Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/323830343a37343a3a2f33322d3332203d3e203238333338.roa
File:                     323830343a37343a3a2f33322d3332203d3e203238333338.roa (raw, json)
Hash identifier:          yCRrQU4/SbZLNkku9CwecKyyiAighei+5AAgGyOTlTA=
Subject key identifier:   7B:0E:39:AB:AA:65:49:B4:34:C4:39:B4:1E:E1:7D:B3:7E:F0:1D:97
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       3520C71B7A02A81F97047C1CDC4E7625433CB7D2
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/323830343a37343a3a2f33322d3332203d3e203238333338.roa
Signing time:             Tue 05 Mar 2024 18:00:01 +0000
ROA not before:           Tue 05 Mar 2024 17:55:01 +0000
ROA not after:            Tue 04 Mar 2025 18:00:01 +0000
asID:                     28338
IP address blocks:        2804:74::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:20:c7:1b:7a:02:a8:1f:97:04:7c:1c:dc:4e:76:25:43:3c:b7:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: Mar  5 17:55:01 2024 GMT
            Not After : Mar  4 18:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:18:f2:5e:77:39:f1:e7:d5:ed:e8:e4:8a:b4:
                    e6:ae:a4:6a:f8:24:9d:5d:dc:81:50:d3:0c:b1:46:
                    26:52:03:3b:68:b5:c7:ce:73:67:46:2f:14:42:86:
                    5f:1d:4f:6a:f6:1d:7b:e6:87:dd:51:bf:aa:aa:77:
                    c8:a7:9c:8f:72:11:e6:c3:96:22:c7:6d:29:20:39:
                    df:07:f0:b4:c4:ed:cc:d0:3e:28:de:30:c6:ae:a8:
                    6a:88:92:95:db:25:ab:e2:57:aa:2e:a6:73:75:68:
                    4f:99:68:96:84:e6:55:5d:31:b7:95:69:cb:e4:81:
                    b5:ba:bc:dd:88:73:e2:9b:c3:bc:00:44:0c:c1:ea:
                    c6:df:a9:54:c7:75:6e:3e:74:20:80:b9:a1:51:d6:
                    39:2a:73:22:14:ad:6f:5d:d7:9e:52:de:6a:da:90:
                    b3:f4:e1:74:34:dd:98:22:cd:16:d0:de:6c:97:36:
                    72:9e:0a:72:f5:4e:c9:b0:d8:0e:60:a0:9a:f6:24:
                    9d:57:60:c2:62:29:88:4a:f3:d4:dc:e6:6c:50:aa:
                    f4:dc:3a:89:9e:df:a6:4d:45:92:ca:a4:de:ed:de:
                    c0:64:16:91:b8:76:83:68:ef:1a:48:e9:36:37:85:
                    e0:56:c6:9f:a4:ff:9d:9a:62:75:84:57:56:bc:e1:
                    32:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0E:39:AB:AA:65:49:B4:34:C4:39:B4:1E:E1:7D:B3:7E:F0:1D:97
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/323830343a37343a3a2f33322d3332203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:97:4c:35:f8:f6:3a:e6:a2:a5:ed:2a:8f:d8:6e:b1:53:5a:
         4a:e8:59:69:78:6d:02:f8:a0:89:7f:48:b9:6b:e0:22:dd:f7:
         42:c7:aa:cf:ff:28:bd:73:6d:db:17:cc:c9:64:c8:1c:20:88:
         76:80:a6:b8:71:be:04:bd:2d:6b:33:70:ff:d9:c2:a6:76:5b:
         46:ee:1f:bb:43:64:66:24:2d:86:f9:e7:ab:5e:b4:10:ad:42:
         ba:ac:e8:29:d7:d6:6e:ba:83:ce:43:26:96:78:03:9f:44:1a:
         87:d4:ef:0f:84:97:fc:5e:ca:cb:b2:e7:70:fe:fb:d6:03:ed:
         34:81:4d:4d:2e:26:b1:21:55:72:90:1f:53:ed:42:85:0a:7e:
         c0:18:16:10:a9:58:7b:8d:e1:16:24:e6:d5:9d:eb:47:00:21:
         30:9a:a0:ad:58:0a:f2:0f:6c:64:a6:5e:9f:ec:8e:2d:fd:5d:
         89:e3:e2:56:c1:56:e1:f0:d0:22:4c:cf:6f:c7:47:72:27:c3:
         42:96:ec:81:ae:5a:ee:80:c7:8e:b8:c4:62:bf:13:a5:ee:57:
         70:01:59:fe:d6:e9:ca:96:28:84:72:a7:85:45:69:db:72:6e:
         18:3a:1d:5b:36:61:d0:e6:1d:f9:1c:d3:8e:80:8d:c9:6f:16:
         e9:03:6f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org