Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/0/323830343a343031633a633030303a3a2f33342d3334203d3e20323635393335.roa
File:                     323830343a343031633a633030303a3a2f33342d3334203d3e20323635393335.roa (raw, json)
Hash identifier:          WmTwrMKv7cq4sE8w07Ox6SZ6nxx2cfPDmlllgX8qNYU=
Subject key identifier:   31:B5:9A:1E:ED:07:E5:6D:1B:AB:82:AA:D5:A9:BE:C7:A1:39:FC:96
Certificate issuer:       /CN=78151C7AED024C90945657A6AA5EC78F610B0D64
Certificate serial:       7366FAD15A0BCE9681966F9E0152EB9FD02753D6
Authority key identifier: 78:15:1C:7A:ED:02:4C:90:94:56:57:A6:AA:5E:C7:8F:61:0B:0D:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78151C7AED024C90945657A6AA5EC78F610B0D64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/0/323830343a343031633a633030303a3a2f33342d3334203d3e20323635393335.roa
Signing time:             Thu 05 Oct 2023 19:21:53 +0000
ROA not before:           Thu 05 Oct 2023 19:16:53 +0000
ROA not after:            Thu 03 Oct 2024 19:21:53 +0000
asID:                     265935
IP address blocks:        2804:401c:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:66:fa:d1:5a:0b:ce:96:81:96:6f:9e:01:52:eb:9f:d0:27:53:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78151C7AED024C90945657A6AA5EC78F610B0D64
        Validity
            Not Before: Oct  5 19:16:53 2023 GMT
            Not After : Oct  3 19:21:53 2024 GMT
        Subject: CN=31B59A1EED07E56D1BAB82AAD5A9BEC7A139FC96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ab:53:bb:2e:38:e5:5e:55:aa:1f:89:ed:4a:
                    ac:32:c4:c4:72:73:3c:42:7c:e9:b8:b7:38:32:85:
                    47:7f:6f:a1:8e:46:a9:df:e8:bc:4e:e1:0c:fb:f7:
                    a8:0e:c5:55:b2:63:26:dd:4c:90:d8:16:6f:ec:22:
                    83:65:fb:b9:ff:26:b1:63:eb:43:b4:16:e4:cc:d3:
                    a1:74:5a:68:99:57:3e:10:19:cf:d7:7b:8b:f7:95:
                    0b:a4:33:cc:44:60:f5:57:86:2a:f2:33:77:25:86:
                    1c:90:70:1a:27:38:ab:3e:07:1f:4f:75:6e:80:93:
                    d6:88:5e:ab:ff:27:30:7b:39:ff:00:ae:b0:7a:92:
                    d1:f9:af:c5:df:9d:8a:a3:8a:71:9e:31:00:a4:3c:
                    ee:50:fa:fa:1a:f1:65:b6:79:ac:11:e1:22:05:6b:
                    b1:55:96:0b:e0:2b:82:ad:61:71:1d:12:db:a1:4e:
                    9b:b3:4b:a5:80:64:9c:d3:20:52:8b:49:46:d4:6d:
                    c0:d9:ae:8a:49:35:ae:71:4a:c7:3a:6b:62:84:02:
                    b9:d1:a1:06:b4:43:48:ae:9a:9a:9c:4b:25:e6:07:
                    24:af:46:91:50:6f:4a:3a:1a:b3:90:02:ad:ce:04:
                    cb:27:aa:5e:35:9d:d6:2e:93:36:be:7e:4e:cb:9d:
                    9e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B5:9A:1E:ED:07:E5:6D:1B:AB:82:AA:D5:A9:BE:C7:A1:39:FC:96
            X509v3 Authority Key Identifier:
                keyid:78:15:1C:7A:ED:02:4C:90:94:56:57:A6:AA:5E:C7:8F:61:0B:0D:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/0/78151C7AED024C90945657A6AA5EC78F610B0D64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78151C7AED024C90945657A6AA5EC78F610B0D64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/0/323830343a343031633a633030303a3a2f33342d3334203d3e20323635393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:401c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         77:43:20:bc:d2:ca:b4:aa:0b:46:49:af:5b:46:5a:56:b0:17:
         7e:3b:8e:d8:07:93:e9:bb:9d:84:d4:49:da:d0:f4:2d:4b:21:
         fa:41:86:5e:ba:bb:76:8e:36:43:91:e0:83:7d:57:41:de:9b:
         79:6d:15:53:90:bd:5d:e9:68:6f:f3:e5:ad:d8:4a:dc:59:52:
         c9:14:3f:ca:7e:36:bf:a0:2e:8d:09:23:a1:21:12:a7:22:a1:
         72:d4:4e:6c:d6:f8:f9:d7:44:49:f2:b0:76:5f:5d:3c:63:54:
         fa:89:91:33:38:2a:8e:e0:39:24:7b:f6:37:d6:c3:38:21:cd:
         78:1e:6d:64:4d:78:bd:a7:fa:01:33:9b:df:8f:91:ec:81:9b:
         6a:07:f4:76:d6:14:fe:ed:77:cd:59:57:67:a5:8e:58:58:ed:
         52:6c:31:fd:9c:64:de:59:c4:97:5e:66:a2:93:7c:f6:c2:39:
         6a:90:c4:23:ee:f1:57:7c:b8:cf:ce:e7:26:92:85:b5:09:7d:
         e6:0d:0c:7a:29:6b:19:8a:0b:bf:03:4b:ac:0b:9e:39:40:82:
         21:23:bf:7d:83:49:72:df:4f:e6:d2:13:41:71:2d:7a:fc:78:
         50:90:89:43:c4:67:95:65:63:5f:5f:94:74:74:32:cd:37:74:
         00:e7:e6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:39 2024 by rpki-client on console-fra.rpki-client.org