Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/323830343a333833633a3a2f33322d313236203d3e203532363031.roa
File:                     323830343a333833633a3a2f33322d313236203d3e203532363031.roa (raw, json)
Hash identifier:          k8xLTDV/cgCBFUdlcRdi7HxQ251mqzzQzyhOchK+ssA=
Subject key identifier:   0B:FD:D0:6C:AD:55:15:0D:4F:69:E0:06:BA:56:20:8F:55:0A:C3:08
Certificate issuer:       /CN=393C05C5D41432E0C49D28B3830034F3BD93985A
Certificate serial:       050E4A69C6C9794DA3F4A908BEC3F2093713B132
Authority key identifier: 39:3C:05:C5:D4:14:32:E0:C4:9D:28:B3:83:00:34:F3:BD:93:98:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/393C05C5D41432E0C49D28B3830034F3BD93985A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/323830343a333833633a3a2f33322d313236203d3e203532363031.roa
Signing time:             Mon 04 Dec 2023 02:35:20 +0000
ROA not before:           Mon 04 Dec 2023 02:30:20 +0000
ROA not after:            Mon 02 Dec 2024 02:35:20 +0000
asID:                     52601
IP address blocks:        2804:383c::/32 maxlen: 126

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:0e:4a:69:c6:c9:79:4d:a3:f4:a9:08:be:c3:f2:09:37:13:b1:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=393C05C5D41432E0C49D28B3830034F3BD93985A
        Validity
            Not Before: Dec  4 02:30:20 2023 GMT
            Not After : Dec  2 02:35:20 2024 GMT
        Subject: CN=0BFDD06CAD55150D4F69E006BA56208F550AC308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4e:2c:ef:6e:19:28:f8:4d:09:ae:3a:b4:4e:
                    f6:3d:00:2e:e6:61:d9:ef:a2:44:72:7c:01:82:7e:
                    47:cd:52:95:b7:c4:f0:5d:1f:49:ac:56:d4:36:b7:
                    26:dc:39:25:ec:22:c5:6e:1b:85:ca:12:73:9a:a8:
                    12:3b:ee:7a:fd:cd:f8:20:59:32:35:2a:f6:43:b9:
                    8f:da:32:aa:23:a5:cf:8a:11:ee:79:d8:3a:77:8e:
                    1b:39:cf:2b:ef:19:6a:0b:8a:bc:0e:1c:f3:80:65:
                    9e:5e:a6:17:68:ad:5e:69:97:a0:d4:ff:6e:6e:c7:
                    f0:da:7b:c6:e2:11:4a:04:56:b5:a7:8f:18:28:89:
                    15:4f:ec:d2:87:09:16:81:68:ae:73:10:ee:86:4c:
                    9f:d5:78:95:d3:cb:22:49:93:d1:e7:d7:7b:2a:92:
                    0d:bd:8e:6b:5f:e8:af:21:8a:f6:aa:7f:9d:65:f5:
                    49:2f:03:e1:8f:03:5a:7e:ec:22:2a:d4:07:6c:90:
                    7a:72:67:52:cb:f2:13:23:f8:36:ed:2b:9c:ca:4b:
                    bd:31:41:e5:42:ad:49:00:c7:bd:4d:f3:c6:33:f4:
                    47:0f:9b:ba:4b:db:f3:a1:15:49:33:21:c7:d4:80:
                    0b:e2:d4:0f:9b:bb:39:99:f4:84:77:31:18:2d:85:
                    a7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FD:D0:6C:AD:55:15:0D:4F:69:E0:06:BA:56:20:8F:55:0A:C3:08
            X509v3 Authority Key Identifier:
                keyid:39:3C:05:C5:D4:14:32:E0:C4:9D:28:B3:83:00:34:F3:BD:93:98:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/393C05C5D41432E0C49D28B3830034F3BD93985A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/393C05C5D41432E0C49D28B3830034F3BD93985A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/323830343a333833633a3a2f33322d313236203d3e203532363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:383c::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:a9:27:e2:5a:db:e4:79:78:67:62:9d:ae:d9:2f:0e:6e:79:
         94:db:71:90:fb:f4:80:61:ee:48:b7:21:6e:f5:4e:c3:4f:6e:
         fa:5e:5a:a9:b9:1d:99:d3:dd:6c:35:f2:21:cf:f3:05:a5:50:
         76:73:39:6a:cf:a5:cd:3c:e7:6d:22:32:d8:5c:a0:8c:04:41:
         f3:0c:55:0a:0b:c3:1e:25:92:24:fb:38:5a:fb:ae:42:2f:91:
         0e:4a:63:49:01:69:ae:64:2b:50:3b:85:54:b5:d6:35:35:3d:
         bd:a3:27:5b:de:17:30:fd:68:17:2c:6b:db:61:ba:92:52:88:
         f5:81:1b:d2:64:51:64:20:02:18:cd:3a:b8:5f:b2:45:a2:4b:
         5c:b8:cf:dd:a4:4d:5e:b7:89:0a:7e:51:60:b7:4c:db:b4:e4:
         3e:b9:9a:d8:3e:1f:40:f6:a2:21:94:27:7b:1b:77:6d:b0:f6:
         23:08:7d:6d:cd:5b:9b:24:ed:bb:d3:1c:f0:19:ab:0e:4c:0a:
         25:7b:62:3d:f6:4e:61:e4:80:3a:8b:f1:fa:85:20:1b:56:f4:
         3c:6b:88:40:57:63:0d:18:d3:2e:b6:7a:51:3e:0a:14:1f:46:
         7b:8a:0a:16:61:3f:99:b0:66:59:9e:bd:5b:65:8d:db:c0:8a:
         1b:10:65:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:47 2024 by rpki-client on console-fra.rpki-client.org