Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/1/323830343a353339383a3a2f33322d3336203d3e20323638353934.roa
File:                     323830343a353339383a3a2f33322d3336203d3e20323638353934.roa (raw, json)
Hash identifier:          +uim6oOSlkIRrXhvhYyPLTu5UQty7olfRabz9I0J3ms=
Subject key identifier:   72:F0:79:86:25:19:1B:87:65:88:8E:4C:96:5C:D6:FB:34:54:53:33
Certificate issuer:       /CN=EFD87B61404E88F8122A7006405D792CBF3DB6BE
Certificate serial:       22CC23662B986006C91B7447E38670A3225AAE79
Authority key identifier: EF:D8:7B:61:40:4E:88:F8:12:2A:70:06:40:5D:79:2C:BF:3D:B6:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFD87B61404E88F8122A7006405D792CBF3DB6BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/1/323830343a353339383a3a2f33322d3336203d3e20323638353934.roa
Signing time:             Wed 03 Apr 2024 20:21:50 +0000
ROA not before:           Wed 03 Apr 2024 20:16:50 +0000
ROA not after:            Wed 02 Apr 2025 20:21:50 +0000
asID:                     268594
IP address blocks:        2804:5398::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:cc:23:66:2b:98:60:06:c9:1b:74:47:e3:86:70:a3:22:5a:ae:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFD87B61404E88F8122A7006405D792CBF3DB6BE
        Validity
            Not Before: Apr  3 20:16:50 2024 GMT
            Not After : Apr  2 20:21:50 2025 GMT
        Subject: CN=72F0798625191B8765888E4C965CD6FB34545333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:81:4c:23:29:37:0e:45:1d:a3:ef:e9:e1:
                    27:dd:d5:85:05:cf:e9:35:f2:29:be:e9:b4:e1:d6:
                    2f:e4:4d:d3:63:f3:b0:e0:cd:1f:28:ae:23:d4:71:
                    23:71:e2:d5:53:ca:40:3d:ae:60:16:b3:c9:e5:8f:
                    ee:04:e7:78:bf:b3:ba:fa:9e:a2:0c:de:a5:e0:98:
                    34:ae:2e:82:42:ec:6d:45:b2:5c:4d:54:29:ff:b9:
                    f8:77:25:99:ff:af:d1:52:5e:be:49:f2:96:b4:db:
                    db:5a:6e:11:8b:20:e5:27:b9:06:6b:a8:48:a6:67:
                    58:10:8d:77:66:a2:f8:3a:c1:88:3f:3e:3a:1e:29:
                    36:58:91:b5:9d:7c:c9:50:a3:1a:50:97:4a:38:5c:
                    f1:07:de:30:3f:b6:67:c6:e3:ab:7e:43:da:f5:f1:
                    cc:fd:dd:70:b5:67:68:9d:a9:ea:ea:c4:50:34:88:
                    8b:cf:b5:e1:a4:0d:ef:af:10:c5:35:70:32:54:17:
                    7c:db:17:37:a6:97:5d:90:1a:6e:da:a0:50:38:d2:
                    4e:d3:ce:8a:d9:8f:87:1a:0b:8e:d2:39:31:cf:6f:
                    86:75:09:d5:8c:7e:76:32:54:42:9b:e1:51:43:bc:
                    21:7b:f4:96:66:50:5f:c8:37:ea:f2:8a:13:fb:00:
                    ea:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F0:79:86:25:19:1B:87:65:88:8E:4C:96:5C:D6:FB:34:54:53:33
            X509v3 Authority Key Identifier:
                keyid:EF:D8:7B:61:40:4E:88:F8:12:2A:70:06:40:5D:79:2C:BF:3D:B6:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/1/EFD87B61404E88F8122A7006405D792CBF3DB6BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFD87B61404E88F8122A7006405D792CBF3DB6BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/1/323830343a353339383a3a2f33322d3336203d3e20323638353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5398::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:66:ce:07:d6:57:f1:d9:86:7e:f2:f9:1e:d6:07:96:cc:90:
         38:f0:bb:63:91:e3:ec:cd:a1:f2:76:c7:70:14:26:82:db:5c:
         00:7e:21:f5:71:92:97:94:2b:a1:ec:70:4f:c8:5d:dd:27:f4:
         70:e7:ce:be:f3:10:31:36:33:81:ab:66:71:93:a8:ff:4b:2d:
         73:ee:73:85:21:a4:9b:b0:ea:e1:52:f8:f1:5c:4e:28:08:78:
         83:eb:0f:68:4d:47:b6:45:28:ed:0a:21:2b:2c:1d:63:72:4d:
         53:32:8b:2f:ad:f9:c9:0d:a6:61:95:f9:6e:eb:70:95:86:ab:
         f6:cf:7b:aa:a9:8b:cf:4c:c1:32:71:56:cb:f9:3f:65:be:ee:
         07:59:4c:ed:9c:cb:8f:f0:59:cd:2e:d8:22:40:ea:b8:33:f4:
         2a:12:50:79:3d:1d:13:ec:b5:85:d4:f6:fd:f2:00:33:f5:9d:
         e0:85:ed:dc:60:56:e9:6b:36:1d:2e:96:43:77:a3:8a:c4:89:
         4f:d8:17:2e:62:aa:8b:9f:c2:e9:00:65:95:a7:87:e0:f6:0b:
         5b:4f:90:a8:64:ea:40:12:2c:6b:5f:f0:8b:f4:a0:e5:e5:7c:
         9e:ac:ce:4d:69:37:d5:95:52:a2:41:49:36:27:f8:8a:48:96:
         2f:36:bf:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 06:07:24 2024 by rpki-client on console-fra.rpki-client.org