Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/323830343a31343a3a2f33322d3336203d3e203238333630.roa
File:                     323830343a31343a3a2f33322d3336203d3e203238333630.roa (raw, json)
Hash identifier:          V4CQGaE6WzAdg3hyfhaG300WhFqzv2H9RLguLNOeDe4=
Subject key identifier:   3E:C9:36:7F:1D:27:D4:9C:6D:CA:5C:C3:88:63:10:E7:84:C0:B7:81
Certificate issuer:       /CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Certificate serial:       5F029E4BA53D72C8C9D70FB2829AE24194EC1FAB
Authority key identifier: 16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/323830343a31343a3a2f33322d3336203d3e203238333630.roa
Signing time:             Fri 11 Nov 2022 17:30:32 +0000
ROA not before:           Fri 11 Nov 2022 17:25:32 +0000
ROA not after:            Fri 10 Nov 2023 17:30:32 +0000
asID:                     28360
IP address blocks:        2804:14::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:02:9e:4b:a5:3d:72:c8:c9:d7:0f:b2:82:9a:e2:41:94:ec:1f:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
        Validity
            Not Before: Nov 11 17:25:32 2022 GMT
            Not After : Nov 10 17:30:32 2023 GMT
        Subject: CN=3EC9367F1D27D49C6DCA5CC3886310E784C0B781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:21:52:f0:38:d5:c3:ed:a3:31:18:8a:8c:c2:
                    eb:84:98:a5:9c:aa:c2:f6:51:02:5f:63:11:90:a7:
                    a2:c1:b5:22:b2:a7:5a:ef:08:0e:55:7f:5e:80:07:
                    b5:8d:3e:12:03:ed:c5:57:fb:8c:d2:28:fa:4f:11:
                    6d:77:2e:ab:92:08:c6:bf:0d:6f:af:97:3d:3b:9d:
                    2f:8e:de:fc:4d:1a:8e:91:d3:e3:99:d6:a9:2a:2e:
                    fe:81:6a:20:fc:d3:65:29:03:dd:7a:a9:fd:89:08:
                    e7:69:13:89:aa:aa:c0:51:c4:a7:54:44:75:0f:31:
                    e5:e9:50:43:f3:38:67:94:81:ef:06:65:ad:14:2f:
                    0b:77:74:c4:79:03:02:ba:1a:8f:6a:e5:90:28:22:
                    a7:e5:9e:37:01:29:ab:a6:fe:2e:48:fd:c7:5b:84:
                    ea:be:d8:42:7a:44:d3:86:12:51:2a:76:67:7c:11:
                    21:38:4a:cc:aa:3f:ac:1d:be:f2:63:89:0d:09:3a:
                    b5:28:79:eb:d3:6b:ca:37:30:d2:75:d3:5a:08:79:
                    e6:38:cf:83:ef:15:d0:62:a8:a4:ac:ec:2a:40:fd:
                    26:74:a7:f3:2c:a8:c3:c9:da:56:60:8a:60:25:0b:
                    cd:8c:4d:33:f2:70:89:62:0c:b9:0a:da:b5:bd:ea:
                    7f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C9:36:7F:1D:27:D4:9C:6D:CA:5C:C3:88:63:10:E7:84:C0:B7:81
            X509v3 Authority Key Identifier:
                keyid:16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/323830343a31343a3a2f33322d3336203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:3b:59:c1:0b:70:a0:75:d5:0c:8c:f4:4c:c3:46:98:45:71:
         39:46:56:ab:03:39:3a:6b:8c:fe:4b:90:db:9f:1e:d2:2b:1f:
         cc:ce:71:79:2a:2d:bb:c6:e2:1f:92:4e:f2:15:17:e7:c1:6d:
         c5:61:ee:1e:d0:29:ad:e7:3a:3e:55:12:1d:b2:30:c7:6b:53:
         80:f9:e3:d3:00:dc:e2:1e:78:a4:3a:ea:b0:1b:de:81:25:00:
         e3:d5:e5:57:05:16:fb:a0:31:75:a7:b5:29:4a:0f:9c:5f:ba:
         0c:a9:a0:71:b0:ef:95:f0:59:56:00:b9:75:52:cb:90:4e:f3:
         14:db:dd:f9:78:12:e7:29:2e:9e:3e:0a:0c:c3:0f:49:61:d9:
         76:f2:5d:2c:83:0c:a5:98:5f:2a:f5:cd:c7:3a:7d:5d:be:d3:
         fd:08:2a:fd:d7:89:45:d6:d6:c4:86:44:50:c7:9f:6e:78:3c:
         74:2f:34:ae:d1:36:bb:7f:43:b8:18:e6:5b:5d:43:f4:f0:e6:
         ca:d9:00:d9:f4:28:34:43:ce:9e:f8:59:6c:1f:30:58:95:42:
         44:cc:5a:a2:27:28:dd:24:b5:b9:82:15:44:e5:ca:71:1b:cb:
         28:51:a6:78:84:86:ff:ed:ba:4e:8a:2d:c0:5d:1a:f3:44:45:
         af:ca:90:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org