Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4kiFrMQP6ge1FNbTSgHzQ82ok3q2SgUG3KusZws3dBES/0/323830343a346535383a3a2f33332d3333203d3e20323638323535.roa
File:                     323830343a346535383a3a2f33332d3333203d3e20323638323535.roa (raw, json)
Hash identifier:          4Fn2vOZntrBQlAf4sNuL/Jllo6FpB9XFQJp3g65tISI=
Subject key identifier:   70:30:A8:BE:72:03:ED:0D:91:49:B9:28:A9:DC:C7:0E:96:3A:D8:14
Certificate issuer:       /CN=B7EACE5FCD839D3B7EB07701983C797BF744943B
Certificate serial:       3E793A9FB8AB2566BE3F33C4CBA8229AFFAFBEE9
Authority key identifier: B7:EA:CE:5F:CD:83:9D:3B:7E:B0:77:01:98:3C:79:7B:F7:44:94:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7EACE5FCD839D3B7EB07701983C797BF744943B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4kiFrMQP6ge1FNbTSgHzQ82ok3q2SgUG3KusZws3dBES/0/323830343a346535383a3a2f33332d3333203d3e20323638323535.roa
Signing time:             Mon 03 Apr 2023 10:57:46 +0000
ROA not before:           Mon 03 Apr 2023 10:52:46 +0000
ROA not after:            Mon 01 Apr 2024 10:57:46 +0000
asID:                     268255
IP address blocks:        2804:4e58::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:79:3a:9f:b8:ab:25:66:be:3f:33:c4:cb:a8:22:9a:ff:af:be:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7EACE5FCD839D3B7EB07701983C797BF744943B
        Validity
            Not Before: Apr  3 10:52:46 2023 GMT
            Not After : Apr  1 10:57:46 2024 GMT
        Subject: CN=7030A8BE7203ED0D9149B928A9DCC70E963AD814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:89:32:49:7b:8d:75:1b:6b:35:59:33:f5:01:
                    96:fd:6b:4d:ac:08:5b:e0:5c:8a:a7:aa:81:f4:9b:
                    2f:18:e1:fd:67:3a:78:29:ae:5d:36:74:fc:25:47:
                    a3:81:c0:39:a8:97:ee:37:fd:e4:80:74:e1:08:1a:
                    ce:ee:5b:5a:6d:e6:1e:21:f4:79:6a:f5:0f:a6:d3:
                    00:cd:ed:28:4e:34:41:4b:86:36:ce:f7:6d:cf:40:
                    dc:66:3c:06:93:1b:7b:7b:4d:be:65:1c:19:b1:82:
                    cc:2d:ce:b0:ed:e5:e3:c6:38:42:6f:84:f9:80:07:
                    20:f5:6d:b1:45:83:ff:a0:ac:c0:aa:33:1f:30:37:
                    50:ce:95:38:10:54:0c:bf:06:a7:45:ea:97:db:e8:
                    15:55:09:8b:64:15:d1:b9:1a:ad:5e:2a:a8:f0:19:
                    96:8d:8c:3c:70:b2:93:7a:cd:b0:3b:d4:d1:c6:68:
                    c7:db:1d:e1:29:61:95:c6:87:26:7e:bd:e2:1d:0c:
                    0e:26:1a:ad:3f:95:b0:19:bc:1c:9f:51:48:33:01:
                    f9:72:0e:99:87:1f:a3:fc:f3:90:c9:f0:dd:9c:52:
                    ec:a4:21:41:35:28:33:46:00:44:87:40:6b:0f:19:
                    93:5a:a1:b2:5a:b3:d8:99:c8:25:6c:7e:b7:81:f8:
                    f5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:30:A8:BE:72:03:ED:0D:91:49:B9:28:A9:DC:C7:0E:96:3A:D8:14
            X509v3 Authority Key Identifier:
                keyid:B7:EA:CE:5F:CD:83:9D:3B:7E:B0:77:01:98:3C:79:7B:F7:44:94:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4kiFrMQP6ge1FNbTSgHzQ82ok3q2SgUG3KusZws3dBES/0/B7EACE5FCD839D3B7EB07701983C797BF744943B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7EACE5FCD839D3B7EB07701983C797BF744943B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4kiFrMQP6ge1FNbTSgHzQ82ok3q2SgUG3KusZws3dBES/0/323830343a346535383a3a2f33332d3333203d3e20323638323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e58::/33

    Signature Algorithm: sha256WithRSAEncryption
         38:7f:ad:11:9c:00:22:a9:e2:a5:ce:a7:6f:43:cf:fa:b0:c0:
         eb:1b:d1:ee:74:ea:63:d0:0f:1f:eb:19:5f:ac:d3:c8:ff:e3:
         28:5a:44:36:22:30:f7:25:96:c1:ec:62:3d:cf:d3:ca:5e:3c:
         bd:92:1f:b6:8b:77:f2:38:13:13:97:c7:07:9d:5a:e4:e3:88:
         3b:94:04:0f:a0:e1:f0:73:c8:f6:af:c3:44:7d:24:0d:f9:a7:
         95:04:4e:63:70:28:8b:1d:d4:82:33:7e:14:d6:0c:a3:98:06:
         59:84:4b:e6:bd:6f:ea:1d:b2:51:79:60:3e:19:b3:6c:2c:79:
         8a:e9:33:8b:68:3a:8d:ac:7f:d0:0f:18:fa:83:14:49:ec:26:
         e4:61:7d:f7:a4:97:fc:40:fd:23:4a:23:71:d7:8e:2a:e4:a2:
         fe:83:f3:1b:b4:29:96:68:b4:75:7c:7c:d8:ca:11:02:3f:26:
         87:b6:d2:f7:c6:de:ef:d3:17:db:de:6a:34:88:2b:75:19:25:
         ce:08:e2:6a:23:58:30:81:4f:73:06:20:e6:7c:a6:5a:df:d1:
         a7:ce:5c:54:56:d7:f0:83:78:32:93:39:10:14:6c:68:ae:b6:
         58:f6:86:de:75:60:5d:e6:dc:b7:a1:d6:2d:09:4a:98:0e:43:
         a6:e7:a1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org