Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/0/323830343a376362383a3a2f33322d3332203d3e20323731353134.roa
File:                     323830343a376362383a3a2f33322d3332203d3e20323731353134.roa (raw, json)
Hash identifier:          qmrfM4gw7sJIhhqZqlScbVtEm+HEkAuWLkBL4TdEL+4=
Subject key identifier:   C8:70:0C:19:A5:F2:BA:8A:97:E4:00:D8:2E:9D:6F:29:D9:3A:86:9D
Certificate issuer:       /CN=34480FB5377B9D616C84A3C34C05E236C464E996
Certificate serial:       5E26503E2BABE760B25B6D89E00F5FDCCA63F3D8
Authority key identifier: 34:48:0F:B5:37:7B:9D:61:6C:84:A3:C3:4C:05:E2:36:C4:64:E9:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34480FB5377B9D616C84A3C34C05E236C464E996.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/0/323830343a376362383a3a2f33322d3332203d3e20323731353134.roa
Signing time:             Mon 01 Apr 2024 11:52:17 +0000
ROA not before:           Mon 01 Apr 2024 11:47:17 +0000
ROA not after:            Mon 31 Mar 2025 11:52:17 +0000
asID:                     271514
IP address blocks:        2804:7cb8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:26:50:3e:2b:ab:e7:60:b2:5b:6d:89:e0:0f:5f:dc:ca:63:f3:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34480FB5377B9D616C84A3C34C05E236C464E996
        Validity
            Not Before: Apr  1 11:47:17 2024 GMT
            Not After : Mar 31 11:52:17 2025 GMT
        Subject: CN=C8700C19A5F2BA8A97E400D82E9D6F29D93A869D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5c:c6:e0:72:da:7a:22:6e:19:8f:df:e7:a8:
                    68:03:c0:7f:fe:88:ab:90:f6:9e:e8:f4:9c:6a:8d:
                    f4:ed:86:c7:bc:d6:56:85:66:81:a3:e3:bc:01:70:
                    51:8b:3a:97:fc:19:90:e8:3c:46:fd:c1:f0:bf:6e:
                    aa:90:f9:32:79:0a:39:62:45:e9:35:2f:1e:68:76:
                    be:ec:57:40:8f:39:dd:97:e9:63:d3:63:43:3a:b3:
                    8f:fd:59:49:45:8d:67:7c:e6:dd:ae:7d:1e:a3:a6:
                    50:7f:fb:f6:0c:4a:f5:81:67:f0:d3:13:3e:19:3e:
                    0a:f7:15:b4:99:e3:06:e8:1d:41:fc:75:fb:14:de:
                    12:1b:47:a1:7c:3f:43:3b:19:67:f7:57:23:fd:51:
                    c4:01:e9:a2:8e:fd:41:93:04:a5:46:3c:9c:54:fd:
                    70:aa:5a:2b:1c:08:e0:ef:ec:eb:3a:ba:0d:73:d4:
                    92:9c:38:64:99:5b:24:10:04:f2:11:37:07:0e:01:
                    d8:df:70:8e:ba:2f:06:b6:bb:4c:6d:16:82:66:34:
                    b0:7d:6b:c3:fb:c0:8a:6a:e9:38:09:55:ae:ab:3e:
                    d8:55:76:4a:e1:f3:23:c8:b5:84:e5:fd:98:f4:92:
                    d0:fb:de:94:5d:04:c4:2c:a0:f5:16:a2:75:de:22:
                    a0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:70:0C:19:A5:F2:BA:8A:97:E4:00:D8:2E:9D:6F:29:D9:3A:86:9D
            X509v3 Authority Key Identifier:
                keyid:34:48:0F:B5:37:7B:9D:61:6C:84:A3:C3:4C:05:E2:36:C4:64:E9:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/0/34480FB5377B9D616C84A3C34C05E236C464E996.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34480FB5377B9D616C84A3C34C05E236C464E996.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/0/323830343a376362383a3a2f33322d3332203d3e20323731353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7cb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:53:af:b9:67:07:3d:86:64:fc:9c:15:ad:4e:d3:e9:25:f2:
         61:df:f3:32:d4:2f:56:e3:8a:68:0f:cd:66:52:be:08:4e:bf:
         e5:a0:71:e1:8c:5a:1c:75:4c:f7:86:34:74:cf:88:8e:6a:89:
         33:3a:7f:75:90:1a:08:ca:65:0f:2c:b7:1b:20:93:2f:75:ce:
         f8:ea:30:7c:f9:77:89:98:82:aa:8a:9c:f6:ae:34:11:78:6c:
         22:e7:e0:a7:87:a1:b3:18:40:03:8a:b7:97:18:03:70:fb:52:
         25:af:aa:58:a4:ce:91:1d:fd:ff:ab:ca:8e:29:3e:4b:7d:d2:
         71:c0:00:49:e8:82:09:9c:a6:76:3e:5e:70:22:ab:06:e0:4e:
         88:fe:2d:5f:1f:87:04:6c:42:78:35:60:9f:42:3a:7f:7e:84:
         e6:80:82:b5:64:d4:ec:4c:cb:cf:8e:50:d7:ca:86:5c:40:48:
         67:f2:f9:86:40:af:2a:28:8f:f8:5c:47:7c:c5:74:0c:f4:fb:
         53:df:86:f6:7f:10:af:e0:6e:a7:86:ff:d6:6a:c3:9c:f6:c9:
         47:cf:cd:2d:01:a5:f7:6c:ca:b9:34:1f:89:b3:09:d4:33:95:
         ca:14:fd:59:63:a4:3a:50:18:ce:5f:1d:e6:1f:ec:b0:5f:b5:
         a4:ba:bf:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org