Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/323830343a333562633a3a2f33322d3332203d3e20323636333033.roa
File:                     323830343a333562633a3a2f33322d3332203d3e20323636333033.roa (raw, json)
Hash identifier:          ClI5sD9s9CwkGtwCR4JyrFKOOb39kdsT0KYjMvNA86A=
Subject key identifier:   74:ED:7E:B1:FF:55:D3:27:3E:C0:2C:CF:9A:C1:29:42:73:B0:72:92
Certificate issuer:       /CN=DE93C72F22244480C517BC4501B196642FEC83A3
Certificate serial:       67F5883CA15AA7F9C9805450E3755D0AD2725F4D
Authority key identifier: DE:93:C7:2F:22:24:44:80:C5:17:BC:45:01:B1:96:64:2F:EC:83:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE93C72F22244480C517BC4501B196642FEC83A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/323830343a333562633a3a2f33322d3332203d3e20323636333033.roa
Signing time:             Fri 19 Jan 2024 19:55:15 +0000
ROA not before:           Fri 19 Jan 2024 19:50:15 +0000
ROA not after:            Fri 17 Jan 2025 19:55:15 +0000
asID:                     266303
IP address blocks:        2804:35bc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f5:88:3c:a1:5a:a7:f9:c9:80:54:50:e3:75:5d:0a:d2:72:5f:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE93C72F22244480C517BC4501B196642FEC83A3
        Validity
            Not Before: Jan 19 19:50:15 2024 GMT
            Not After : Jan 17 19:55:15 2025 GMT
        Subject: CN=74ED7EB1FF55D3273EC02CCF9AC1294273B07292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8a:7d:ab:6d:54:10:6a:64:89:b3:92:8c:0c:
                    36:12:89:3f:9c:b8:09:09:72:0e:c4:0e:ca:20:fa:
                    c1:17:76:76:11:ed:99:60:32:ea:ff:bb:bb:33:33:
                    a5:4c:b2:e6:69:79:24:59:19:23:e9:bc:83:c5:4b:
                    8c:87:0b:9c:96:74:e3:38:ba:b7:ab:33:35:f9:a9:
                    9e:1f:c4:75:3d:1b:2b:eb:40:74:0d:fe:8d:3e:8a:
                    96:7e:77:60:6e:40:a1:04:16:a6:b5:95:bf:f4:f1:
                    f7:6e:a5:c1:c0:7e:99:56:d7:bc:3d:df:72:47:33:
                    0a:43:84:67:a6:62:22:0e:23:46:fa:8c:cf:de:b7:
                    d7:b0:e4:c2:5f:08:da:3e:d4:6a:4e:67:13:08:0a:
                    33:d8:3b:c0:14:8a:8e:88:f2:16:5e:bb:2b:7b:c1:
                    a1:17:f9:14:ed:0e:36:1e:00:50:9c:62:5c:b1:8b:
                    d5:ef:d5:6c:35:81:07:9b:07:2e:55:20:6e:66:0a:
                    f5:55:33:8d:ba:00:b9:a6:34:b7:3a:2e:e6:88:97:
                    10:fc:f3:cf:7c:48:c1:4e:c6:b2:9f:22:eb:c2:4e:
                    55:5e:b6:79:17:5c:fd:19:0f:2b:d6:3b:f1:4b:f3:
                    05:67:79:6f:ab:48:9f:25:a7:43:6c:6b:c7:34:08:
                    12:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:ED:7E:B1:FF:55:D3:27:3E:C0:2C:CF:9A:C1:29:42:73:B0:72:92
            X509v3 Authority Key Identifier:
                keyid:DE:93:C7:2F:22:24:44:80:C5:17:BC:45:01:B1:96:64:2F:EC:83:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/DE93C72F22244480C517BC4501B196642FEC83A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE93C72F22244480C517BC4501B196642FEC83A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/323830343a333562633a3a2f33322d3332203d3e20323636333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:66:fb:c8:3a:c6:b4:c9:6f:1d:9a:bc:3f:6b:55:e3:bc:e6:
         5a:0c:5e:bb:a8:4c:61:ef:a8:43:a0:98:04:67:28:b0:fd:f8:
         b9:54:e2:cb:f6:ca:cf:dd:d9:18:8a:df:c6:56:8c:e7:5c:de:
         78:a9:06:1a:c9:0f:7d:32:92:24:31:8d:a5:60:d6:d0:03:78:
         5b:c9:81:b1:a0:98:1d:43:aa:67:61:1e:1e:61:9a:b4:2b:ed:
         cb:e4:ea:51:25:ea:c6:d8:d4:35:82:e3:22:e8:3f:e9:0f:45:
         00:37:0d:7a:e2:59:22:a7:46:04:8c:1b:a3:10:7c:86:17:02:
         f2:dc:28:e5:15:38:10:1d:9b:52:51:ca:82:d3:83:ea:c0:a1:
         37:df:8f:79:5d:07:55:89:f3:22:5d:ee:ab:d8:49:b9:19:e1:
         b0:6e:d1:9e:5a:ba:5e:1e:44:9c:46:ff:08:7f:be:e4:4d:c9:
         a7:a3:8f:9b:86:48:84:59:4b:71:44:79:fc:bb:6a:41:fa:11:
         42:21:29:fb:f1:6a:23:3d:d7:3d:ae:68:0e:6c:be:7f:21:02:
         f4:65:3b:74:05:51:3c:90:9f:07:da:7e:de:18:94:67:7e:d3:
         91:3e:1a:c3:7e:37:1d:0f:22:3c:d1:5e:41:da:9c:00:61:37:
         56:32:db:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org