Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a3a2f33322d3332203d3e20323633313436.roa
File:                     323830343a313737383a3a2f33322d3332203d3e20323633313436.roa (raw, json)
Hash identifier:          mzJ9VT/8a/jLouBB48c6/Nr48TF8EqywTakfXAB/oLM=
Subject key identifier:   FF:E6:A6:37:C0:8C:00:FE:F9:0F:77:64:60:AA:89:52:81:E9:9F:D3
Certificate issuer:       /CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
Certificate serial:       5DF956FE902DF29CE7244B78AC84E84F0B23CCEC
Authority key identifier: 42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a3a2f33322d3332203d3e20323633313436.roa
Signing time:             Tue 27 Feb 2024 17:30:38 +0000
ROA not before:           Tue 27 Feb 2024 17:25:38 +0000
ROA not after:            Tue 25 Feb 2025 17:30:38 +0000
asID:                     263146
IP address blocks:        2804:1778::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:f9:56:fe:90:2d:f2:9c:e7:24:4b:78:ac:84:e8:4f:0b:23:cc:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
        Validity
            Not Before: Feb 27 17:25:38 2024 GMT
            Not After : Feb 25 17:30:38 2025 GMT
        Subject: CN=FFE6A637C08C00FEF90F776460AA895281E99FD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:93:dd:d9:71:d9:f1:87:1c:63:7c:34:0c:
                    51:a7:14:ac:b9:d7:22:a4:c0:56:53:e1:b2:d4:98:
                    b5:b6:8e:a9:18:d6:70:50:85:e5:b8:ae:4a:99:d1:
                    37:ef:dd:e4:8e:2d:26:55:6a:1e:f8:68:c4:50:56:
                    24:ed:dc:4a:eb:c1:84:f8:16:34:b0:bc:fe:00:29:
                    6a:62:42:40:e7:96:e4:d8:ea:76:48:5d:90:56:5d:
                    dc:fd:41:14:91:34:2f:65:70:18:62:fe:38:95:c1:
                    de:a2:4b:a8:76:d9:0f:1b:c3:6e:8d:56:14:fd:74:
                    69:62:ef:2e:c3:3b:d4:fa:b0:e2:b8:fc:44:9e:34:
                    34:fb:c1:31:55:67:5e:cf:8e:70:51:9f:86:d0:4d:
                    f1:fa:e8:c8:ec:6b:22:f9:9b:a0:71:27:d2:de:b1:
                    d7:18:68:d5:3b:c5:b3:7b:49:b9:42:d9:47:e2:07:
                    0b:f5:7a:34:a1:ba:cc:47:96:58:c6:e4:35:b0:68:
                    bd:ca:2b:06:2b:55:8e:20:2d:5a:b8:b5:7f:85:cb:
                    6e:00:df:72:15:12:9f:e7:25:48:0a:0c:f3:39:13:
                    4e:80:a7:e3:03:ee:30:94:26:4a:46:2b:4d:f6:30:
                    51:4e:bc:4d:d2:33:1a:a4:1c:06:d5:7c:cd:e2:51:
                    d5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E6:A6:37:C0:8C:00:FE:F9:0F:77:64:60:AA:89:52:81:E9:9F:D3
            X509v3 Authority Key Identifier:
                keyid:42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a3a2f33322d3332203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1778::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:76:76:22:d5:9b:af:53:f8:b9:96:3f:9f:11:9d:16:21:67:
         b3:1b:bf:56:9f:50:19:cc:96:9a:ae:d7:8d:73:d6:c8:4a:52:
         8a:f1:5c:eb:41:13:ef:da:c0:5d:e9:3a:91:21:c4:08:59:2d:
         fb:6b:a8:78:9f:3e:10:28:2d:8e:36:4d:2c:e5:59:cf:09:cd:
         11:3c:da:f1:e3:47:2b:89:ad:16:c9:24:27:15:1f:ec:b9:fa:
         f8:32:08:56:66:2a:c8:53:f2:63:0d:24:40:14:28:07:42:81:
         8a:60:4d:c8:40:12:1a:8d:56:1e:78:57:2f:0b:08:9d:be:d7:
         c1:27:77:5b:cd:d9:89:b8:ff:41:fa:a0:7c:68:f9:b3:f6:02:
         27:29:b1:88:d4:8b:fd:5e:a9:89:c6:82:15:73:f7:1f:8a:12:
         da:b0:65:fe:7d:5f:94:85:0a:ef:d0:2a:43:7c:b5:17:a1:81:
         e1:d0:31:eb:19:95:51:5b:92:c7:6d:ba:02:c2:16:5d:b5:07:
         99:88:1e:25:51:cf:f6:76:16:59:12:45:f0:18:2c:5a:9b:95:
         2d:b9:58:c5:5b:bd:80:5e:77:89:cf:7f:8b:ac:6f:85:7c:5a:
         ab:4b:29:5f:ac:32:2c:13:a3:ac:88:1e:4e:68:98:f6:98:d8:
         26:1d:f2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org