Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/323830343a376133633a3a2f33322d313238203d3e20323731333537.roa
File:                     323830343a376133633a3a2f33322d313238203d3e20323731333537.roa (raw, json)
Hash identifier:          bI3BGW1sdkWftvmqn+4y3XD5Mb72YhGq9PsIKc0DXYw=
Subject key identifier:   30:EF:A4:04:47:E5:C5:CA:73:13:BD:2E:A5:9D:1F:BD:37:64:D6:79
Certificate issuer:       /CN=861431B4FBAA21381E37B3A294DF68C5F828ED6F
Certificate serial:       70053C2EDBA62A8E6C4E6E2F61F4A3AAB17F54D5
Authority key identifier: 86:14:31:B4:FB:AA:21:38:1E:37:B3:A2:94:DF:68:C5:F8:28:ED:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/861431B4FBAA21381E37B3A294DF68C5F828ED6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/323830343a376133633a3a2f33322d313238203d3e20323731333537.roa
Signing time:             Thu 08 Feb 2024 18:02:23 +0000
ROA not before:           Thu 08 Feb 2024 17:57:23 +0000
ROA not after:            Thu 06 Feb 2025 18:02:23 +0000
asID:                     271357
IP address blocks:        2804:7a3c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:05:3c:2e:db:a6:2a:8e:6c:4e:6e:2f:61:f4:a3:aa:b1:7f:54:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=861431B4FBAA21381E37B3A294DF68C5F828ED6F
        Validity
            Not Before: Feb  8 17:57:23 2024 GMT
            Not After : Feb  6 18:02:23 2025 GMT
        Subject: CN=30EFA40447E5C5CA7313BD2EA59D1FBD3764D679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:61:ce:83:90:b7:09:00:5a:34:97:64:bb:ac:
                    81:bb:29:8b:de:3d:12:c1:9e:98:85:43:fc:c4:be:
                    04:18:9e:d3:28:97:d8:30:59:33:64:ca:d8:69:56:
                    01:3b:e9:c7:8b:c3:6a:c1:ea:2b:f5:0d:27:63:5b:
                    e5:00:76:f5:be:5d:18:af:8e:68:e7:d2:40:a8:bf:
                    55:3b:85:3b:7c:da:c5:bd:98:ce:36:72:95:c0:69:
                    3b:64:5d:86:31:d1:2c:45:1a:ab:50:c0:4b:17:c1:
                    04:0a:f7:c0:b7:5d:2f:51:ef:b0:3e:1d:e7:34:f3:
                    e1:46:93:7b:e7:a2:89:56:01:b1:82:86:96:ea:f2:
                    10:a8:9e:b4:da:f4:20:1d:19:4a:f2:70:ad:d1:a0:
                    2e:24:e8:a2:c8:bd:17:b2:5e:c9:f4:2a:1e:58:94:
                    14:e1:b0:5c:77:00:18:b6:b4:f7:57:cc:dc:45:2b:
                    e4:85:be:62:c1:ff:a8:66:0e:d4:3a:59:24:a3:b1:
                    36:e0:3d:65:14:88:c9:1a:c7:5a:e2:aa:da:bf:10:
                    c2:e4:6f:57:bf:15:00:d8:d7:e9:10:f1:c0:9e:4d:
                    9f:d2:71:5c:1a:85:2d:e1:fe:6e:e0:15:fa:05:ac:
                    7c:2d:cb:37:e8:a3:ed:e0:78:d8:b3:33:7f:c8:e0:
                    85:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EF:A4:04:47:E5:C5:CA:73:13:BD:2E:A5:9D:1F:BD:37:64:D6:79
            X509v3 Authority Key Identifier:
                keyid:86:14:31:B4:FB:AA:21:38:1E:37:B3:A2:94:DF:68:C5:F8:28:ED:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/861431B4FBAA21381E37B3A294DF68C5F828ED6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/861431B4FBAA21381E37B3A294DF68C5F828ED6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/323830343a376133633a3a2f33322d313238203d3e20323731333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:fa:fa:66:e2:88:9a:e2:90:96:da:13:6b:ef:13:f8:44:b7:
         28:06:7a:74:94:e5:3c:f0:5a:de:1f:4f:a7:d3:88:a7:06:fd:
         6a:0d:d8:e7:ee:f0:ad:ae:5d:0d:c9:5e:09:d2:d7:27:fc:44:
         9d:52:90:b1:e2:d8:1e:22:38:6a:18:a4:92:bc:d6:3f:e9:6c:
         58:f5:83:a7:1e:52:14:4e:13:fa:79:43:eb:01:44:d0:73:73:
         0c:22:f0:24:a8:8b:97:19:a9:ed:c4:a2:46:be:56:52:6b:91:
         02:89:bc:18:fa:e0:52:b0:e6:ab:4f:0f:9c:70:81:11:90:39:
         09:30:fe:fb:6a:17:29:2e:70:0d:33:2a:66:6d:a9:32:e7:9c:
         9c:41:0b:f8:2f:64:60:67:39:17:f8:a8:dc:c7:9d:43:96:34:
         69:17:3c:de:ef:d3:00:cc:46:fa:0f:63:c2:76:fa:70:28:0a:
         36:d8:86:e0:f5:bf:64:93:05:83:56:05:df:71:5e:32:0e:23:
         27:81:c7:a1:83:16:a9:39:c8:fd:43:9b:94:f8:42:4c:c0:33:
         03:0a:a3:d6:dc:66:c7:a2:45:90:0a:10:be:1d:5b:23:74:4e:
         fa:c5:3b:41:18:1f:32:6e:26:6c:c9:7e:82:98:2e:24:17:c8:
         43:1f:79:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org