Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/323830343a333132343a343230303a3a2f34302d3430203d3e20323634393936.roa
File:                     323830343a333132343a343230303a3a2f34302d3430203d3e20323634393936.roa (raw, json)
Hash identifier:          ihkbbG56+nmgA9ZF6ML8fV3dhss+JS8PjF9gMOtkDRY=
Subject key identifier:   E2:D3:05:28:45:E7:3C:01:D5:F2:B4:8A:37:AB:41:86:2D:3A:72:E5
Certificate issuer:       /CN=9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E
Certificate serial:       225995B279B078DC483D36C5F7390D29817FEC02
Authority key identifier: 9A:7D:F1:61:7E:6D:2E:A5:D5:01:7B:A0:00:CA:4D:1D:D6:D6:2F:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/323830343a333132343a343230303a3a2f34302d3430203d3e20323634393936.roa
Signing time:             Fri 23 Jun 2023 20:06:49 +0000
ROA not before:           Fri 23 Jun 2023 20:01:49 +0000
ROA not after:            Fri 21 Jun 2024 20:06:49 +0000
asID:                     264996
IP address blocks:        2804:3124:4200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:59:95:b2:79:b0:78:dc:48:3d:36:c5:f7:39:0d:29:81:7f:ec:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E
        Validity
            Not Before: Jun 23 20:01:49 2023 GMT
            Not After : Jun 21 20:06:49 2024 GMT
        Subject: CN=E2D3052845E73C01D5F2B48A37AB41862D3A72E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ad:2d:ef:ab:3c:71:34:e6:29:8b:a6:90:59:
                    d8:34:bb:84:98:7f:86:8b:71:66:57:28:81:89:32:
                    58:d5:16:22:06:aa:cb:c8:96:e5:41:86:b4:92:e6:
                    e6:8a:46:7c:7d:ae:0b:30:1f:17:27:9f:09:b4:fe:
                    2f:44:ff:be:41:d4:16:bb:36:18:68:09:cb:eb:65:
                    31:dc:1c:30:88:ac:f2:d9:fe:2b:ae:88:6a:8a:5d:
                    c4:a3:36:cf:22:7c:23:f7:71:41:ac:fe:3d:d6:f0:
                    5f:d1:fa:56:b0:ed:ac:24:77:07:fe:81:5d:d4:5a:
                    ca:2e:13:52:01:41:82:63:b0:cb:83:40:4b:d5:29:
                    34:65:55:7a:36:87:2d:45:f8:12:f4:0a:e3:08:2d:
                    2f:8a:70:f9:27:fb:60:58:38:76:c1:d6:fa:ca:24:
                    53:5d:63:0f:68:6c:19:60:13:88:a6:68:ba:fe:1a:
                    22:bb:72:40:98:8e:ab:a8:78:3b:de:0d:56:d0:ba:
                    1f:14:48:ef:db:70:45:47:0c:46:3a:01:43:6a:43:
                    c0:d2:d7:51:1c:b7:b3:a6:7e:3a:ad:3c:9c:53:0d:
                    bd:02:ae:ef:80:fe:65:0d:af:a6:e2:ed:1c:d1:38:
                    39:d4:83:b4:06:86:0a:a6:a8:c5:73:45:44:83:c1:
                    48:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D3:05:28:45:E7:3C:01:D5:F2:B4:8A:37:AB:41:86:2D:3A:72:E5
            X509v3 Authority Key Identifier:
                keyid:9A:7D:F1:61:7E:6D:2E:A5:D5:01:7B:A0:00:CA:4D:1D:D6:D6:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/323830343a333132343a343230303a3a2f34302d3430203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3124:4200::/40

    Signature Algorithm: sha256WithRSAEncryption
         4d:e9:f7:c7:29:b4:2f:a0:7c:53:88:0f:38:f5:2d:ec:9e:7e:
         49:42:59:c3:2c:d1:6f:f7:df:a8:a9:9a:ee:bf:8d:09:1e:c9:
         fb:30:ff:26:81:57:ed:a0:3b:ac:02:61:09:af:78:69:a9:68:
         e5:1f:4c:72:77:58:4c:4b:be:e1:9b:82:e7:dc:cf:3d:e2:99:
         34:56:df:58:ab:ad:c2:3f:ea:81:ed:fe:95:59:1e:c9:3c:be:
         21:e7:ba:5f:ed:98:1d:ee:1d:5a:e3:f5:84:cd:79:2a:21:6b:
         c3:15:f7:3a:7d:23:67:1f:dd:73:e3:f7:8d:70:ff:17:d8:03:
         51:44:7a:66:f8:84:33:26:d4:78:b2:8c:93:61:86:69:8e:9f:
         09:ef:7a:44:af:da:83:97:c8:d0:f8:69:b4:83:83:43:a8:08:
         7c:21:54:6a:4a:73:7b:fc:e5:40:c3:1c:46:3f:75:ef:3c:f1:
         bd:07:e7:47:9b:16:91:99:02:7f:86:fc:42:1e:e7:72:6d:d4:
         db:2e:ac:21:0f:08:79:0b:e9:3c:23:f9:65:d0:ed:4e:9d:25:
         10:80:3c:d6:83:bb:e4:80:9e:82:d5:57:42:72:d0:8b:12:2a:
         87:c9:aa:38:87:b1:9e:aa:03:cb:de:4e:11:8a:14:96:a2:4f:
         58:0c:53:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org