Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79HkdRaMcjGrrNx7hFU5qAMhVKSETRMYsa5GsJfrCqjQ/0/323830343a6436383a3a2f33322d3332203d3e203532363234.roa
File:                     323830343a6436383a3a2f33322d3332203d3e203532363234.roa (raw, json)
Hash identifier:          Bn0glltnB2CggVxq3Jq9GDF+MOlAoc8j6ri3eKVtZfA=
Subject key identifier:   B0:F7:8F:04:CF:BA:57:F6:C9:89:92:FB:26:14:2B:F2:50:0B:DA:D0
Certificate issuer:       /CN=9409D35187AB6857D56CCFDE92B1C5258C57CC03
Certificate serial:       705B6E8A80594103D46D86779919DC01BA903C83
Authority key identifier: 94:09:D3:51:87:AB:68:57:D5:6C:CF:DE:92:B1:C5:25:8C:57:CC:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9409D35187AB6857D56CCFDE92B1C5258C57CC03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79HkdRaMcjGrrNx7hFU5qAMhVKSETRMYsa5GsJfrCqjQ/0/323830343a6436383a3a2f33322d3332203d3e203532363234.roa
Signing time:             Fri 29 Sep 2023 20:51:34 +0000
ROA not before:           Fri 29 Sep 2023 20:46:34 +0000
ROA not after:            Fri 27 Sep 2024 20:51:34 +0000
asID:                     52624
IP address blocks:        2804:d68::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:5b:6e:8a:80:59:41:03:d4:6d:86:77:99:19:dc:01:ba:90:3c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9409D35187AB6857D56CCFDE92B1C5258C57CC03
        Validity
            Not Before: Sep 29 20:46:34 2023 GMT
            Not After : Sep 27 20:51:34 2024 GMT
        Subject: CN=B0F78F04CFBA57F6C98992FB26142BF2500BDAD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:00:f8:5a:93:e9:c5:01:30:ea:1c:2b:92:3f:
                    a4:74:58:01:7a:13:56:15:88:61:7a:d8:f2:3d:cb:
                    06:9e:8c:4d:a2:73:a3:9e:df:d6:e2:fa:16:d5:b5:
                    20:0b:cf:4a:da:ce:c8:82:f9:35:e8:5a:72:b2:ec:
                    2d:d4:bb:17:fa:bb:26:85:e6:f1:e3:f5:ec:f4:e4:
                    35:bf:91:64:50:02:02:56:65:5d:97:ff:19:a6:b6:
                    aa:87:4a:a2:cb:5b:26:ba:1a:a0:62:84:54:45:29:
                    8d:2a:d9:bd:84:48:2c:0a:f6:46:3b:c6:2b:39:e1:
                    9e:fa:69:1f:76:53:1e:98:c4:00:93:cd:98:e4:34:
                    89:63:1a:cf:f7:11:9e:f9:da:a4:a0:21:da:cb:03:
                    d4:f6:48:0e:1f:3b:d2:f2:8a:08:07:c0:b3:ad:22:
                    85:a7:bf:c9:db:54:c6:99:e5:56:05:fb:5d:bf:5f:
                    03:f9:e0:95:3a:44:e1:e7:7f:97:4e:17:67:96:05:
                    a0:d6:c6:6f:ae:34:21:14:4a:68:45:e4:de:62:78:
                    0a:31:05:39:f2:15:7f:69:41:e9:22:69:df:10:99:
                    e5:f2:8b:0e:c0:63:82:28:62:9a:35:ee:eb:4d:2c:
                    4f:5f:ed:9c:79:09:ca:a0:a4:61:44:d8:9b:fe:1c:
                    b6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F7:8F:04:CF:BA:57:F6:C9:89:92:FB:26:14:2B:F2:50:0B:DA:D0
            X509v3 Authority Key Identifier:
                keyid:94:09:D3:51:87:AB:68:57:D5:6C:CF:DE:92:B1:C5:25:8C:57:CC:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79HkdRaMcjGrrNx7hFU5qAMhVKSETRMYsa5GsJfrCqjQ/0/9409D35187AB6857D56CCFDE92B1C5258C57CC03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9409D35187AB6857D56CCFDE92B1C5258C57CC03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79HkdRaMcjGrrNx7hFU5qAMhVKSETRMYsa5GsJfrCqjQ/0/323830343a6436383a3a2f33322d3332203d3e203532363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d68::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:76:7d:71:57:f6:1b:9a:7a:5f:95:59:3e:52:62:1f:5d:7c:
         32:d2:4c:75:83:88:02:ad:e5:dd:98:c9:df:f0:85:91:f2:45:
         67:5c:49:98:6c:1d:c4:95:5d:05:1b:5f:d1:20:47:d9:fb:a0:
         34:09:0b:cd:32:86:25:2c:6d:c8:bd:08:6c:69:84:35:6a:ed:
         27:b4:c9:0d:dc:fa:b3:f9:0c:88:8c:38:07:53:b4:08:75:75:
         a7:9b:4d:c0:92:6a:31:e4:4d:4e:71:c8:a9:3f:a1:72:5b:60:
         0d:61:17:da:b9:a7:ad:a7:a6:fd:d9:3b:21:d0:58:98:cd:20:
         f9:fb:dc:24:0a:b9:33:b0:61:42:1c:c5:bf:85:b9:3e:06:34:
         59:17:fb:4e:d6:92:fd:db:3f:aa:6f:b8:30:c6:15:5c:25:d8:
         ca:35:ed:ec:16:db:d1:37:e7:e5:85:18:28:1e:07:c1:65:c5:
         7f:08:f2:88:20:44:a8:dd:96:9b:04:96:fb:8b:1b:74:70:68:
         c3:8c:b2:80:d1:2e:20:ea:74:8f:77:81:fd:49:71:81:12:2d:
         f2:08:d1:8b:e3:4b:90:ac:3a:ea:9d:c6:10:40:d1:f1:eb:dd:
         59:e0:16:0f:47:e0:03:dc:d4:f2:3a:6c:b5:8d:9b:bf:fb:c9:
         82:fc:77:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org