Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/323830343a323234633a3a2f33322d3336203d3e20323632373639.roa
File:                     323830343a323234633a3a2f33322d3336203d3e20323632373639.roa (raw, json)
Hash identifier:          eTMvC2CNYwP/jwTd829AkRJ7bvJvQ5WkUeByGm+8MbA=
Subject key identifier:   5D:BB:3D:C1:50:E7:83:6B:AE:0F:B8:B2:07:43:43:53:40:28:C4:61
Certificate issuer:       /CN=DF7922C57713C139D39AA8AB612A3FF91871CE6F
Certificate serial:       3C57B8C74737DFE7BA81014C68EFCED10C1CAABA
Authority key identifier: DF:79:22:C5:77:13:C1:39:D3:9A:A8:AB:61:2A:3F:F9:18:71:CE:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF7922C57713C139D39AA8AB612A3FF91871CE6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/323830343a323234633a3a2f33322d3336203d3e20323632373639.roa
Signing time:             Mon 21 Nov 2022 12:49:07 +0000
ROA not before:           Mon 21 Nov 2022 12:44:07 +0000
ROA not after:            Mon 20 Nov 2023 12:49:07 +0000
asID:                     262769
IP address blocks:        2804:224c::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:57:b8:c7:47:37:df:e7:ba:81:01:4c:68:ef:ce:d1:0c:1c:aa:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF7922C57713C139D39AA8AB612A3FF91871CE6F
        Validity
            Not Before: Nov 21 12:44:07 2022 GMT
            Not After : Nov 20 12:49:07 2023 GMT
        Subject: CN=5DBB3DC150E7836BAE0FB8B2074343534028C461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:74:1e:3c:ec:af:a6:1e:08:52:93:b5:5a:5c:
                    c0:0d:ff:94:fd:3b:98:9e:55:6c:bf:a0:f9:fb:b4:
                    14:2a:3f:7e:27:6b:d0:9e:fb:76:a9:c9:9c:92:fc:
                    20:f6:45:ad:02:d8:1b:2c:45:bc:7d:f5:45:d0:a1:
                    72:96:50:f2:be:5e:de:39:8a:75:1c:13:66:4d:fe:
                    84:3f:64:08:8c:41:6d:4b:51:6c:40:c9:26:e0:b6:
                    2d:33:24:99:a5:bc:9d:07:35:0b:88:f3:b6:23:dd:
                    ed:cb:ef:0b:4b:1d:81:28:a6:f9:fa:a8:bb:1e:45:
                    02:ac:69:53:93:c9:dd:59:2c:11:eb:d4:e3:81:73:
                    1e:8f:db:fb:a5:29:db:68:4d:c2:00:d8:f0:04:44:
                    c9:fe:69:0c:1b:02:ae:aa:fa:c6:9a:63:6c:c6:b8:
                    43:02:ba:a7:4b:ec:74:d4:4d:16:f1:83:37:ae:db:
                    46:fe:26:0b:da:a2:d3:c5:cc:50:5d:0c:22:32:c5:
                    36:11:65:0e:f1:70:ce:f1:10:41:7d:1d:b7:55:18:
                    2e:0e:08:dd:f2:10:fa:04:73:db:1a:d0:a7:a6:05:
                    b6:a3:da:1a:9e:7b:25:29:63:1a:c5:c7:f6:33:aa:
                    0e:51:81:1d:41:f0:03:b2:e0:88:47:01:88:c4:9f:
                    35:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BB:3D:C1:50:E7:83:6B:AE:0F:B8:B2:07:43:43:53:40:28:C4:61
            X509v3 Authority Key Identifier:
                keyid:DF:79:22:C5:77:13:C1:39:D3:9A:A8:AB:61:2A:3F:F9:18:71:CE:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/DF7922C57713C139D39AA8AB612A3FF91871CE6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF7922C57713C139D39AA8AB612A3FF91871CE6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/323830343a323234633a3a2f33322d3336203d3e20323632373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:224c::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:06:79:64:38:71:40:61:dc:2e:68:ae:a7:7a:82:c1:5b:41:
         b5:18:9c:4f:40:e3:c4:aa:ff:71:0f:64:5f:f3:bc:fd:1c:71:
         2b:ad:3d:cc:d9:a7:0f:ec:2d:95:55:ad:cf:49:d2:b6:91:b4:
         46:8c:1b:c3:7b:67:9d:81:fa:07:f6:ed:e8:4f:5b:bb:a3:28:
         1c:08:4f:88:03:75:fa:36:14:65:ba:2f:78:8d:e9:7c:b1:8d:
         44:42:f7:00:dd:d7:72:2e:94:64:00:61:e3:42:5f:6a:bb:c5:
         26:2d:7e:f6:31:34:76:ad:bf:6a:0d:d1:f0:69:07:9b:ac:71:
         e7:31:cb:a9:fd:d3:36:8e:db:fc:c7:77:8f:99:04:e8:4a:e3:
         da:dc:72:26:8c:25:57:71:01:a7:f1:f2:28:be:20:e8:15:1b:
         69:7a:ac:e4:44:ae:81:dd:5c:f2:12:44:10:7b:f2:52:c1:74:
         52:0f:1e:0c:8c:ea:88:ff:83:49:ad:38:31:2d:25:23:c7:b2:
         7e:2b:60:3b:f4:0b:08:7a:97:45:24:29:fe:7d:03:70:ee:a7:
         8b:15:f3:6e:ea:9d:73:dd:eb:89:02:db:ae:42:ac:7f:27:53:
         54:fc:f3:be:6f:f8:d8:ff:cb:d2:1d:e6:95:19:f5:89:9a:04:
         5e:36:36:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org