Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/0/323830343a376531383a3a2f33322d3332203d3e20323731363032.roa
File:                     323830343a376531383a3a2f33322d3332203d3e20323731363032.roa (raw, json)
Hash identifier:          E8g5Bw/Y2NWOubDV5qC9ZdRBgOJI9Oi58ocbJNaLgmE=
Subject key identifier:   8F:6E:BC:5F:FF:D1:7B:12:FC:65:CC:68:05:58:0D:0F:57:D9:B9:72
Certificate issuer:       /CN=CE7A3178DB016E104AF14BE894CD002DB3ED52A5
Certificate serial:       4436D4A38E79691ADFAB0131E913F9DC79A0EC1F
Authority key identifier: CE:7A:31:78:DB:01:6E:10:4A:F1:4B:E8:94:CD:00:2D:B3:ED:52:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE7A3178DB016E104AF14BE894CD002DB3ED52A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/0/323830343a376531383a3a2f33322d3332203d3e20323731363032.roa
Signing time:             Thu 31 Aug 2023 15:18:46 +0000
ROA not before:           Thu 31 Aug 2023 15:13:46 +0000
ROA not after:            Thu 29 Aug 2024 15:18:46 +0000
asID:                     271602
IP address blocks:        2804:7e18::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:36:d4:a3:8e:79:69:1a:df:ab:01:31:e9:13:f9:dc:79:a0:ec:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE7A3178DB016E104AF14BE894CD002DB3ED52A5
        Validity
            Not Before: Aug 31 15:13:46 2023 GMT
            Not After : Aug 29 15:18:46 2024 GMT
        Subject: CN=8F6EBC5FFFD17B12FC65CC6805580D0F57D9B972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f2:da:5c:e2:01:f2:50:39:91:9b:fe:0c:36:
                    94:30:5c:9a:9b:26:b8:dd:19:f7:43:e7:a0:33:91:
                    93:22:3c:68:6f:aa:b8:cd:55:2a:b7:71:e1:81:23:
                    02:4c:34:32:6e:9d:11:36:06:4f:15:13:5b:ad:c7:
                    1d:5a:6a:fc:07:62:46:1e:80:22:11:59:47:03:8c:
                    83:60:b8:61:df:f1:8b:16:e5:89:5d:a7:cf:59:b4:
                    b3:38:bf:7f:f1:51:cf:d2:d9:46:b1:27:33:ee:ad:
                    b0:41:82:3d:db:3c:c5:af:c8:a3:6e:ac:e4:96:09:
                    da:40:4d:b0:7b:2a:69:8e:fb:b0:92:40:91:52:74:
                    bb:36:e0:42:e6:77:5e:a6:54:1b:77:24:20:b5:0c:
                    b3:51:b4:a6:68:82:1a:be:f4:e4:17:4e:37:30:95:
                    bc:93:e5:f5:c2:e9:94:7a:fe:92:b2:b6:a1:41:81:
                    a6:20:f4:dd:1a:4f:de:7f:15:86:0d:f3:69:c3:f0:
                    91:66:b3:30:1d:32:10:96:84:29:44:7d:28:6f:a2:
                    0f:50:9c:5f:9d:81:16:90:16:4e:0c:65:5f:39:52:
                    cc:85:3c:60:13:02:9a:8a:c9:f3:56:6f:93:ef:ca:
                    f7:60:6c:24:44:84:df:2c:04:44:7a:74:ad:f2:61:
                    31:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6E:BC:5F:FF:D1:7B:12:FC:65:CC:68:05:58:0D:0F:57:D9:B9:72
            X509v3 Authority Key Identifier:
                keyid:CE:7A:31:78:DB:01:6E:10:4A:F1:4B:E8:94:CD:00:2D:B3:ED:52:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/0/CE7A3178DB016E104AF14BE894CD002DB3ED52A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE7A3178DB016E104AF14BE894CD002DB3ED52A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/0/323830343a376531383a3a2f33322d3332203d3e20323731363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e18::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:76:67:c0:4d:06:ac:6e:9f:78:96:b3:f4:78:86:89:41:80:
         18:8e:22:c7:d9:39:e8:f0:08:49:c7:fb:21:93:8e:c1:c3:07:
         54:df:d9:86:fa:90:eb:9c:81:c8:7f:e4:28:2e:b4:97:31:12:
         03:d2:37:02:7c:5e:fa:29:85:02:80:77:0e:c1:74:5d:00:29:
         14:c2:0e:03:79:71:c5:46:2f:99:6e:ec:0c:21:46:3e:58:dd:
         ad:d9:61:35:7b:68:80:c6:f7:1a:0d:de:44:78:1c:f7:db:ed:
         f7:ef:67:6a:d5:99:90:86:ad:20:50:56:dd:2d:c3:2c:06:d2:
         f6:35:c0:5f:0e:bf:d1:ba:3c:da:71:4e:47:8c:7a:68:4f:ac:
         11:46:a1:d6:2b:06:1f:3d:ea:51:d9:d2:a4:09:ac:ad:b6:93:
         cc:b1:68:27:4e:79:53:44:52:e0:5f:f8:1f:80:f1:0b:ca:c1:
         44:e8:54:70:ca:b4:a3:6c:e8:f7:9d:07:61:f8:e8:af:1e:3a:
         04:70:40:75:b9:5c:d8:ec:5f:2d:0d:73:f5:97:c5:48:26:96:
         35:87:b3:90:81:fd:4e:4d:56:c9:b4:ad:36:70:e4:af:2a:3b:
         c6:69:c8:e0:45:3a:88:5d:1e:08:f5:2b:0f:1e:95:3e:23:20:
         eb:fa:0f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org