Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/323830343a3332383a3a2f33332d3333203d3e20323632383638.roa
File:                     323830343a3332383a3a2f33332d3333203d3e20323632383638.roa (raw, json)
Hash identifier:          6UnNeJ8C3p2ZBjnyUxXUx2ao/wOi0sPb/glC6St8jeo=
Subject key identifier:   02:3B:15:7F:21:62:BD:94:83:31:1C:C0:B5:41:69:8F:1F:E4:10:B8
Certificate issuer:       /CN=0743743A0AB828DD321DB1C96B6AB55916A8859A
Certificate serial:       3B401D7CCCADF05CF1EF538C1CEC11983003BEE6
Authority key identifier: 07:43:74:3A:0A:B8:28:DD:32:1D:B1:C9:6B:6A:B5:59:16:A8:85:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/323830343a3332383a3a2f33332d3333203d3e20323632383638.roa
Signing time:             Sat 22 Jul 2023 21:39:13 +0000
ROA not before:           Sat 22 Jul 2023 21:34:13 +0000
ROA not after:            Sat 20 Jul 2024 21:39:13 +0000
asID:                     262868
IP address blocks:        2804:328::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:40:1d:7c:cc:ad:f0:5c:f1:ef:53:8c:1c:ec:11:98:30:03:be:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0743743A0AB828DD321DB1C96B6AB55916A8859A
        Validity
            Not Before: Jul 22 21:34:13 2023 GMT
            Not After : Jul 20 21:39:13 2024 GMT
        Subject: CN=023B157F2162BD9483311CC0B541698F1FE410B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:aa:89:03:36:b9:5d:51:48:e3:de:3e:0f:8d:
                    b2:ce:05:3b:80:8a:62:2c:b5:1b:70:0e:0d:0c:29:
                    d3:95:97:d4:60:a5:4c:0f:93:0c:42:d6:d7:19:4a:
                    00:2b:0f:96:b6:4c:db:85:30:12:af:38:19:4f:b6:
                    98:e4:6f:8c:6e:5f:60:c2:63:a0:23:fd:10:fd:bc:
                    53:ea:3f:02:3b:c1:b1:e0:8f:95:c0:47:02:cb:aa:
                    f5:96:cb:59:3e:fb:8d:eb:7c:24:e6:4c:71:17:3e:
                    74:f5:a9:cc:f0:74:a0:67:d2:32:b1:6b:f5:9e:90:
                    35:23:11:e5:07:ee:b6:ce:6c:57:7c:2f:ea:81:9a:
                    71:1b:2c:58:62:d3:b7:41:3b:c7:1d:19:21:51:39:
                    d1:ce:2d:83:c6:d2:50:99:5e:0c:93:e7:ad:78:6e:
                    3c:5d:48:1f:8c:cc:af:36:72:1f:61:36:7a:40:15:
                    5f:68:c7:2b:13:1b:71:af:72:59:74:45:fa:a4:51:
                    07:f1:c9:49:31:d0:4c:55:32:f3:86:a4:00:be:e9:
                    98:77:5f:c0:9f:fb:6f:0f:dd:35:2f:e7:01:f4:8c:
                    ce:a6:ab:9d:63:02:cd:0d:c4:0a:e5:9a:52:85:92:
                    10:bf:82:e3:5b:e2:d3:5e:77:f8:61:2c:b9:22:59:
                    0e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3B:15:7F:21:62:BD:94:83:31:1C:C0:B5:41:69:8F:1F:E4:10:B8
            X509v3 Authority Key Identifier:
                keyid:07:43:74:3A:0A:B8:28:DD:32:1D:B1:C9:6B:6A:B5:59:16:A8:85:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/323830343a3332383a3a2f33332d3333203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:328::/33

    Signature Algorithm: sha256WithRSAEncryption
         79:ec:c7:50:59:16:27:43:12:b4:2c:34:15:bb:6c:61:a5:ea:
         e5:43:b6:4a:c8:9d:b3:c2:3a:d0:98:e7:90:7e:b6:4b:4c:6f:
         ac:94:05:45:63:8f:11:cf:3d:fd:a5:a5:66:ab:e4:ad:96:37:
         18:c2:3b:ac:c8:1a:2b:9d:31:f6:f0:7c:20:69:69:33:83:da:
         41:f3:c2:81:60:2d:ac:e8:26:7f:bd:98:4a:66:76:84:b5:35:
         0b:f7:81:37:f8:00:76:c7:cf:cc:ae:ab:f4:1f:f7:94:a0:00:
         89:6b:4f:ab:eb:78:fd:20:74:be:b5:6f:9a:51:4e:45:b8:03:
         80:d3:3d:63:e1:56:d9:13:88:bc:a5:c2:6a:ac:d4:35:1c:4f:
         5c:87:96:49:5c:8f:cb:9d:93:f8:33:c8:77:92:e2:e2:c1:96:
         3d:69:b1:72:20:ca:9a:1b:c8:cc:db:d7:89:a0:66:13:a8:33:
         2e:fb:17:1c:98:32:47:2d:49:39:60:ed:b6:3f:b9:ce:e3:27:
         ef:31:50:59:24:9d:ce:6f:25:5f:6e:4b:96:ce:4c:75:df:f6:
         22:4e:8f:08:86:e3:ff:69:38:a7:8b:5e:d1:5c:68:d3:b4:1c:
         15:5e:59:4f:0c:6a:96:dc:c1:1b:aa:51:61:eb:9c:59:b8:30:
         79:b1:6b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org