Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/323830343a376632383a3a2f33322d3334203d3e20323731363730.roa
File:                     323830343a376632383a3a2f33322d3334203d3e20323731363730.roa (raw, json)
Hash identifier:          d6tHBqBqmtB0TcqqRz+QMm4qEeX5D+6JA6kh2vPOJWw=
Subject key identifier:   23:20:5D:7A:36:26:BE:AB:08:1A:81:FD:5D:ED:47:B9:77:C5:45:2D
Certificate issuer:       /CN=9D9DE8BBD3569E75A0B1B77F20E4CFEFD948D0C6
Certificate serial:       1824EC772A087828B0803DB1869AE52B37A7245B
Authority key identifier: 9D:9D:E8:BB:D3:56:9E:75:A0:B1:B7:7F:20:E4:CF:EF:D9:48:D0:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D9DE8BBD3569E75A0B1B77F20E4CFEFD948D0C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/323830343a376632383a3a2f33322d3334203d3e20323731363730.roa
Signing time:             Fri 26 Jan 2024 22:29:35 +0000
ROA not before:           Fri 26 Jan 2024 22:24:35 +0000
ROA not after:            Fri 24 Jan 2025 22:29:35 +0000
asID:                     271670
IP address blocks:        2804:7f28::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:24:ec:77:2a:08:78:28:b0:80:3d:b1:86:9a:e5:2b:37:a7:24:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9DE8BBD3569E75A0B1B77F20E4CFEFD948D0C6
        Validity
            Not Before: Jan 26 22:24:35 2024 GMT
            Not After : Jan 24 22:29:35 2025 GMT
        Subject: CN=23205D7A3626BEAB081A81FD5DED47B977C5452D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1a:1b:92:30:a6:c1:45:b7:e5:ac:0d:cb:f9:
                    6e:81:5a:d5:dc:99:d2:ee:97:0c:15:0f:51:c3:ee:
                    6c:74:90:2c:04:e1:60:b6:dd:02:1e:17:1b:cd:de:
                    61:1f:14:5f:66:03:b8:9c:55:d6:b3:32:2a:4d:5a:
                    9e:ab:79:67:07:cf:e6:7c:35:b9:09:67:26:b3:45:
                    0e:8f:1e:b3:43:d8:ef:6a:4a:29:4f:89:78:d4:76:
                    cb:cd:72:cd:52:1c:d6:3b:37:19:5b:66:21:e8:bb:
                    cc:d7:fc:5a:d5:7c:8b:cb:80:6a:ed:d0:0d:01:99:
                    0f:34:af:64:25:04:db:09:a1:32:b1:0c:7b:b2:2a:
                    94:63:08:7f:43:d2:03:89:4e:c9:8a:b8:fd:8a:7d:
                    ca:41:95:27:0c:72:a8:e2:36:54:f3:5d:d0:ef:fd:
                    44:04:49:74:74:f2:74:95:cc:42:db:ff:a1:44:32:
                    23:b2:6b:85:0b:4a:c0:96:32:d9:16:9e:4c:ab:01:
                    31:49:fe:7d:84:63:18:9d:76:a9:04:5c:e8:ad:6e:
                    43:5f:0a:47:29:32:0b:6a:2e:92:4c:84:40:eb:75:
                    10:52:a5:4d:9f:e8:46:af:15:d9:dc:5a:f1:a9:8f:
                    36:e1:de:fd:ed:b1:ea:77:23:a5:fc:56:98:1b:eb:
                    ec:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:20:5D:7A:36:26:BE:AB:08:1A:81:FD:5D:ED:47:B9:77:C5:45:2D
            X509v3 Authority Key Identifier:
                keyid:9D:9D:E8:BB:D3:56:9E:75:A0:B1:B7:7F:20:E4:CF:EF:D9:48:D0:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/9D9DE8BBD3569E75A0B1B77F20E4CFEFD948D0C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D9DE8BBD3569E75A0B1B77F20E4CFEFD948D0C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/323830343a376632383a3a2f33322d3334203d3e20323731363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f28::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:b1:40:e3:16:b0:ea:75:69:e6:21:18:f6:42:9c:11:a8:a1:
         6a:2f:84:15:06:59:79:78:2f:5b:24:b1:07:74:52:68:1c:ec:
         af:b6:67:bf:88:0f:65:8d:9c:50:2b:2b:58:69:b5:3e:ae:86:
         44:fc:0b:15:bb:40:6a:b1:3a:26:48:0e:4a:1f:8a:c2:0c:79:
         b0:24:69:f4:a0:2f:e1:ed:5c:5d:1a:ed:3f:f3:05:7c:67:28:
         e3:58:42:13:28:0b:6e:e5:a3:01:a2:92:ba:37:c5:1a:b2:12:
         c9:03:d6:fb:d9:60:80:5e:03:50:e7:46:fb:3d:3f:a5:31:3a:
         90:ae:de:38:d1:0b:24:20:c4:47:b6:d1:98:d8:56:f7:6f:44:
         25:9c:35:2f:8d:77:bd:39:74:61:f2:f6:3c:39:90:6d:0d:dd:
         f0:27:c5:e4:09:97:35:96:de:90:72:42:8d:c1:32:16:db:27:
         bb:dd:cd:e3:62:36:e9:2d:5a:d1:26:6c:19:ef:73:49:51:34:
         3b:f2:72:34:8e:83:76:4d:2e:d4:f9:f1:06:4a:a8:64:85:d5:
         d3:9a:55:b0:13:8a:41:7b:c5:8c:5c:d1:42:02:01:7c:e5:9b:
         44:80:39:3d:be:8b:5a:07:51:a1:b9:d2:3d:64:35:5e:76:35:
         13:e8:66:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org