Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/323830343a353664383a3a2f33322d313238203d3e20323638303237.roa
File:                     323830343a353664383a3a2f33322d313238203d3e20323638303237.roa (raw, json)
Hash identifier:          CwnVdHN4upVCprswIVvRRCUCuOqswqCCNaFynmwHa7E=
Subject key identifier:   0D:8D:D4:D8:E6:00:F4:F2:00:A4:BD:92:FE:7A:B9:58:29:0B:D2:A7
Certificate issuer:       /CN=B7DB3E0A126651244960D7A1605514B31F2F15AE
Certificate serial:       421697F2C0779C362A4A6C33CF46844CE15C09F8
Authority key identifier: B7:DB:3E:0A:12:66:51:24:49:60:D7:A1:60:55:14:B3:1F:2F:15:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7DB3E0A126651244960D7A1605514B31F2F15AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/323830343a353664383a3a2f33322d313238203d3e20323638303237.roa
Signing time:             Fri 16 Feb 2024 16:48:20 +0000
ROA not before:           Fri 16 Feb 2024 16:43:20 +0000
ROA not after:            Fri 14 Feb 2025 16:48:20 +0000
asID:                     268027
IP address blocks:        2804:56d8::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:16:97:f2:c0:77:9c:36:2a:4a:6c:33:cf:46:84:4c:e1:5c:09:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7DB3E0A126651244960D7A1605514B31F2F15AE
        Validity
            Not Before: Feb 16 16:43:20 2024 GMT
            Not After : Feb 14 16:48:20 2025 GMT
        Subject: CN=0D8DD4D8E600F4F200A4BD92FE7AB958290BD2A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c1:2a:8d:9d:d3:c7:1b:7f:6d:dd:47:e9:ec:
                    b0:3e:95:91:87:9a:bc:8b:1f:d5:39:09:fd:ea:ea:
                    19:51:22:35:44:b6:3e:fe:0e:2d:f9:64:5e:15:24:
                    9c:cb:43:d6:de:b5:c2:de:b3:e4:e5:93:50:6e:e1:
                    47:8c:9c:c3:be:00:92:94:fb:f3:4b:36:07:7f:b6:
                    b8:06:45:67:5c:6c:7d:11:76:6d:18:b1:cf:09:50:
                    e0:06:b9:66:45:8e:fd:8c:87:ed:e4:44:46:c3:6e:
                    1f:4b:76:68:11:a2:a6:f5:a8:35:5f:f2:96:e4:ef:
                    df:4a:44:3d:95:5b:a7:07:62:82:4c:03:50:e4:f4:
                    58:18:c7:65:56:40:92:40:8e:a1:7a:04:c2:b2:72:
                    79:e4:36:88:98:3b:e2:8c:b8:5d:c7:cc:7a:b7:96:
                    ef:11:92:57:a1:c2:88:c0:80:a5:a2:c3:b5:ee:f1:
                    29:2d:1e:7d:56:63:12:8d:3d:a9:e0:5c:c8:ee:5d:
                    1f:9b:b6:df:8f:86:71:eb:f2:3d:40:b5:9c:72:c8:
                    ef:4d:1c:0e:9a:aa:f0:a9:2e:42:0c:30:8c:bd:14:
                    98:07:24:50:c0:d0:1c:f2:e2:f7:c0:7d:fa:e3:33:
                    e7:c4:a5:79:2a:bb:e8:b3:f3:79:49:8d:2e:d9:07:
                    b4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8D:D4:D8:E6:00:F4:F2:00:A4:BD:92:FE:7A:B9:58:29:0B:D2:A7
            X509v3 Authority Key Identifier:
                keyid:B7:DB:3E:0A:12:66:51:24:49:60:D7:A1:60:55:14:B3:1F:2F:15:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/B7DB3E0A126651244960D7A1605514B31F2F15AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7DB3E0A126651244960D7A1605514B31F2F15AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/323830343a353664383a3a2f33322d313238203d3e20323638303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:e9:64:6d:9c:c2:7c:be:09:4b:bb:2c:7c:22:ab:44:a8:2f:
         78:06:09:dc:f2:27:22:d9:21:87:14:20:47:de:a8:66:1f:49:
         12:5d:12:90:57:7e:21:75:41:a1:97:55:e3:6c:c8:1f:0c:af:
         e1:25:8b:e1:45:71:ad:b8:91:e0:c9:57:ed:d8:8e:1b:1c:dc:
         13:0e:23:de:85:84:17:4f:6f:8d:ce:e7:b3:17:ea:81:bf:98:
         99:ab:9c:09:56:c0:c5:9a:e6:a0:b0:2d:73:32:66:0e:b7:f9:
         43:f7:cc:96:06:ca:7e:21:39:80:0e:59:7d:95:2c:af:f7:94:
         b9:05:d1:24:3e:16:48:9c:1a:40:c1:f0:d0:86:4f:30:3a:a1:
         eb:2a:9c:de:70:41:ae:ae:f3:0f:c3:5b:e4:f4:0a:9e:3c:16:
         9e:6c:f0:79:c9:31:d5:28:91:59:1f:de:c2:20:e6:b4:d5:dd:
         6e:71:12:f7:b5:cb:f1:83:22:0b:59:fb:7c:bd:72:5e:0c:ec:
         80:d9:bb:da:d8:5b:86:bf:f5:e4:c6:39:a4:35:41:f6:9b:c9:
         28:15:d9:48:6c:f4:97:ae:f8:02:5d:ef:22:e5:38:8c:c1:82:
         93:f0:12:a9:57:9d:e8:77:8e:e5:b0:96:49:65:9a:27:b4:f0:
         d8:d1:f6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org