Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/1/323830343a373937303a3a2f33322d3438203d3e20323731333035.roa
File:                     323830343a373937303a3a2f33322d3438203d3e20323731333035.roa (raw, json)
Hash identifier:          H1r7ZV2Kt3sdALkSDJBxeRqQWIRS1aNCf0AoGEbh9gE=
Subject key identifier:   8C:A8:C4:AF:E0:60:88:9B:F9:AD:0D:F6:39:39:FD:01:FA:6B:49:30
Certificate issuer:       /CN=531E45221C7D5F16652A745C08A7911AEF763553
Certificate serial:       10CA308E7F6A17200FE00BF5BF9BBAA2947BBD7D
Authority key identifier: 53:1E:45:22:1C:7D:5F:16:65:2A:74:5C:08:A7:91:1A:EF:76:35:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/531E45221C7D5F16652A745C08A7911AEF763553.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/1/323830343a373937303a3a2f33322d3438203d3e20323731333035.roa
Signing time:             Wed 03 Apr 2024 20:19:39 +0000
ROA not before:           Wed 03 Apr 2024 20:14:39 +0000
ROA not after:            Wed 02 Apr 2025 20:19:39 +0000
asID:                     271305
IP address blocks:        2804:7970::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ca:30:8e:7f:6a:17:20:0f:e0:0b:f5:bf:9b:ba:a2:94:7b:bd:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=531E45221C7D5F16652A745C08A7911AEF763553
        Validity
            Not Before: Apr  3 20:14:39 2024 GMT
            Not After : Apr  2 20:19:39 2025 GMT
        Subject: CN=8CA8C4AFE060889BF9AD0DF63939FD01FA6B4930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:93:c9:21:31:79:6a:b0:c5:7f:51:30:bb:20:
                    8a:6a:ff:43:4f:c8:57:af:e2:01:49:35:95:25:a2:
                    eb:b2:00:55:95:22:33:96:16:a2:6b:39:c8:bf:58:
                    20:6d:5b:a8:71:d8:b2:2a:a6:4a:74:89:f3:af:1f:
                    7e:98:a1:10:20:b4:7d:29:02:5e:a0:25:01:de:67:
                    a3:4b:e9:81:3e:05:df:0b:3a:b8:03:2d:bc:50:08:
                    ef:3a:58:c7:f6:39:18:1b:83:3d:4f:0a:9e:e5:c5:
                    d0:76:a7:40:61:03:ee:d0:38:1a:2d:d4:5d:65:9a:
                    be:c7:02:33:04:20:65:f3:c4:a1:fc:d2:e4:62:28:
                    45:3a:d6:c2:4e:db:6d:57:aa:ba:e9:58:e6:a8:67:
                    23:1c:ef:13:cf:ee:36:50:c0:06:fc:b3:4b:88:a2:
                    52:05:11:5d:b3:6d:4b:8f:ca:a1:06:6d:55:e4:52:
                    ac:cd:99:ab:3c:8f:21:91:e7:a1:cc:7d:9c:e0:67:
                    eb:e5:5c:68:ca:3d:e9:da:6a:7f:2e:c7:7e:fb:11:
                    fa:70:4f:99:f4:a9:63:11:f5:e3:08:ab:79:1f:ed:
                    31:cd:6b:6c:c8:8a:a3:e5:fd:4d:8f:a7:03:62:dd:
                    ce:c8:20:a9:19:06:59:fd:6a:e1:3f:2a:91:89:a8:
                    4d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A8:C4:AF:E0:60:88:9B:F9:AD:0D:F6:39:39:FD:01:FA:6B:49:30
            X509v3 Authority Key Identifier:
                keyid:53:1E:45:22:1C:7D:5F:16:65:2A:74:5C:08:A7:91:1A:EF:76:35:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/1/531E45221C7D5F16652A745C08A7911AEF763553.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/531E45221C7D5F16652A745C08A7911AEF763553.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/1/323830343a373937303a3a2f33322d3438203d3e20323731333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7970::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:e9:f8:4b:28:7c:fa:47:24:c4:d8:b1:72:ec:22:d6:2a:36:
         0c:7d:82:b0:30:f3:a0:e3:14:fa:53:cd:4f:1f:31:06:8a:dc:
         b4:b8:0b:32:99:b8:b5:1e:da:bd:c3:51:32:f1:ca:18:b2:ff:
         09:8a:55:ed:64:12:ca:e7:7b:c7:90:7f:34:00:1a:db:88:74:
         4f:2c:f4:66:87:41:e6:4c:59:40:f5:39:af:bc:75:ee:36:fc:
         f1:c9:13:0f:df:cc:08:4d:0b:1f:fc:67:45:55:d8:9e:3f:3d:
         1a:ea:84:5e:99:8b:b1:68:35:37:49:24:e0:e5:d9:e7:14:99:
         98:71:3a:4f:aa:ce:09:ae:48:37:68:23:f1:72:c4:c6:db:35:
         15:10:1e:02:90:bd:57:82:d1:07:ed:c7:99:f7:06:bd:5a:57:
         91:b6:6b:67:88:2d:c3:be:e2:3a:7c:d0:c5:aa:f4:25:87:5e:
         a7:b0:51:99:de:4a:f1:e1:2b:e1:a5:7b:31:b7:44:c3:8d:b0:
         0e:1f:46:80:f1:7d:dc:90:a7:67:16:c4:7f:c3:fa:b2:87:04:
         87:23:be:ab:ee:99:db:85:6d:30:62:70:e0:02:b7:37:f9:9d:
         55:fb:71:0a:45:f5:9f:9c:00:43:a3:8b:fe:e1:33:b7:eb:e2:
         80:c7:6a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org