Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/323830343a343134343a3a2f33342d3334203d3e20323637343234.roa
File:                     323830343a343134343a3a2f33342d3334203d3e20323637343234.roa (raw, json)
Hash identifier:          EA7h+MAPFM4QWWljytfhycQFpXNFGQiXOMO7da0IweU=
Subject key identifier:   C4:F7:8C:56:54:72:06:42:90:DE:91:28:09:E6:EA:6A:5C:3F:D7:7C
Certificate issuer:       /CN=A7D1E69F57807C1ED02CA45971AD14EDA3931F2E
Certificate serial:       3CA1A6EEC9836AA1DA34EF6B40FEEB03AF08F505
Authority key identifier: A7:D1:E6:9F:57:80:7C:1E:D0:2C:A4:59:71:AD:14:ED:A3:93:1F:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/323830343a343134343a3a2f33342d3334203d3e20323637343234.roa
Signing time:             Mon 25 Sep 2023 21:42:00 +0000
ROA not before:           Mon 25 Sep 2023 21:37:00 +0000
ROA not after:            Mon 23 Sep 2024 21:42:00 +0000
asID:                     267424
IP address blocks:        2804:4144::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a1:a6:ee:c9:83:6a:a1:da:34:ef:6b:40:fe:eb:03:af:08:f5:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D1E69F57807C1ED02CA45971AD14EDA3931F2E
        Validity
            Not Before: Sep 25 21:37:00 2023 GMT
            Not After : Sep 23 21:42:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0f:a8:40:cf:9b:ec:fa:fd:42:fa:f5:fb:fd:
                    99:d8:e8:42:0b:88:da:72:e5:5e:e8:88:7e:dd:22:
                    3d:bf:5b:76:fd:29:04:72:9f:99:5c:e1:1b:5e:83:
                    09:76:e1:fe:7b:dc:7b:d0:50:97:2d:60:73:45:7c:
                    5f:e5:a3:ae:89:5a:75:6d:10:e6:ae:78:10:c0:6f:
                    12:1e:da:37:f7:cd:b4:f1:67:4c:67:5a:3a:e6:e7:
                    29:bd:4d:d3:b5:39:b3:cb:4a:d5:a9:ed:89:44:36:
                    2e:9b:83:8a:0e:cd:56:53:5d:35:a0:f5:ab:1c:d9:
                    ec:ec:ef:5e:a9:63:0b:d2:89:4c:9a:49:ba:a9:22:
                    55:ed:52:aa:10:ad:cc:5d:0d:72:1a:47:0d:f4:63:
                    3c:29:2c:3e:e0:36:9d:63:df:04:cb:dc:0d:34:b6:
                    f4:be:d6:a5:b7:b1:35:77:e8:2d:89:4d:bd:b2:5d:
                    bc:6f:64:1a:c7:0c:20:d0:43:f7:f3:f2:36:9f:bc:
                    c1:43:3c:6c:ae:c7:30:1a:83:86:67:02:ce:79:6f:
                    db:a1:11:6e:4c:e9:6a:1d:26:4e:19:22:6c:7d:94:
                    05:81:da:1b:da:f5:2d:9a:8b:f2:59:e2:71:1c:94:
                    b3:69:da:19:e7:dd:eb:fd:b2:60:03:9b:97:9d:47:
                    74:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F7:8C:56:54:72:06:42:90:DE:91:28:09:E6:EA:6A:5C:3F:D7:7C
            X509v3 Authority Key Identifier:
                keyid:A7:D1:E6:9F:57:80:7C:1E:D0:2C:A4:59:71:AD:14:ED:A3:93:1F:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/323830343a343134343a3a2f33342d3334203d3e20323637343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4144::/34

    Signature Algorithm: sha256WithRSAEncryption
         18:03:4f:3d:7b:1d:1c:e3:f2:9d:ee:32:9a:10:85:ea:c8:74:
         98:ab:fc:1f:0e:99:c7:e7:94:7f:c8:dc:aa:0b:98:34:a2:ed:
         dd:56:f8:1a:e3:98:cf:47:65:be:ff:49:fb:aa:d4:a8:0e:0f:
         b3:80:2e:a8:96:da:82:4e:cd:df:2a:c6:fa:d6:bf:77:f7:9b:
         12:55:09:3e:0f:3d:66:41:c4:05:1a:f9:d2:fd:2b:4e:5a:2a:
         31:a0:de:56:70:65:16:fc:38:8e:c0:79:c0:98:94:45:40:1a:
         4e:20:5c:7d:04:23:b8:74:de:f4:36:cc:cf:17:a1:ec:33:7e:
         fc:0f:db:3a:dd:81:2c:c5:07:ba:6d:d0:74:79:d5:c0:9b:e7:
         7d:ec:fe:df:bf:b1:db:a7:c8:fe:20:6e:37:bc:1e:33:cb:1d:
         96:91:68:56:cb:34:d8:a6:69:8b:ca:3d:fa:41:9b:17:ed:97:
         74:59:ef:d6:41:60:67:8e:a6:0f:18:c3:34:12:4f:fe:84:15:
         30:b8:ba:c4:46:fc:3e:be:4b:dc:8a:11:01:54:6a:0c:35:30:
         1a:6c:bd:35:f1:51:c7:76:2d:53:e0:78:f2:5e:b2:e2:aa:b0:
         bb:45:bb:15:41:a4:cd:45:20:71:8b:b7:2c:9f:a1:84:47:16:
         5b:5b:a7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org