Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/323830343a373465343a3a2f33322d3334203d3e20323731303130.roa
File:                     323830343a373465343a3a2f33322d3334203d3e20323731303130.roa (raw, json)
Hash identifier:          qjbiz1WlhY9SY8nggReea25u5b+BfO2RgSeCUh/Dw60=
Subject key identifier:   CC:C6:AE:5E:57:85:29:58:EB:A8:7B:64:27:E7:C2:62:ED:D4:B4:67
Certificate issuer:       /CN=9AAEA1DEC8EA2ADF122B31B012625E75441154E9
Certificate serial:       474FEDB65645272BCD4E2E0B5D1C5E368D68B3DE
Authority key identifier: 9A:AE:A1:DE:C8:EA:2A:DF:12:2B:31:B0:12:62:5E:75:44:11:54:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AAEA1DEC8EA2ADF122B31B012625E75441154E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/323830343a373465343a3a2f33322d3334203d3e20323731303130.roa
Signing time:             Wed 20 Mar 2024 15:10:17 +0000
ROA not before:           Wed 20 Mar 2024 15:05:17 +0000
ROA not after:            Wed 19 Mar 2025 15:10:17 +0000
asID:                     271010
IP address blocks:        2804:74e4::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:4f:ed:b6:56:45:27:2b:cd:4e:2e:0b:5d:1c:5e:36:8d:68:b3:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AAEA1DEC8EA2ADF122B31B012625E75441154E9
        Validity
            Not Before: Mar 20 15:05:17 2024 GMT
            Not After : Mar 19 15:10:17 2025 GMT
        Subject: CN=CCC6AE5E57852958EBA87B6427E7C262EDD4B467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c1:3c:56:7d:f6:e2:ff:b5:57:5b:ff:a0:24:
                    f3:d3:47:6f:bf:72:fd:42:5a:c6:a4:b3:95:cd:4f:
                    09:5e:9f:9d:d5:d0:80:2b:4b:d0:fa:55:16:dc:d1:
                    31:b0:16:cc:ef:f6:35:36:1a:27:88:16:f1:3b:02:
                    fd:85:ad:b0:6c:a0:7d:28:f9:a9:c8:14:c9:e5:3d:
                    f0:37:1a:cb:b2:58:07:81:6e:d5:b3:4c:d0:16:2e:
                    bb:37:5b:49:64:70:38:d7:b0:f3:f9:8a:ef:64:e3:
                    47:d5:36:0a:d5:5b:a6:6f:fb:8f:fd:6d:e2:7a:72:
                    55:ed:d6:d3:af:00:9e:e8:19:84:0e:60:47:5d:54:
                    5f:d4:fe:49:cb:3d:9f:ff:13:66:98:26:85:03:c0:
                    56:c7:22:f3:fb:dc:02:f9:ed:16:d9:b8:fe:bc:37:
                    00:98:c6:ae:cd:ab:3c:9f:28:9a:5f:d0:ab:ab:62:
                    a5:b5:8e:4d:a5:6f:0c:80:34:a3:2d:b6:9c:a1:ca:
                    e6:3f:87:2e:c7:4b:53:87:71:3c:f5:a3:47:eb:4a:
                    81:49:40:96:05:d0:1d:1c:03:7d:e7:3d:15:c1:65:
                    7c:f2:47:57:2a:80:7a:a3:52:de:92:24:26:aa:99:
                    02:cc:98:0c:c7:ae:1a:40:45:fb:7f:fe:59:1f:4e:
                    5b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C6:AE:5E:57:85:29:58:EB:A8:7B:64:27:E7:C2:62:ED:D4:B4:67
            X509v3 Authority Key Identifier:
                keyid:9A:AE:A1:DE:C8:EA:2A:DF:12:2B:31:B0:12:62:5E:75:44:11:54:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/9AAEA1DEC8EA2ADF122B31B012625E75441154E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AAEA1DEC8EA2ADF122B31B012625E75441154E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/323830343a373465343a3a2f33322d3334203d3e20323731303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:57:40:2f:ba:c4:74:00:7a:a8:b7:76:f0:b8:5b:7a:f9:e7:
         b6:97:8f:34:66:7d:db:b4:e9:a4:86:45:3e:4e:8e:f4:43:44:
         e3:19:8d:86:ef:af:ab:cd:2b:2b:00:88:eb:39:81:6b:ad:c3:
         de:4c:d0:3b:15:c9:62:3b:13:46:46:9c:27:60:c2:33:ce:65:
         9f:95:67:4f:f7:28:89:27:bc:76:46:fe:60:26:e8:c2:0e:a7:
         9d:31:3c:7e:61:bd:4e:d4:2c:99:56:41:14:2c:88:b7:a7:b5:
         d1:60:40:1c:a3:d2:ec:e3:bc:36:1e:f9:d9:96:a5:84:4b:1d:
         bb:8d:56:b1:ea:18:c7:ae:97:ab:1a:35:43:56:a4:ed:88:cd:
         58:67:c7:02:2c:1a:fc:a5:59:5a:18:2e:70:40:f5:8d:9b:d4:
         e0:83:3c:e3:3b:45:a6:af:ee:0b:2b:76:22:c9:59:58:d7:bf:
         d7:f8:b2:90:c2:f3:ec:49:06:2b:76:59:ca:43:d1:2c:9b:20:
         1f:33:37:18:d5:83:01:04:5b:14:03:67:a4:e0:47:0b:a0:f9:
         d8:d5:21:45:44:e2:3e:e8:bb:d8:d4:55:8a:e6:e6:9a:0b:ca:
         3c:58:c5:d4:09:a8:3b:00:68:6f:c2:59:30:fa:46:55:67:51:
         17:a9:cc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org