Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/3/323830343a6336343a3a2f33322d3438203d3e203532363939.roa
File:                     323830343a6336343a3a2f33322d3438203d3e203532363939.roa (raw, json)
Hash identifier:          EoPGEejdk6dprSKYY4jK+dNVA4d4XQTOKHS3iaPkE3s=
Subject key identifier:   B7:DD:9A:C6:CE:17:32:BC:02:41:EF:17:04:82:C3:85:45:46:BA:B4
Certificate issuer:       /CN=B787B0A23C983808EDAFAA5C7934BC004F741D62
Certificate serial:       5880E699BE7126273A8CA19BAB4B592A8807D294
Authority key identifier: B7:87:B0:A2:3C:98:38:08:ED:AF:AA:5C:79:34:BC:00:4F:74:1D:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B787B0A23C983808EDAFAA5C7934BC004F741D62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/3/323830343a6336343a3a2f33322d3438203d3e203532363939.roa
Signing time:             Tue 01 Aug 2023 18:13:05 +0000
ROA not before:           Tue 01 Aug 2023 18:08:05 +0000
ROA not after:            Tue 30 Jul 2024 18:13:05 +0000
asID:                     52699
IP address blocks:        2804:c64::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:80:e6:99:be:71:26:27:3a:8c:a1:9b:ab:4b:59:2a:88:07:d2:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B787B0A23C983808EDAFAA5C7934BC004F741D62
        Validity
            Not Before: Aug  1 18:08:05 2023 GMT
            Not After : Jul 30 18:13:05 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:50:94:73:cd:00:c2:b3:04:b4:dd:3e:b0:
                    52:89:dd:94:13:ba:9d:23:70:13:6e:b5:d0:91:48:
                    0e:f2:16:4a:5b:e8:1e:96:4a:3c:c6:8d:cb:7b:e5:
                    22:4d:70:6d:4d:81:6b:c0:d8:15:d5:e3:c0:a4:af:
                    5c:5a:e1:7d:d8:2d:5c:13:95:e7:09:c7:2f:ae:20:
                    ef:05:3c:76:a6:e4:a2:ad:66:42:06:7b:f2:b2:44:
                    64:97:ef:af:2c:ee:5b:06:da:77:8b:80:9a:38:53:
                    f8:a5:10:3d:8b:f0:6b:c0:f7:be:53:9a:c4:ec:92:
                    79:72:1e:75:b3:fc:bf:f7:b9:3d:8e:9e:c3:4e:a2:
                    61:08:af:6b:83:02:dc:7c:7c:f2:45:55:6b:a1:79:
                    4d:ac:6c:ea:cf:a9:c9:a4:23:f5:15:45:39:ba:de:
                    63:e6:db:0a:6c:9e:11:8a:9e:48:8a:a4:10:2c:b4:
                    a6:4d:75:47:ea:65:d1:1f:4d:b5:c9:15:8c:4e:b0:
                    4b:f9:2d:d2:ac:63:b7:65:7e:87:b7:d0:57:f9:fd:
                    a2:c6:f0:d2:cc:26:1e:2a:ed:d1:f3:fe:09:c0:ca:
                    18:d5:38:3b:82:16:00:15:ae:4f:3f:1c:b7:58:9f:
                    41:bf:8c:5a:c5:e2:01:5c:bf:9b:a8:ef:c3:52:4e:
                    ab:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DD:9A:C6:CE:17:32:BC:02:41:EF:17:04:82:C3:85:45:46:BA:B4
            X509v3 Authority Key Identifier:
                keyid:B7:87:B0:A2:3C:98:38:08:ED:AF:AA:5C:79:34:BC:00:4F:74:1D:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/3/B787B0A23C983808EDAFAA5C7934BC004F741D62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B787B0A23C983808EDAFAA5C7934BC004F741D62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/3/323830343a6336343a3a2f33322d3438203d3e203532363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c64::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:ba:2e:ab:00:e2:02:4e:5f:31:72:7b:43:f3:61:43:79:bd:
         07:cf:d6:d2:a6:6f:94:0b:df:49:7d:4c:d2:50:b7:4a:72:13:
         fd:08:65:50:55:0c:19:7c:b8:af:d5:cc:36:cd:b6:01:fc:30:
         0f:38:a6:ba:bb:67:da:5e:ae:a5:2c:d2:f3:75:aa:02:42:8b:
         f2:ba:0a:1b:77:5b:ad:12:ed:db:d7:c7:82:47:d8:af:c0:f8:
         67:d7:7f:4e:51:b3:9b:7c:46:96:a6:5e:34:b2:1c:09:e2:6b:
         eb:3f:c3:1c:25:a0:f9:ee:bb:36:c5:88:ba:72:ec:95:98:15:
         10:b9:e0:cc:ee:0c:60:ec:3d:fc:ae:8f:d9:e7:20:c9:2a:96:
         64:71:c4:fc:eb:c8:61:19:b7:60:72:53:d9:a1:c6:69:f3:91:
         fb:e3:59:a9:5c:34:1b:3c:e5:fc:26:d2:63:d8:0f:b3:7d:7f:
         95:e8:dc:21:08:5d:91:8a:70:70:6b:7b:18:43:ce:6c:4e:97:
         a0:13:48:c4:af:77:b7:13:6f:7c:a5:f1:11:d9:97:0b:26:b3:
         a4:a9:d8:ae:6c:d3:ed:a5:4f:a9:71:59:be:8b:a4:c1:45:a3:
         fd:26:c6:62:7e:be:fe:d1:ae:45:95:80:00:9a:63:e0:80:46:
         34:00:6a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:25 2024 by rpki-client on console-fra.rpki-client.org