Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/323830343a346261343a3a2f33322d3332203d3e20323637333230.roa
File:                     323830343a346261343a3a2f33322d3332203d3e20323637333230.roa (raw, json)
Hash identifier:          D+raXNp20KzpOSw6l4vdlt3QrvRXdnQSzfBci7L7JXE=
Subject key identifier:   BA:57:C7:59:E8:57:12:51:3E:60:64:52:5E:D8:20:F7:80:72:1F:8A
Certificate issuer:       /CN=41B75113AE9716150D6BFBFA040F31771294DE81
Certificate serial:       3E93CABEC670930D51263D93D21BB70AC0A29A1E
Authority key identifier: 41:B7:51:13:AE:97:16:15:0D:6B:FB:FA:04:0F:31:77:12:94:DE:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41B75113AE9716150D6BFBFA040F31771294DE81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/323830343a346261343a3a2f33322d3332203d3e20323637333230.roa
Signing time:             Tue 04 Jan 2022 02:19:05 +0000
ROA not before:           Tue 04 Jan 2022 02:14:05 +0000
ROA not after:            Tue 03 Jan 2023 02:19:05 +0000
asID:                     267320
IP address blocks:        2804:4ba4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:93:ca:be:c6:70:93:0d:51:26:3d:93:d2:1b:b7:0a:c0:a2:9a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41B75113AE9716150D6BFBFA040F31771294DE81
        Validity
            Not Before: Jan  4 02:14:05 2022 GMT
            Not After : Jan  3 02:19:05 2023 GMT
        Subject: CN=BA57C759E85712513E6064525ED820F780721F8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7c:5d:ed:c9:a7:b4:7d:07:96:d6:52:c6:34:
                    63:1c:05:af:a7:2a:8e:c5:a3:26:43:1c:77:a6:6c:
                    5a:fc:4d:dd:7c:21:06:47:02:e1:44:a2:69:97:85:
                    8e:6a:73:dc:51:01:7b:62:51:7e:e7:2f:0b:87:8e:
                    31:a8:0a:29:2e:cd:d2:9c:bb:2c:5a:8a:f2:44:c8:
                    9f:cd:1d:70:56:99:00:16:f8:55:de:02:45:8c:82:
                    49:db:a4:ef:42:6f:8a:dc:8c:04:ff:11:ea:c3:4a:
                    50:44:9c:bd:5f:0d:85:cd:dc:10:b0:a4:a5:0d:48:
                    b8:ba:d3:c4:c3:1d:92:33:3d:1f:1c:75:92:98:01:
                    d3:34:5b:26:67:dc:87:71:84:ea:7e:ba:88:fa:18:
                    27:bb:cf:6b:ae:ae:4e:64:f2:df:ca:5f:56:d7:ae:
                    b3:d8:a7:44:ad:21:fc:7d:97:07:2e:33:29:41:82:
                    53:3c:fa:b1:c4:f5:49:4c:4e:d9:33:58:98:00:47:
                    b8:3b:60:68:09:36:5e:31:1e:a4:4f:6b:00:5b:8a:
                    3b:f6:a7:11:91:9f:16:3a:e2:5e:a0:a0:f5:02:e9:
                    5d:51:84:55:80:50:70:95:8f:2d:62:f4:50:9b:47:
                    bb:b9:bb:af:ad:db:54:8d:6e:c9:e5:a6:61:bc:0d:
                    3e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:57:C7:59:E8:57:12:51:3E:60:64:52:5E:D8:20:F7:80:72:1F:8A
            X509v3 Authority Key Identifier:
                keyid:41:B7:51:13:AE:97:16:15:0D:6B:FB:FA:04:0F:31:77:12:94:DE:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/41B75113AE9716150D6BFBFA040F31771294DE81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41B75113AE9716150D6BFBFA040F31771294DE81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/323830343a346261343a3a2f33322d3332203d3e20323637333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ba4::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:62:5d:82:f4:cc:65:4f:d3:8a:85:96:d4:a4:c5:03:6e:34:
         ec:bb:df:55:fb:6b:28:f8:21:be:e3:f0:25:3c:04:3d:74:5e:
         a6:e5:6d:cc:da:d1:64:f8:88:b1:9f:61:14:6c:05:25:ab:24:
         1e:86:b7:b4:02:f2:57:de:a1:4b:26:91:3d:d0:b3:95:1e:98:
         15:fc:da:91:c8:28:65:bc:86:17:79:76:77:0a:dc:b2:b3:6c:
         68:10:e4:30:bf:2a:48:82:7c:8c:0c:b5:62:4f:12:80:89:38:
         97:87:0e:fd:f4:49:22:3c:d7:75:5d:7e:0b:66:fc:0a:cf:c7:
         a7:5b:20:8f:55:dd:4e:fc:a9:7e:2c:ec:81:aa:79:df:d5:3a:
         c6:23:ad:ba:6f:a0:2a:9d:6c:f5:7f:04:84:7c:39:2b:4e:4a:
         f6:c3:80:83:aa:e2:18:89:3b:de:7c:0d:c8:c3:a4:1d:27:49:
         09:57:d0:73:53:9f:a6:e4:19:2b:d0:5b:27:b3:0f:af:c8:aa:
         28:db:ee:f3:a9:8b:98:87:90:a1:92:d2:37:b8:9f:a3:bc:7b:
         f9:bd:5e:fc:62:43:cb:e9:00:d2:ab:d6:60:dc:47:c4:69:19:
         06:78:70:34:ea:67:73:ce:18:71:78:e3:80:e8:ed:a0:a0:2c:
         ee:45:e6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org