Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a3a2f33332d3333203d3e20323633313436.roa
File:                     323830343a313737383a3a2f33332d3333203d3e20323633313436.roa (raw, json)
Hash identifier:          xIC6kRQgo4V1DKMbG7FTpVCUlrEr4sw8C9/bp78qV1A=
Subject key identifier:   4B:60:0C:46:14:40:4D:30:39:52:A5:2A:91:D2:F5:03:81:C9:C2:74
Certificate issuer:       /CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
Certificate serial:       640B9B0EDFBD2E7DAAC714D98DCA17F2ED6EE003
Authority key identifier: 42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a3a2f33332d3333203d3e20323633313436.roa
Signing time:             Tue 27 Feb 2024 17:30:47 +0000
ROA not before:           Tue 27 Feb 2024 17:25:47 +0000
ROA not after:            Tue 25 Feb 2025 17:30:47 +0000
asID:                     263146
IP address blocks:        2804:1778::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:0b:9b:0e:df:bd:2e:7d:aa:c7:14:d9:8d:ca:17:f2:ed:6e:e0:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
        Validity
            Not Before: Feb 27 17:25:47 2024 GMT
            Not After : Feb 25 17:30:47 2025 GMT
        Subject: CN=4B600C4614404D303952A52A91D2F50381C9C274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6c:81:24:ae:83:8c:13:58:34:e5:24:46:f7:
                    fa:d8:f7:7d:d6:fa:fb:cc:ba:3e:34:35:4d:6b:6d:
                    b0:a0:f3:9a:d3:91:1c:5a:79:63:9e:8d:06:5c:c4:
                    9b:0f:5e:3f:ce:79:a5:da:f8:2f:4b:df:aa:3b:17:
                    e8:e9:80:95:82:9e:46:d3:77:44:54:d4:3e:2e:9d:
                    a1:d8:82:9f:e9:7e:1a:af:7b:cf:65:a4:50:b7:d5:
                    b4:b0:e9:a0:1c:26:17:b8:ad:29:54:a7:49:af:00:
                    9a:d9:0d:59:03:c3:ce:b8:66:ff:ab:c7:4b:c8:d5:
                    42:33:d2:46:44:90:9d:4b:bc:22:6b:64:85:8e:ab:
                    c7:0c:c7:80:53:57:31:41:8e:ef:79:7c:1d:fe:1f:
                    82:95:ea:90:fb:8a:a2:35:d8:36:8e:fa:0e:68:ef:
                    e4:dd:22:f0:d7:2f:49:f3:27:6e:9a:bf:e8:4b:83:
                    6d:ca:b4:fa:a4:6b:e3:15:41:f0:83:c7:41:7a:22:
                    cf:17:30:43:c1:de:d3:19:6b:18:cc:92:f7:4d:66:
                    65:ae:38:60:23:70:6e:b2:f6:1d:84:62:5f:63:2c:
                    30:d2:8d:f4:e0:de:ff:15:59:90:ff:d5:78:cb:d4:
                    de:7a:64:21:5b:d0:ce:d1:3f:5e:a2:f7:92:07:cc:
                    bb:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:60:0C:46:14:40:4D:30:39:52:A5:2A:91:D2:F5:03:81:C9:C2:74
            X509v3 Authority Key Identifier:
                keyid:42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a3a2f33332d3333203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1778::/33

    Signature Algorithm: sha256WithRSAEncryption
         47:a3:00:06:8d:6c:19:94:f9:3e:e3:d9:c2:fc:a7:37:90:fb:
         77:b0:ed:02:d4:5c:91:ca:4b:3d:1c:95:7f:8c:8d:85:df:d0:
         16:db:00:64:ce:9a:d6:c1:4c:02:91:55:26:1e:51:c7:7a:1b:
         96:87:02:f7:c0:a4:e8:64:6f:f0:d5:bf:0d:b5:b5:17:dc:92:
         3a:f3:fe:99:5a:f2:5c:74:c0:53:81:ab:7a:e3:8a:ee:69:fc:
         09:8c:f4:0e:ba:8b:a6:7e:29:13:8e:df:7c:71:8d:0c:c9:af:
         16:18:d2:e1:0a:05:39:fd:5c:3b:72:2e:b4:d5:06:c3:ea:7f:
         78:4b:34:73:e5:96:0d:18:f9:63:3e:d5:2a:7d:d8:94:a5:2f:
         83:71:20:09:99:17:9c:20:31:3f:a1:cc:1a:03:e0:54:d8:8e:
         c1:78:d5:aa:2e:63:da:41:e5:78:03:a4:3a:e6:40:a2:94:54:
         e9:b6:23:57:a7:c7:6a:d4:cc:37:6d:38:09:1b:d0:58:82:2a:
         fb:3c:59:b4:39:3b:55:25:ee:d3:70:a0:18:ef:ad:68:bd:f8:
         0b:9a:ff:e5:f6:df:c8:94:b0:f1:23:fb:8a:09:99:96:4a:12:
         0f:00:95:4f:01:f8:00:85:d4:4e:ea:c7:59:11:5f:ce:63:f2:
         12:9a:ca:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org