Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/323830343a343134343a383030303a3a2f33342d3334203d3e20323637343234.roa
File:                     323830343a343134343a383030303a3a2f33342d3334203d3e20323637343234.roa (raw, json)
Hash identifier:          K+RDQspduGAjnJqxhLuHP6xqKPYHd5CcIDT0tmxb/ek=
Subject key identifier:   D2:67:88:31:86:51:42:07:43:F6:6A:81:50:6C:A6:72:79:CC:2C:CE
Certificate issuer:       /CN=A7D1E69F57807C1ED02CA45971AD14EDA3931F2E
Certificate serial:       3EB91C5136B4D7B1BB57204AE0FF086411F00A40
Authority key identifier: A7:D1:E6:9F:57:80:7C:1E:D0:2C:A4:59:71:AD:14:ED:A3:93:1F:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/323830343a343134343a383030303a3a2f33342d3334203d3e20323637343234.roa
Signing time:             Mon 25 Sep 2023 21:42:00 +0000
ROA not before:           Mon 25 Sep 2023 21:37:00 +0000
ROA not after:            Mon 23 Sep 2024 21:42:00 +0000
asID:                     267424
IP address blocks:        2804:4144:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b9:1c:51:36:b4:d7:b1:bb:57:20:4a:e0:ff:08:64:11:f0:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D1E69F57807C1ED02CA45971AD14EDA3931F2E
        Validity
            Not Before: Sep 25 21:37:00 2023 GMT
            Not After : Sep 23 21:42:00 2024 GMT
        Subject: CN=3082010A028201010096A2F45FD3A527CEE804AD36EC6E42F3738F064A6CD650ACF17300413095C3F83878B93930F427FC05D07C5900B33E06572935024C8556D9446A84DC987739972BABB3F9059B099A9562538BA4A6023F07BA62579833453CE0B34BFDB6F7D17F7823969BB04AD00E6E3E3B64C06503B913734CB6FAF39D93ACD403E29E982EF6BCB0D7C82E4AE06DD7749506A2E78222CFED5A5CAEE49402DD1614B717906BB81B910438C2632080BCCC32611AAB03BE9AC66FA4E2E54330C1BCF422C6CBB45C14B4E9CCB2416287B45801C850F65932C6AD4C855FE57B4A9512295990E8753E9546C0013F31C5F72EEC669FBB3CE0F0921DBBBDAB533680FC95C2AAA20BD16F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a2:f4:5f:d3:a5:27:ce:e8:04:ad:36:ec:6e:
                    42:f3:73:8f:06:4a:6c:d6:50:ac:f1:73:00:41:30:
                    95:c3:f8:38:78:b9:39:30:f4:27:fc:05:d0:7c:59:
                    00:b3:3e:06:57:29:35:02:4c:85:56:d9:44:6a:84:
                    dc:98:77:39:97:2b:ab:b3:f9:05:9b:09:9a:95:62:
                    53:8b:a4:a6:02:3f:07:ba:62:57:98:33:45:3c:e0:
                    b3:4b:fd:b6:f7:d1:7f:78:23:96:9b:b0:4a:d0:0e:
                    6e:3e:3b:64:c0:65:03:b9:13:73:4c:b6:fa:f3:9d:
                    93:ac:d4:03:e2:9e:98:2e:f6:bc:b0:d7:c8:2e:4a:
                    e0:6d:d7:74:95:06:a2:e7:82:22:cf:ed:5a:5c:ae:
                    e4:94:02:dd:16:14:b7:17:90:6b:b8:1b:91:04:38:
                    c2:63:20:80:bc:cc:32:61:1a:ab:03:be:9a:c6:6f:
                    a4:e2:e5:43:30:c1:bc:f4:22:c6:cb:b4:5c:14:b4:
                    e9:cc:b2:41:62:87:b4:58:01:c8:50:f6:59:32:c6:
                    ad:4c:85:5f:e5:7b:4a:95:12:29:59:90:e8:75:3e:
                    95:46:c0:01:3f:31:c5:f7:2e:ec:66:9f:bb:3c:e0:
                    f0:92:1d:bb:bd:ab:53:36:80:fc:95:c2:aa:a2:0b:
                    d1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:67:88:31:86:51:42:07:43:F6:6A:81:50:6C:A6:72:79:CC:2C:CE
            X509v3 Authority Key Identifier:
                keyid:A7:D1:E6:9F:57:80:7C:1E:D0:2C:A4:59:71:AD:14:ED:A3:93:1F:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/323830343a343134343a383030303a3a2f33342d3334203d3e20323637343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4144:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         d0:06:82:96:82:7e:58:75:d9:d1:c7:15:78:5a:28:9c:40:f1:
         79:f1:6e:18:c9:ec:61:3c:34:cc:bc:82:54:3d:32:88:b3:1f:
         a9:03:bc:8d:21:75:09:40:5d:d5:f6:c8:71:b9:75:cc:90:8b:
         55:d0:b0:f5:f7:cb:be:3d:2b:6e:9e:b7:bf:bc:0c:52:1c:8f:
         78:77:5a:b7:cb:21:7e:8a:85:83:4c:2b:ea:da:9f:2b:da:bb:
         35:c4:c5:06:ff:6c:8f:0b:ed:d2:e5:e9:65:a6:ea:79:a9:2c:
         19:79:2c:13:58:96:49:0d:de:48:cc:d6:28:05:c1:9e:fe:b2:
         1d:02:bb:fb:0a:75:af:b0:65:9f:b3:91:bf:a3:92:7d:4d:78:
         36:10:b5:6e:b5:44:2f:88:c9:1f:75:a1:93:d5:97:7c:2e:a0:
         25:be:ac:d9:1c:34:64:7b:b1:14:01:93:64:12:ca:61:96:84:
         0a:50:fb:4d:95:5a:00:9d:ba:9b:50:c2:38:ee:90:d1:20:4b:
         67:2e:ee:f9:37:9b:ca:4b:6f:d7:eb:f3:f3:aa:8b:82:6d:f6:
         12:6b:74:e9:b2:12:06:f6:6a:90:cb:e6:ce:d5:e3:88:a6:70:
         5c:2e:1d:6d:09:eb:39:88:2b:f2:5e:ed:0e:a0:0f:28:03:93:
         7d:ad:d6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org