Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/323830343a346635343a383030303a3a2f33332d3333203d3e20323338333230.roa
File:                     323830343a346635343a383030303a3a2f33332d3333203d3e20323338333230.roa (raw, json)
Hash identifier:          wTxdHAGPk08iq6+Pe9itLnqKS2dIeNoL5wUrhEL9rd8=
Subject key identifier:   B9:A1:B2:93:B2:10:48:EA:D5:19:6B:04:76:3A:55:06:6C:D8:64:9E
Certificate issuer:       /CN=7E870936463A4C49A47872CB9BDBE77E9EF1EE14
Certificate serial:       5A3181D90CFDF6E16CB661843AFE0D6AED585236
Authority key identifier: 7E:87:09:36:46:3A:4C:49:A4:78:72:CB:9B:DB:E7:7E:9E:F1:EE:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E870936463A4C49A47872CB9BDBE77E9EF1EE14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/323830343a346635343a383030303a3a2f33332d3333203d3e20323338333230.roa
Signing time:             Wed 02 Aug 2023 14:08:43 +0000
ROA not before:           Wed 02 Aug 2023 14:03:43 +0000
ROA not after:            Wed 31 Jul 2024 14:08:43 +0000
asID:                     238320
IP address blocks:        2804:4f54:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:31:81:d9:0c:fd:f6:e1:6c:b6:61:84:3a:fe:0d:6a:ed:58:52:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E870936463A4C49A47872CB9BDBE77E9EF1EE14
        Validity
            Not Before: Aug  2 14:03:43 2023 GMT
            Not After : Jul 31 14:08:43 2024 GMT
        Subject: CN=B9A1B293B21048EAD5196B04763A55066CD8649E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fe:12:71:31:20:bc:a6:06:f0:3d:4b:98:45:
                    23:1e:9a:b8:86:9d:88:75:f6:db:73:75:ec:54:87:
                    99:7a:7e:91:23:60:e7:ef:00:6e:55:7c:6d:00:18:
                    96:d1:19:56:2d:81:68:eb:79:aa:4e:33:6c:b7:52:
                    d2:8b:19:0e:fe:2f:7b:c4:27:45:64:bb:8e:63:43:
                    0a:0c:fc:da:36:e9:6d:ec:17:dc:b0:02:b9:9e:ae:
                    a9:39:01:44:c0:04:b8:45:83:24:39:46:d9:19:a1:
                    62:3c:68:2c:25:d7:32:04:4a:7b:a0:b0:3c:4a:cc:
                    12:af:f7:fc:25:23:00:0f:84:ca:42:95:6a:d6:ae:
                    8c:02:88:2d:a1:c2:c9:a2:01:43:b6:ee:af:91:3a:
                    3c:29:01:3e:ba:df:52:e5:ea:a2:21:9f:03:2d:10:
                    94:1c:ba:32:a9:09:2f:6a:33:c5:57:7e:64:dc:94:
                    f8:d0:9b:f9:3a:3b:f5:ce:91:b7:3c:66:31:b8:4d:
                    35:59:17:a3:e5:91:82:ea:60:46:e9:1d:d7:b6:3c:
                    41:06:f2:50:7b:29:17:59:f9:41:9b:25:37:c6:1c:
                    de:e6:57:49:81:59:d1:41:55:63:59:69:f0:54:75:
                    51:92:cd:52:3f:69:af:07:2c:63:e6:e4:b7:17:14:
                    ed:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A1:B2:93:B2:10:48:EA:D5:19:6B:04:76:3A:55:06:6C:D8:64:9E
            X509v3 Authority Key Identifier:
                keyid:7E:87:09:36:46:3A:4C:49:A4:78:72:CB:9B:DB:E7:7E:9E:F1:EE:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/7E870936463A4C49A47872CB9BDBE77E9EF1EE14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E870936463A4C49A47872CB9BDBE77E9EF1EE14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/323830343a346635343a383030303a3a2f33332d3333203d3e20323338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f54:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         b6:90:69:de:61:18:c4:bb:f5:0b:38:a7:02:d1:ed:31:b6:ca:
         7f:3b:33:d7:5b:2c:bc:0d:9e:fc:b1:2b:93:02:dd:5a:32:4a:
         91:f6:51:af:32:83:f6:29:3f:ae:16:45:71:2d:b6:df:03:4f:
         d9:b3:93:ca:b6:d1:2b:c3:a0:f9:31:6d:fc:96:17:0a:8f:2b:
         fb:ba:36:04:95:51:10:6c:0e:32:c1:3c:18:51:f5:e4:2a:3e:
         c6:b9:cf:ea:f7:e0:f3:0f:cc:1b:0f:fd:1a:6b:00:a2:02:25:
         e5:b6:db:6a:0b:1f:36:57:4f:b3:de:07:f8:b0:a8:c9:05:c2:
         95:95:6f:cf:4d:89:ab:4c:89:6f:7b:84:c7:4e:00:67:4b:44:
         82:fe:a0:9e:23:11:61:a3:03:de:ed:fd:0d:27:56:b1:ca:43:
         ad:ae:8e:07:12:1a:0a:29:ca:80:b8:8b:b7:37:10:da:de:28:
         66:f8:8c:81:a1:4b:e3:db:5d:47:ea:04:6f:0b:a7:51:08:5d:
         8d:d1:b3:32:f7:75:62:48:28:e1:c1:bd:83:f2:96:2d:76:40:
         5d:83:02:f2:52:1e:06:fe:e0:fc:99:fd:cc:60:9c:be:56:94:
         52:e9:93:b0:24:40:a5:46:ef:ff:3a:8c:9f:6d:6a:d5:1e:3e:
         ce:e5:23:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 3 17:30:44 2023 by rpki-client on console-fra.rpki-client.org