Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/323830343a363736633a3a2f33322d3438203d3e20323639363237.roa
File:                     323830343a363736633a3a2f33322d3438203d3e20323639363237.roa (raw, json)
Hash identifier:          /bvxeNFOYL0hrfldp0EAOQNrTosdknC5InJeheUWuD0=
Subject key identifier:   B2:90:E7:96:75:74:1D:44:42:4E:6B:6B:A7:79:D3:BE:87:28:EB:BA
Certificate issuer:       /CN=C16B2DF662105F4A086EEC8619FD4906DC645428
Certificate serial:       0A7CAA953635EAA309E6D9CB5741FC20DB84F49A
Authority key identifier: C1:6B:2D:F6:62:10:5F:4A:08:6E:EC:86:19:FD:49:06:DC:64:54:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C16B2DF662105F4A086EEC8619FD4906DC645428.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/323830343a363736633a3a2f33322d3438203d3e20323639363237.roa
Signing time:             Wed 27 Sep 2023 14:54:58 +0000
ROA not before:           Wed 27 Sep 2023 14:49:58 +0000
ROA not after:            Wed 25 Sep 2024 14:54:58 +0000
asID:                     269627
IP address blocks:        2804:676c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:7c:aa:95:36:35:ea:a3:09:e6:d9:cb:57:41:fc:20:db:84:f4:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C16B2DF662105F4A086EEC8619FD4906DC645428
        Validity
            Not Before: Sep 27 14:49:58 2023 GMT
            Not After : Sep 25 14:54:58 2024 GMT
        Subject: CN=B290E79675741D44424E6B6BA779D3BE8728EBBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:77:9f:54:b8:cc:14:00:10:af:46:c9:0a:a3:
                    c5:1f:21:c8:9a:7c:2e:97:1d:a6:52:4c:81:94:5e:
                    15:40:7e:86:5e:1c:06:db:a3:51:19:13:d4:92:97:
                    a3:5e:44:77:b0:e8:f0:5d:46:95:56:2f:4c:36:25:
                    0d:fc:87:f7:dd:5a:b1:a1:4c:11:b8:8f:01:82:96:
                    90:df:88:c7:21:71:fa:eb:cd:b7:a5:1c:23:80:ed:
                    ec:e2:9f:8f:04:cf:69:a9:b3:ba:4f:fb:8e:a0:82:
                    31:94:73:49:3d:b8:00:0c:b5:c5:19:43:d7:66:76:
                    95:ad:bb:15:d4:25:96:24:07:f5:da:58:dd:e3:24:
                    ca:a8:38:07:7d:33:d0:0b:30:a2:e5:08:f2:c4:23:
                    e7:b3:c5:1a:b2:27:f3:16:13:83:8b:37:76:a3:4e:
                    38:61:77:4e:16:7f:03:1b:c3:f0:37:a7:d1:96:02:
                    e3:26:f0:03:01:ab:87:b4:a8:20:80:31:07:76:9c:
                    65:4d:92:07:1d:2f:fa:ab:f7:64:ea:ea:08:b6:70:
                    7f:a7:13:29:c5:4e:cd:5c:4d:96:20:18:67:84:3b:
                    44:62:75:29:70:ea:39:93:04:4c:db:14:97:0d:3c:
                    5c:c0:c2:1c:2b:26:ff:1c:22:11:05:dc:a4:27:4a:
                    26:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:90:E7:96:75:74:1D:44:42:4E:6B:6B:A7:79:D3:BE:87:28:EB:BA
            X509v3 Authority Key Identifier:
                keyid:C1:6B:2D:F6:62:10:5F:4A:08:6E:EC:86:19:FD:49:06:DC:64:54:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/C16B2DF662105F4A086EEC8619FD4906DC645428.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C16B2DF662105F4A086EEC8619FD4906DC645428.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/323830343a363736633a3a2f33322d3438203d3e20323639363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:676c::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:8f:e3:65:6e:f2:fd:52:df:bf:81:4e:25:a0:8b:a9:5e:bb:
         76:af:e7:5f:b8:1e:71:10:fa:26:d7:34:d7:0b:89:f5:89:70:
         e0:0d:6d:be:eb:e6:4c:dc:5f:11:65:03:05:8d:8f:f0:a4:e7:
         86:ae:cc:e0:0a:1b:1c:f1:75:e2:0e:06:f7:92:a7:6c:a1:d3:
         de:ac:ba:40:63:ac:4f:ba:04:c0:ce:d8:88:2e:68:41:d7:67:
         3d:f5:89:ed:a1:27:08:ec:37:cd:25:ea:09:1b:fa:c4:92:ea:
         7d:6b:32:43:6f:02:c8:b4:2a:6e:b2:cb:4d:99:3a:4d:6c:81:
         3d:4c:e9:16:2a:bd:fa:71:75:55:40:29:1a:c5:79:7b:d3:36:
         10:75:15:bf:78:b8:6d:0b:8f:69:2a:87:a8:16:cd:e3:ed:94:
         2d:fa:32:79:6c:ca:32:b1:3e:b1:d9:79:c1:2d:2c:0d:9f:87:
         ec:72:2f:d9:fd:01:e9:5b:ff:7b:f7:16:db:e3:b6:cd:e8:f1:
         43:42:23:3e:48:f2:f7:67:ab:b9:e4:f2:4f:8e:a2:a0:c1:dc:
         52:5a:0d:dd:5e:06:99:79:ef:c6:14:bd:ae:82:83:39:92:a7:
         c0:23:d4:a3:0e:df:c3:bd:3e:de:98:27:84:5a:57:4f:6f:38:
         8c:d5:fe:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org