Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/323830343a6331383a3a2f33322d3333203d3e203532363737.roa
File:                     323830343a6331383a3a2f33322d3333203d3e203532363737.roa (raw, json)
Hash identifier:          +r6veiYDb3zTU4bxK9xiDXgqacLCXl1UfSeRy7Cr9d4=
Subject key identifier:   2E:C5:CD:BF:44:4B:4A:0E:21:21:ED:2A:5A:DF:8E:96:E7:72:E7:90
Certificate issuer:       /CN=D7EECEBFA6498EC7786E99D794BC594E9420DF2A
Certificate serial:       72F7A53378E6FAA6DB5C9146E244C5B63A68D82A
Authority key identifier: D7:EE:CE:BF:A6:49:8E:C7:78:6E:99:D7:94:BC:59:4E:94:20:DF:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7EECEBFA6498EC7786E99D794BC594E9420DF2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/323830343a6331383a3a2f33322d3333203d3e203532363737.roa
Signing time:             Thu 21 Mar 2024 18:50:17 +0000
ROA not before:           Thu 21 Mar 2024 18:45:17 +0000
ROA not after:            Thu 20 Mar 2025 18:50:17 +0000
asID:                     52677
IP address blocks:        2804:c18::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f7:a5:33:78:e6:fa:a6:db:5c:91:46:e2:44:c5:b6:3a:68:d8:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7EECEBFA6498EC7786E99D794BC594E9420DF2A
        Validity
            Not Before: Mar 21 18:45:17 2024 GMT
            Not After : Mar 20 18:50:17 2025 GMT
        Subject: CN=2EC5CDBF444B4A0E2121ED2A5ADF8E96E772E790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:14:84:4c:e7:f5:6a:4a:75:bd:b6:85:fb:92:
                    25:8c:bc:99:91:1f:ed:e8:7f:d8:a6:7f:c2:33:f1:
                    f1:b6:0a:a4:65:ef:05:f6:0b:ac:8f:ca:fd:35:13:
                    ea:85:35:b8:ec:7b:d7:7e:6a:28:b3:9f:b1:b9:e4:
                    ca:15:c7:fc:e9:93:54:c7:18:e7:eb:51:81:a7:0f:
                    b9:ea:31:17:09:ab:76:e8:c2:0e:0e:31:9f:ac:3d:
                    95:0d:54:6e:b0:39:2e:e5:f7:f6:d8:6f:fb:3b:f2:
                    3c:3a:07:cf:65:08:0e:89:ae:28:a8:c6:66:94:26:
                    45:46:14:88:6c:2a:41:6a:d0:b3:20:cf:4c:5d:5c:
                    66:84:22:47:52:3a:39:37:34:e6:35:de:53:37:65:
                    7a:44:a1:27:b8:05:cb:27:72:26:ef:59:d9:5a:b4:
                    05:f5:f8:40:c2:04:58:3f:12:84:48:c8:35:d0:91:
                    05:50:98:30:ba:d0:da:e6:52:5b:8a:0d:31:40:65:
                    44:2e:6b:48:e2:c3:18:f8:71:3c:05:3c:4e:f8:89:
                    30:d6:58:9b:69:45:04:bd:13:49:0d:a6:c7:a8:df:
                    66:fb:00:ed:f1:87:69:4c:64:e7:58:17:4c:04:e9:
                    0f:4a:95:8f:5d:8a:d6:68:61:e8:71:e3:0c:62:78:
                    0a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C5:CD:BF:44:4B:4A:0E:21:21:ED:2A:5A:DF:8E:96:E7:72:E7:90
            X509v3 Authority Key Identifier:
                keyid:D7:EE:CE:BF:A6:49:8E:C7:78:6E:99:D7:94:BC:59:4E:94:20:DF:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/D7EECEBFA6498EC7786E99D794BC594E9420DF2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7EECEBFA6498EC7786E99D794BC594E9420DF2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/323830343a6331383a3a2f33322d3333203d3e203532363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c18::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:15:91:e8:4c:67:da:46:ac:64:2b:82:34:b8:fe:3d:c2:55:
         7c:59:c2:4c:72:a8:a2:c5:8c:ba:2b:31:28:ac:ef:93:1c:c6:
         e6:40:c3:07:4a:08:f7:7a:7f:f3:b6:4c:ce:68:e3:fa:3e:09:
         8a:0b:be:c2:90:5d:03:be:d2:c9:f6:6f:57:d3:9a:96:86:96:
         fd:fe:37:8b:61:7a:ec:39:b7:ac:50:56:dc:72:7e:00:a2:92:
         61:81:98:63:4f:15:ad:c9:84:f9:e4:44:66:3f:99:a2:55:62:
         44:57:58:84:f5:e1:fd:12:d8:73:8f:ad:03:7c:0b:0d:6b:4a:
         ad:02:8c:f2:37:6f:b9:aa:df:a6:d8:da:ce:f8:cf:43:d8:e2:
         c2:17:6d:92:00:6d:99:c3:e5:57:75:e6:91:0b:d3:c0:3b:c6:
         71:18:b4:eb:98:04:f1:df:c8:c5:fa:8d:6a:ef:a5:e6:77:86:
         05:68:77:95:29:fc:80:c6:4d:fa:6c:24:be:1a:e7:7a:64:e7:
         ac:e8:d8:f8:fd:cf:3b:e4:ac:6b:4a:0b:a2:6b:4b:5c:ee:4b:
         af:60:a6:38:e6:9e:e9:af:e7:e1:90:63:65:ea:33:fc:72:06:
         45:74:17:98:a8:04:47:b2:e0:eb:a9:dc:41:69:a5:6c:75:ce:
         20:16:fc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org