Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/323830343a366264343a3a2f33322d3334203d3e20323730343238.roa
File:                     323830343a366264343a3a2f33322d3334203d3e20323730343238.roa (raw, json)
Hash identifier:          5+NdBTsyPsYtquAbmHxDpce3ueruG1ZTGIkNwiak71E=
Subject key identifier:   C7:46:00:70:1E:51:5C:85:FA:D7:28:A8:30:62:EA:03:AB:63:D7:5D
Certificate issuer:       /CN=C14D7736E61FBB5407090B52CAF4DAC5BBAF8964
Certificate serial:       7A831C53AFAD320C780F4480A4381E1DE75F392C
Authority key identifier: C1:4D:77:36:E6:1F:BB:54:07:09:0B:52:CA:F4:DA:C5:BB:AF:89:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C14D7736E61FBB5407090B52CAF4DAC5BBAF8964.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/323830343a366264343a3a2f33322d3334203d3e20323730343238.roa
Signing time:             Thu 09 Mar 2023 18:37:57 +0000
ROA not before:           Thu 09 Mar 2023 18:32:57 +0000
ROA not after:            Thu 07 Mar 2024 18:37:57 +0000
asID:                     270428
IP address blocks:        2804:6bd4::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:83:1c:53:af:ad:32:0c:78:0f:44:80:a4:38:1e:1d:e7:5f:39:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C14D7736E61FBB5407090B52CAF4DAC5BBAF8964
        Validity
            Not Before: Mar  9 18:32:57 2023 GMT
            Not After : Mar  7 18:37:57 2024 GMT
        Subject: CN=C74600701E515C85FAD728A83062EA03AB63D75D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0f:26:9b:a2:73:87:3b:7c:bc:fa:7d:f8:ec:
                    ab:cb:14:6c:af:0f:ab:05:53:2c:45:f6:b2:60:48:
                    8d:eb:ec:4e:14:de:c8:8f:0e:aa:08:d1:57:b3:b4:
                    a8:2a:76:cc:a9:dd:2d:34:dc:5f:d3:4c:8f:0a:4d:
                    2f:23:01:8a:e3:77:86:8a:6e:e8:e6:61:cf:67:16:
                    9f:dc:91:b2:a1:e9:c3:1b:65:a3:f5:a6:bc:28:0c:
                    de:e0:5f:69:b6:56:42:92:10:e2:7b:7a:de:50:ac:
                    15:9d:49:5f:be:04:d0:7b:31:ea:96:74:d4:c3:61:
                    3b:75:61:70:64:96:66:82:ce:d9:b1:e0:90:80:e1:
                    5a:08:d0:3c:3c:30:e4:4a:1b:eb:77:66:31:ce:ec:
                    f3:6b:af:a8:cc:d4:fe:5e:5a:36:f2:42:66:e0:d5:
                    25:cd:93:90:c3:07:84:ec:21:82:32:8d:e2:17:b5:
                    d9:47:5f:9f:b6:d4:05:fc:74:13:3b:79:55:e7:b7:
                    66:ed:4e:8e:ce:b3:e3:2a:99:f6:38:15:c2:c3:e9:
                    36:f9:f0:c9:ef:ec:41:16:ff:46:da:af:ff:6f:c9:
                    da:a6:80:ab:1c:95:45:11:ac:04:73:30:a6:cb:ca:
                    7d:b9:8b:48:91:ab:92:8f:e9:31:cb:56:b8:d3:13:
                    9c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:46:00:70:1E:51:5C:85:FA:D7:28:A8:30:62:EA:03:AB:63:D7:5D
            X509v3 Authority Key Identifier:
                keyid:C1:4D:77:36:E6:1F:BB:54:07:09:0B:52:CA:F4:DA:C5:BB:AF:89:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/C14D7736E61FBB5407090B52CAF4DAC5BBAF8964.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C14D7736E61FBB5407090B52CAF4DAC5BBAF8964.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/323830343a366264343a3a2f33322d3334203d3e20323730343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bd4::/32

    Signature Algorithm: sha256WithRSAEncryption
         d4:ae:f8:96:43:fd:24:bb:16:3d:a1:db:fd:e6:2b:b5:9a:b4:
         7d:4c:8f:b1:05:a1:b9:c0:70:0c:c3:bc:13:ce:27:f3:d1:5c:
         d1:86:8d:64:ba:d6:8d:43:f6:bc:06:58:1a:b5:d4:e7:95:45:
         e0:9a:c8:ac:0c:5c:26:eb:29:93:0d:27:4e:e6:59:06:a3:58:
         23:09:ef:a3:34:e7:03:d7:54:54:65:92:dc:17:68:de:15:18:
         50:dd:c7:f2:ac:3e:55:36:5e:db:22:f2:b0:dd:45:5b:f7:0e:
         1d:b9:a1:a4:f4:93:cd:e2:4f:07:16:6d:a5:fd:47:3c:59:e3:
         b8:ac:b1:90:0d:50:dd:74:d7:c3:b5:e1:4a:77:09:8e:50:dc:
         bf:78:90:af:fa:af:c7:0b:09:a9:21:24:9a:00:fd:52:33:3e:
         9c:35:b2:14:93:61:52:20:eb:f7:1b:65:51:e0:b1:97:e1:f2:
         08:07:7e:1d:78:53:a1:c3:aa:e9:71:28:a2:a4:cd:eb:c7:a6:
         47:2b:cc:3f:9f:ab:89:fe:85:02:27:49:6b:b8:4e:43:bd:ee:
         46:ff:d3:17:4f:af:0f:c2:fb:14:3a:78:83:30:9f:d3:73:67:
         97:76:bf:a5:27:d4:b3:49:be:39:fe:07:d6:b2:da:d3:94:32:
         ea:a5:ab:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org