Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/323830343a343335343a633030303a3a2f33342d3334203d3e20323637353633.roa
File:                     323830343a343335343a633030303a3a2f33342d3334203d3e20323637353633.roa (raw, json)
Hash identifier:          jKJm+fEc5l/YYGginf/r1XqdyqRcB+U2ZtCqyoQNjcA=
Subject key identifier:   3A:09:F8:EF:82:98:47:73:E4:0A:B6:8A:40:A3:C5:15:A9:7F:74:94
Certificate issuer:       /CN=739F0E02F6964FCCC4767D5C27A0198D6FD1034B
Certificate serial:       05076D548741EA700731383C110D08336247E3DE
Authority key identifier: 73:9F:0E:02:F6:96:4F:CC:C4:76:7D:5C:27:A0:19:8D:6F:D1:03:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/739F0E02F6964FCCC4767D5C27A0198D6FD1034B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/323830343a343335343a633030303a3a2f33342d3334203d3e20323637353633.roa
Signing time:             Tue 08 Aug 2023 12:59:55 +0000
ROA not before:           Tue 08 Aug 2023 12:54:55 +0000
ROA not after:            Tue 06 Aug 2024 12:59:55 +0000
asID:                     267563
IP address blocks:        2804:4354:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:07:6d:54:87:41:ea:70:07:31:38:3c:11:0d:08:33:62:47:e3:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=739F0E02F6964FCCC4767D5C27A0198D6FD1034B
        Validity
            Not Before: Aug  8 12:54:55 2023 GMT
            Not After : Aug  6 12:59:55 2024 GMT
        Subject: CN=3A09F8EF82984773E40AB68A40A3C515A97F7494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6b:f5:08:2a:80:52:48:31:e5:04:15:f3:81:
                    1d:cf:8f:ae:0f:73:59:60:9c:5d:02:ec:a9:ca:25:
                    1c:b3:c9:77:1e:7d:7a:7d:33:fc:b4:5a:cb:52:10:
                    32:b1:d2:ae:d7:07:3d:08:4c:5c:f5:04:37:b3:1c:
                    55:22:f4:3c:ee:40:fe:05:cd:e2:a3:24:5a:81:bc:
                    bf:2f:c8:a3:41:f6:f3:78:fc:f0:45:53:bd:64:15:
                    66:f8:8d:d8:db:34:12:d0:80:ce:7c:91:68:5e:2b:
                    d7:61:ae:d5:62:b2:07:66:df:8b:d1:bf:c8:0f:74:
                    4b:8f:cb:84:6e:f1:67:fd:fd:8f:81:1f:87:2b:cb:
                    61:2e:ac:07:6d:65:aa:a4:06:ad:c8:e3:0e:db:9b:
                    a2:22:c4:70:1c:33:68:89:39:a1:8c:cd:2c:c9:9c:
                    a8:95:2b:a5:53:4c:e0:90:92:ce:93:a2:8f:14:83:
                    d6:fd:af:01:62:a2:e1:04:d8:6f:e2:8d:28:a4:09:
                    0d:6b:99:ad:03:d1:22:a9:7b:f4:fa:60:8d:16:8e:
                    e4:06:af:ed:02:3d:60:b4:fd:47:77:a2:b1:a2:d0:
                    0c:14:92:87:b5:74:00:b5:6b:d0:7e:61:96:6b:e6:
                    c3:fd:0a:36:c1:4c:96:6a:74:38:61:9b:d0:45:12:
                    04:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:09:F8:EF:82:98:47:73:E4:0A:B6:8A:40:A3:C5:15:A9:7F:74:94
            X509v3 Authority Key Identifier:
                keyid:73:9F:0E:02:F6:96:4F:CC:C4:76:7D:5C:27:A0:19:8D:6F:D1:03:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/739F0E02F6964FCCC4767D5C27A0198D6FD1034B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/739F0E02F6964FCCC4767D5C27A0198D6FD1034B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/323830343a343335343a633030303a3a2f33342d3334203d3e20323637353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4354:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         09:58:36:85:d1:50:37:aa:86:ce:c0:86:98:5a:46:17:07:65:
         40:27:01:91:07:6f:ad:8b:bd:6e:31:91:9b:1f:a3:8c:61:46:
         4a:ad:e5:38:6b:0d:f1:1c:7f:55:9c:03:c9:78:f7:e6:2d:c9:
         91:2f:42:b8:a4:91:75:35:0a:45:55:3e:a2:68:bf:cb:87:a8:
         be:1f:26:74:ac:0f:d7:0f:82:9f:89:c0:2b:9e:5c:7e:87:ac:
         ad:12:c3:ad:72:d8:46:4d:10:cb:18:ba:3c:b3:75:02:24:72:
         2b:da:54:34:51:08:58:32:64:9e:4f:de:a9:52:ac:85:ed:a6:
         86:5a:d6:76:53:10:dd:ce:da:ee:f9:18:49:d0:1b:43:dc:10:
         d0:6e:63:04:5c:f3:fc:48:f0:b1:40:5b:8c:d0:d3:78:0e:c7:
         55:e2:08:51:4b:83:cb:5f:1c:46:2b:8f:90:c6:1e:f0:d8:74:
         b9:71:e7:ec:e2:2d:43:68:8a:d3:9f:c5:7c:6a:db:cf:be:5b:
         cc:d6:b9:76:ad:8d:d4:d3:1f:b2:ea:0c:d2:00:ee:d1:dd:a7:
         74:f6:ef:a5:f4:a6:2d:ab:ce:e1:71:ef:5b:be:96:2f:8f:0e:
         40:47:9b:aa:5c:66:8f:df:97:9b:2d:91:82:58:64:02:32:3e:
         8c:8f:36:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org