Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/323830343a3137303a3a2f33322d3332203d3e203238313331.roa
File:                     323830343a3137303a3a2f33322d3332203d3e203238313331.roa (raw, json)
Hash identifier:          ibhIjHmH0Gfrmekdzg/8PBlb2lQ/JXAjhI3IMTRQhG0=
Subject key identifier:   A8:2B:B4:DA:62:9B:08:A3:B5:AB:E1:2C:9A:E4:E2:8E:7E:EC:92:3E
Certificate issuer:       /CN=71C5C4E632B7A76B4E137F2B3E64580950B3A16D
Certificate serial:       07AB06841369D93351C8AFF13D2B9D98BC9A9E11
Authority key identifier: 71:C5:C4:E6:32:B7:A7:6B:4E:13:7F:2B:3E:64:58:09:50:B3:A1:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/323830343a3137303a3a2f33322d3332203d3e203238313331.roa
Signing time:             Mon 16 Oct 2023 20:44:23 +0000
ROA not before:           Mon 16 Oct 2023 20:39:23 +0000
ROA not after:            Mon 14 Oct 2024 20:44:23 +0000
asID:                     28131
IP address blocks:        2804:170::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ab:06:84:13:69:d9:33:51:c8:af:f1:3d:2b:9d:98:bc:9a:9e:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C5C4E632B7A76B4E137F2B3E64580950B3A16D
        Validity
            Not Before: Oct 16 20:39:23 2023 GMT
            Not After : Oct 14 20:44:23 2024 GMT
        Subject: CN=A82BB4DA629B08A3B5ABE12C9AE4E28E7EEC923E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:64:e2:5e:d0:3c:73:5f:27:db:71:58:e7:a4:
                    8a:81:aa:67:56:c3:fc:fe:72:51:69:32:8f:31:d1:
                    c5:bf:7a:e3:e7:f2:a8:fc:9e:88:d1:16:ed:4f:00:
                    d5:6e:f7:34:8e:14:da:dc:e6:33:3f:ab:2a:7f:88:
                    99:38:9b:a3:cd:3e:58:ce:29:b2:47:90:c3:d0:24:
                    ab:9b:05:e5:1f:ab:06:ab:07:e7:72:0b:95:36:5f:
                    48:45:e4:58:d3:3b:d0:0f:0d:31:d2:c5:9a:8f:bc:
                    fa:d9:d8:32:b2:70:e0:3d:41:98:f6:00:5a:9d:ee:
                    8b:92:1d:8d:a9:e9:83:7b:65:26:f1:b2:d5:b1:19:
                    fa:f5:a1:b9:1c:8e:da:bf:f6:91:f2:46:f7:8b:18:
                    b6:d9:b5:6a:a4:fc:f0:df:42:60:09:69:e0:41:50:
                    ff:a9:5d:cb:74:8e:65:fe:ae:14:b7:f0:0a:dd:8b:
                    56:49:cb:69:30:c2:9a:1e:ce:e0:db:40:50:fc:00:
                    29:92:e8:2c:a3:af:8c:97:ee:6d:ae:1b:ca:a8:20:
                    0c:bb:ee:b5:8b:f5:c2:ee:26:87:c1:6d:73:16:c7:
                    53:74:89:e8:29:d3:52:15:03:e8:b4:15:cc:9b:a1:
                    f2:dd:38:17:a3:da:3e:1b:0b:ca:f9:a0:a7:f9:bf:
                    79:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2B:B4:DA:62:9B:08:A3:B5:AB:E1:2C:9A:E4:E2:8E:7E:EC:92:3E
            X509v3 Authority Key Identifier:
                keyid:71:C5:C4:E6:32:B7:A7:6B:4E:13:7F:2B:3E:64:58:09:50:B3:A1:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/323830343a3137303a3a2f33322d3332203d3e203238313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:170::/32

    Signature Algorithm: sha256WithRSAEncryption
         c5:35:58:cb:ea:0e:da:fe:76:6d:ec:4b:a8:fe:fa:59:f6:e4:
         21:2e:5b:fc:57:3a:69:c3:89:12:48:91:ee:5d:d9:20:f6:8c:
         e7:a5:96:59:24:ed:c7:65:69:8d:13:4e:34:7c:21:cf:dc:71:
         06:92:ae:1f:b4:b2:58:4f:1e:ab:9b:c2:da:ca:7c:1d:bf:b0:
         5a:07:57:9a:67:0e:32:1d:8a:93:74:d8:59:64:89:1d:99:4e:
         27:76:f7:5b:5f:67:71:78:94:4a:16:08:30:05:60:7b:c3:0d:
         23:5d:56:e2:5b:cf:c9:20:06:bb:b0:a7:eb:eb:5c:5c:8f:00:
         88:8d:29:bf:b7:48:b5:4a:a4:6f:dc:a0:13:13:ca:0c:69:3d:
         a7:32:d7:38:1c:7e:e6:71:71:f9:29:9a:45:f9:9e:4d:36:b6:
         bb:88:b9:43:1a:ea:7d:c8:91:a5:2e:c3:50:20:40:b2:d9:e4:
         ee:64:e5:c4:67:e2:15:f2:dd:2c:5d:97:20:81:87:bd:7d:63:
         d9:b2:62:1f:a4:b8:c0:d7:0e:3e:62:63:d3:4a:9b:c8:2b:a6:
         40:e3:49:41:26:b9:0d:c0:4f:75:6a:aa:45:65:78:3c:87:f3:
         35:52:14:af:a1:f9:03:56:df:db:60:f0:61:7f:28:ae:10:70:
         81:41:f0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org