Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/323830343a323337343a3a2f33322d3438203d3e20323634313633.roa
File:                     323830343a323337343a3a2f33322d3438203d3e20323634313633.roa (raw, json)
Hash identifier:          rgeizvKc/JUVtlBUbUcN9sOwLyBF6HY6aA6x7lsW3Oo=
Subject key identifier:   18:B9:B0:25:EA:23:58:C6:3C:3F:1D:47:98:B7:5D:93:31:1D:47:0B
Certificate issuer:       /CN=7FE0F22C7FC909A759F205D5F392B7F33D0E650B
Certificate serial:       59808EE58B1A14E283BEEC29DE80FBEC02089458
Authority key identifier: 7F:E0:F2:2C:7F:C9:09:A7:59:F2:05:D5:F3:92:B7:F3:3D:0E:65:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FE0F22C7FC909A759F205D5F392B7F33D0E650B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/323830343a323337343a3a2f33322d3438203d3e20323634313633.roa
Signing time:             Mon 04 Dec 2023 22:32:22 +0000
ROA not before:           Mon 04 Dec 2023 22:27:22 +0000
ROA not after:            Mon 02 Dec 2024 22:32:22 +0000
asID:                     264163
IP address blocks:        2804:2374::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:80:8e:e5:8b:1a:14:e2:83:be:ec:29:de:80:fb:ec:02:08:94:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FE0F22C7FC909A759F205D5F392B7F33D0E650B
        Validity
            Not Before: Dec  4 22:27:22 2023 GMT
            Not After : Dec  2 22:32:22 2024 GMT
        Subject: CN=18B9B025EA2358C63C3F1D4798B75D93311D470B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bb:cd:e2:d1:d2:19:5d:03:95:39:47:46:1c:
                    3a:0d:6d:45:48:c4:67:66:a6:b0:79:94:86:7a:0a:
                    5d:dc:af:d0:38:45:57:a5:1b:ef:0a:88:9b:3d:26:
                    65:64:a7:fc:a9:c7:28:34:83:d7:f0:bc:be:49:d2:
                    4e:2d:28:eb:8c:4f:04:ef:59:cd:14:18:db:f2:b3:
                    e2:54:2e:96:e1:3a:34:f0:cf:1e:02:48:db:5a:78:
                    09:86:dd:88:af:f3:f0:7c:22:a6:cf:45:e3:9e:ec:
                    1d:44:8b:7b:84:bc:bb:2a:e6:77:74:ae:55:86:b6:
                    3d:11:d8:e7:1b:0c:20:65:cf:69:f2:f8:45:20:f7:
                    f4:67:9a:28:ad:d4:0f:ad:a2:ce:4c:e6:fe:8a:cf:
                    7a:44:e4:b1:24:27:42:bd:db:56:72:ec:b1:4b:18:
                    cd:ee:9c:13:3b:e7:cf:4a:d2:f0:95:80:c0:5d:5b:
                    e7:9c:04:a2:c3:78:85:5e:48:d6:02:b3:17:be:f4:
                    d6:20:b8:8e:db:32:5e:23:41:68:0f:86:ce:ca:88:
                    d6:a6:a6:2d:66:a6:bd:5a:c8:7a:f6:1d:dd:66:b3:
                    25:6f:eb:7c:75:36:15:86:17:87:0f:eb:6e:32:f7:
                    e9:a5:b7:d0:ee:26:22:5e:73:90:7b:9a:28:1e:c9:
                    f1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B9:B0:25:EA:23:58:C6:3C:3F:1D:47:98:B7:5D:93:31:1D:47:0B
            X509v3 Authority Key Identifier:
                keyid:7F:E0:F2:2C:7F:C9:09:A7:59:F2:05:D5:F3:92:B7:F3:3D:0E:65:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/7FE0F22C7FC909A759F205D5F392B7F33D0E650B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FE0F22C7FC909A759F205D5F392B7F33D0E650B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/323830343a323337343a3a2f33322d3438203d3e20323634313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2374::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:07:a7:3a:21:cb:63:1c:4f:bf:c2:82:dd:89:7d:ea:be:2f:
         d1:1e:73:9a:72:7a:cf:34:f1:a6:78:69:84:98:91:a9:ec:7b:
         79:ec:8d:95:69:1d:82:a5:6b:40:2d:83:d9:66:99:73:fc:cc:
         a5:48:a2:f0:bc:34:b1:02:23:f3:c8:59:62:a3:29:3b:93:5e:
         07:4f:c1:60:11:1b:07:93:d1:7f:27:67:fc:84:80:b4:59:58:
         1d:93:98:09:5d:9c:02:8d:2f:2c:b3:3f:dc:3d:d2:64:cf:67:
         04:01:94:a6:4c:94:be:92:ab:86:37:29:e9:df:2d:d5:23:cb:
         d3:b1:b7:70:61:2f:ee:fd:ba:1e:0b:c0:03:7f:13:90:97:91:
         bd:94:6d:9a:19:50:4c:55:e8:a2:74:26:42:de:f8:14:06:8b:
         e4:01:52:05:d8:12:2a:9a:2d:64:5d:ab:03:79:28:72:84:7b:
         16:9c:44:be:f7:66:01:e6:bd:a8:26:44:e8:69:5e:ea:5f:c5:
         66:fc:c3:40:91:5e:85:03:26:b5:f1:25:de:69:53:8e:dd:d0:
         ef:cc:05:7b:43:10:80:31:10:84:6d:3d:4a:81:c4:41:20:bc:
         42:8c:28:76:c6:d5:15:32:b4:c3:45:fb:92:46:bb:76:01:2b:
         05:bc:d7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org