tue 12 Mar 2024 19:46:27 +0000
ROA not after:            Tue 11 Mar 2025 19:51:27 +0000
asID:                     28220
IP address blocks:        2804:54:6007::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:75:89:08:22:42:b0:93:92:9c:0e:10:f3:86:4f:18:82:9f:bc:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:27 2024 GMT
            Not After : Mar 11 19:51:27 2025 GMT
        Subject: CN=7774B27E0AD36BEF4FC865699FE3EB27F75E2C6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3b:23:1f:76:a9:3e:9c:b1:68:5d:cc:fb:3e:
                    03:e3:af:1e:b9:cb:51:26:bc:09:bc:f4:f8:ca:56:
                    67:60:54:57:33:c6:c8:d6:7a:17:11:a6:4a:66:c0:
                    57:ac:05:fe:56:5b:99:5f:65:5b:04:dc:f3:9c:f2:
                    58:55:27:65:f0:be:80:30:f9:40:01:34:98:fc:5c:
                    83:5e:55:9e:d9:fe:a5:04:05:52:3e:4d:20:27:ea:
                    b8:c7:60:a8:b5:cb:98:6e:2f:17:97:5d:e0:c5:ff:
                    80:f6:a5:71:e4:7f:94:a3:ad:7f:c2:ed:fa:9a:f4:
                    59:f0:fd:aa:e1:bd:31:3e:48:a1:c3:6f:86:f7:b6:
                    1b:28:ca:e9:66:c8:74:7a:14:5c:1d:20:a0:45:84:
                    1f:62:b5:e6:e0:78:cb:7b:39:7f:36:e5:06:9d:e6:
                    80:f3:59:fb:0a:28:0b:14:50:00:ac:94:92:6d:49:
                    32:16:6a:9c:32:f3:1b:ca:51:e4:ca:cc:53:74:14:
                    e2:e2:33:7f:bd:54:a3:f8:cb:c0:9a:26:a8:f9:54:
                    47:31:91:71:01:37:dd:b8:06:c0:25:0c:82:bc:30:
                    a7:6d:42:68:e9:8a:1f:8b:28:1d:2d:f5:dd:ae:12:
                    18:41:1e:33:a2:5e:ec:8e:00:dc:6f:16:93:c9:7d:
                    3b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:74:B2:7E:0A:D3:6B:EF:4F:C8:65:69:9F:E3:EB:27:F7:5E:2C:6B
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/323830343a35343a363030373a3a2f34382d3438203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54:6007::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:41:7b:f7:25:db:51:e9:ba:c3:59:7d:6a:5c:a8:c6:1b:68:
         9c:f5:72:e2:e5:8a:0c:7e:36:03:1e:1e:aa:13:0d:7f:1d:de:
         8a:9c:6c:db:f9:de:ba:66:4b:c0:3d:fe:49:aa:f0:9e:58:4a:
         1f:00:e7:33:ee:4f:a7:cf:1e:fc:33:1d:51:2d:52:d0:90:f3:
         b2:12:fc:2a:37:05:5b:64:1c:ad:8d:82:71:75:50:96:02:dc:
         00:c0:44:74:5a:f0:d7:cb:38:23:3c:d8:4d:fc:ec:82:c0:12:
         89:27:7f:fe:b6:78:0a:75:ae:df:a8:2b:81:0f:6e:20:fa:41:
         82:19:54:66:89:96:d8:8c:be:7b:85:51:8b:4d:5d:05:37:32:
         4f:79:ee:93:0d:1c:ea:33:d7:d1:d9:84:41:be:2b:31:99:32:
         1f:3d:72:27:60:eb:83:46:df:ee:c8:fa:a0:17:6a:79:3c:99:
         95:51:a2:c3:36:c4:6a:85:3b:a9:15:08:e3:07:dc:f9:aa:bf:
         43:93:bb:bd:f1:f6:18:77:10:05:21:c3:71:8b:f6:f3:71:e4:
         41:70:b5:33:a3:2e:90:f6:92:4d:33:05:52:a6:81:5d:a6:08:
         8c:14:c5:6f:87:72:b7:e9:22:22:5f:8d:7d:35:75:0b:14:7f:
         d4:7c:77:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org