Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/323830343a376537383a3a2f33322d313238203d3e20323731363236.roa
File:                     323830343a376537383a3a2f33322d313238203d3e20323731363236.roa (raw, json)
Hash identifier:          q1nojoG60utUp2toXkFUEnWcRIYwF6LBDWY2Fm44VbU=
Subject key identifier:   0F:D7:CA:94:FE:04:92:DB:50:C9:ED:34:24:F2:82:01:BC:B9:23:F9
Certificate issuer:       /CN=AD5387D9495868D8BE3A9449C0A4182442615CAA
Certificate serial:       1930F00FEC1D8C4BC0D17C024511292C68D0FD77
Authority key identifier: AD:53:87:D9:49:58:68:D8:BE:3A:94:49:C0:A4:18:24:42:61:5C:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD5387D9495868D8BE3A9449C0A4182442615CAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/323830343a376537383a3a2f33322d313238203d3e20323731363236.roa
Signing time:             Thu 22 Feb 2024 16:28:23 +0000
ROA not before:           Thu 22 Feb 2024 16:23:23 +0000
ROA not after:            Thu 20 Feb 2025 16:28:23 +0000
asID:                     271626
IP address blocks:        2804:7e78::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:30:f0:0f:ec:1d:8c:4b:c0:d1:7c:02:45:11:29:2c:68:d0:fd:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD5387D9495868D8BE3A9449C0A4182442615CAA
        Validity
            Not Before: Feb 22 16:23:23 2024 GMT
            Not After : Feb 20 16:28:23 2025 GMT
        Subject: CN=0FD7CA94FE0492DB50C9ED3424F28201BCB923F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f9:9b:17:2b:95:0a:bd:73:19:fb:97:c6:35:
                    da:d9:ea:72:63:af:96:49:55:0e:db:82:10:da:6a:
                    db:47:db:1a:32:95:f7:aa:40:f2:39:8a:0b:c2:6a:
                    5b:4d:4b:1d:ba:0c:3c:32:0d:8b:eb:5f:72:aa:e0:
                    c5:41:d3:48:b0:6a:26:d4:de:ab:90:9c:dd:14:13:
                    b3:f0:54:a0:1f:61:91:fb:f0:74:e2:59:da:7d:2d:
                    de:4d:26:c4:89:9b:54:6e:f8:4a:0e:8b:c4:60:12:
                    a3:a6:c6:b8:58:cc:14:3c:63:59:9b:e9:2c:26:c4:
                    30:80:ee:7b:c7:28:bf:8d:47:89:c2:1c:18:5c:e9:
                    6f:14:a7:e7:54:c7:d2:db:b5:a1:71:4e:e6:aa:c8:
                    35:c0:1f:7b:e7:d2:7a:5e:37:7d:07:12:4f:45:50:
                    b2:9e:82:ba:dd:76:59:42:f3:73:f6:49:ac:a5:91:
                    11:88:d2:f4:1c:30:7a:e9:71:c4:be:3f:25:1f:ca:
                    1e:ea:5a:e2:c6:1d:d3:0e:b6:bc:30:18:6d:1c:33:
                    47:79:c0:2d:e3:20:55:ee:e7:14:35:9e:00:28:1e:
                    ab:cf:14:7e:d9:ce:78:9d:8a:51:de:4d:cc:cf:f0:
                    f5:84:44:ca:97:7e:e8:48:25:96:39:4c:6a:45:88:
                    b3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D7:CA:94:FE:04:92:DB:50:C9:ED:34:24:F2:82:01:BC:B9:23:F9
            X509v3 Authority Key Identifier:
                keyid:AD:53:87:D9:49:58:68:D8:BE:3A:94:49:C0:A4:18:24:42:61:5C:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/AD5387D9495868D8BE3A9449C0A4182442615CAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD5387D9495868D8BE3A9449C0A4182442615CAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/323830343a376537383a3a2f33322d313238203d3e20323731363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e78::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:d5:f2:88:a1:09:2f:08:74:65:c4:ef:98:fd:61:0d:62:a6:
         d6:cd:d5:f4:7b:ef:00:41:88:88:41:81:64:6d:53:88:b4:0a:
         b9:65:1a:a5:40:03:5c:05:e2:27:f9:d1:fb:32:10:c1:5f:36:
         be:a4:d6:a0:42:24:77:f7:ec:cc:26:93:81:ed:d6:61:cb:ee:
         41:1c:c7:8b:db:1c:6b:12:76:6a:7c:f6:01:ec:1e:71:58:bd:
         45:5b:92:20:d0:6e:90:9d:6f:45:e5:f1:4c:85:ce:d4:a8:ce:
         37:60:47:e0:26:41:bf:4c:2b:3e:56:d9:b7:9f:06:0f:37:4d:
         43:50:b1:22:6b:e7:5c:cd:7e:07:f4:23:68:88:d7:ae:d4:1a:
         e3:31:e7:fd:92:03:9a:8b:26:30:29:4d:28:d3:db:20:23:89:
         0b:d8:bf:18:d6:4d:35:5a:98:98:fa:ff:34:d0:8b:56:be:54:
         de:43:13:42:57:ab:7a:40:18:1f:5e:ec:f0:f1:88:88:22:c1:
         57:2f:13:a7:45:2d:90:1d:42:7e:f9:0d:a0:5b:cf:8a:7a:57:
         d8:51:8e:2d:0a:25:17:f0:3b:c7:1e:80:66:2c:1d:64:0e:a2:
         50:e9:85:78:fd:89:79:72:17:31:30:a8:9d:e5:bb:1d:f0:d5:
         70:f2:31:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org