Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/323830343a363533303a3a2f33332d313238203d3e20323639343734.roa
File:                     323830343a363533303a3a2f33332d313238203d3e20323639343734.roa (raw, json)
Hash identifier:          hiKy2nezMa9/fDhJOwIaWwFDPEeVLcXPwblbMBu7ElM=
Subject key identifier:   7E:D8:4D:67:62:98:28:44:E5:75:7B:80:CA:AD:95:B7:DA:E7:D0:F3
Certificate issuer:       /CN=D71859E3E9A2DDD4A6FFC8043C1A8FE3AE1E07E8
Certificate serial:       3A742EA303A18A1A3AED61960EF4956064CFCFB9
Authority key identifier: D7:18:59:E3:E9:A2:DD:D4:A6:FF:C8:04:3C:1A:8F:E3:AE:1E:07:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D71859E3E9A2DDD4A6FFC8043C1A8FE3AE1E07E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/323830343a363533303a3a2f33332d313238203d3e20323639343734.roa
Signing time:             Fri 26 Jan 2024 18:56:25 +0000
ROA not before:           Fri 26 Jan 2024 18:51:25 +0000
ROA not after:            Fri 24 Jan 2025 18:56:25 +0000
asID:                     269474
IP address blocks:        2804:6530::/33 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:74:2e:a3:03:a1:8a:1a:3a:ed:61:96:0e:f4:95:60:64:cf:cf:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D71859E3E9A2DDD4A6FFC8043C1A8FE3AE1E07E8
        Validity
            Not Before: Jan 26 18:51:25 2024 GMT
            Not After : Jan 24 18:56:25 2025 GMT
        Subject: CN=7ED84D6762982844E5757B80CAAD95B7DAE7D0F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:69:91:ba:af:82:2d:fc:fc:45:2f:5b:bc:0c:
                    39:b4:27:4c:37:c0:a5:cc:8a:83:cf:94:0a:93:e0:
                    b5:f1:1d:18:fa:59:fa:fd:42:19:54:dd:52:58:84:
                    85:95:25:bc:63:d9:ad:65:a1:28:00:79:de:b5:10:
                    1c:93:9e:43:89:4b:08:bf:0b:64:8d:10:24:b1:45:
                    c3:a3:c5:e6:eb:75:54:85:73:22:a6:47:c8:94:b5:
                    30:5e:64:73:22:38:4a:1b:15:66:e5:3b:87:97:66:
                    6a:bf:a9:e6:dc:7f:c3:19:d2:7c:4f:09:05:57:5e:
                    38:2c:3a:4c:61:ce:96:d8:62:d1:a5:eb:8a:3a:ae:
                    f4:3f:2e:94:8a:0c:65:c3:d1:f9:9a:96:e0:a3:af:
                    01:19:44:fa:4e:a9:aa:f8:6a:3a:06:bc:a0:74:f0:
                    98:18:58:8b:58:87:e8:62:e2:64:7b:e7:93:c1:21:
                    fb:63:b2:f0:d3:2b:8d:79:d0:88:6b:f6:df:69:eb:
                    ee:78:ad:a6:e2:06:0d:d1:2d:ee:49:b5:0c:0e:bb:
                    41:70:4e:e5:cd:8f:7b:0a:ab:5d:a9:ee:4a:45:d8:
                    87:9c:0d:8b:66:70:3a:8c:f6:33:46:f1:97:64:1f:
                    bc:7e:d7:86:2d:70:c8:3f:56:93:96:e0:d4:1b:fe:
                    2c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D8:4D:67:62:98:28:44:E5:75:7B:80:CA:AD:95:B7:DA:E7:D0:F3
            X509v3 Authority Key Identifier:
                keyid:D7:18:59:E3:E9:A2:DD:D4:A6:FF:C8:04:3C:1A:8F:E3:AE:1E:07:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/D71859E3E9A2DDD4A6FFC8043C1A8FE3AE1E07E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D71859E3E9A2DDD4A6FFC8043C1A8FE3AE1E07E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/323830343a363533303a3a2f33332d313238203d3e20323639343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6530::/33

    Signature Algorithm: sha256WithRSAEncryption
         c3:4a:66:d5:ba:49:3c:ee:2b:99:a0:41:d0:db:af:a7:5b:d1:
         b4:38:a7:cf:28:a1:53:9d:ca:2f:a5:3f:f7:b5:40:d3:f0:19:
         79:ea:3e:ab:c4:92:98:33:3c:de:86:9a:cd:ea:57:2e:1e:fa:
         7a:6f:b3:4f:27:dd:1b:52:26:8c:80:5d:2f:0d:7f:99:b7:34:
         49:6b:0d:15:34:86:c8:25:e9:aa:1a:ec:55:5d:57:b6:c7:93:
         10:e4:99:e5:61:7c:f5:e6:58:d0:12:2f:5c:13:cc:41:14:b4:
         47:f1:ec:1c:87:30:aa:f2:59:de:cc:4c:26:95:ef:54:54:14:
         f0:84:13:12:ea:a1:93:d4:67:8d:d6:6c:3c:2c:73:17:7d:e9:
         b8:c0:59:f1:12:8a:f3:12:8d:f9:33:f0:f0:a6:34:7b:78:2f:
         04:ff:61:e9:5c:d6:d9:59:61:d6:7f:dc:6e:08:85:6a:ac:82:
         d4:97:79:af:d5:92:90:51:d3:a7:a3:cb:48:ba:68:0f:8c:3c:
         cb:59:5b:18:46:cc:d9:47:bd:7e:aa:57:db:4d:2c:29:75:17:
         f4:75:ad:35:38:b3:d5:23:f4:b7:2a:72:ba:7e:3d:78:c3:8e:
         23:67:24:cb:14:3d:d6:db:e7:7d:1a:a5:49:05:88:77:fc:dc:
         5b:18:3d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org