Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a3a2f33352d3335203d3e20323633313436.roa
File:                     323830343a313737383a3a2f33352d3335203d3e20323633313436.roa (raw, json)
Hash identifier:          XyifJ20jeNm3l45CtIROWdv1lzmhxd0yIATXk/3e7I4=
Subject key identifier:   89:17:3F:42:D2:9F:D3:2D:C9:BC:55:4E:BE:41:34:96:61:8C:E4:41
Certificate issuer:       /CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
Certificate serial:       139BEF3A092C306226D934D581150E3E39B54CAD
Authority key identifier: 42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a3a2f33352d3335203d3e20323633313436.roa
Signing time:             Tue 27 Feb 2024 17:30:41 +0000
ROA not before:           Tue 27 Feb 2024 17:25:41 +0000
ROA not after:            Tue 25 Feb 2025 17:30:41 +0000
asID:                     263146
IP address blocks:        2804:1778::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:9b:ef:3a:09:2c:30:62:26:d9:34:d5:81:15:0e:3e:39:b5:4c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
        Validity
            Not Before: Feb 27 17:25:41 2024 GMT
            Not After : Feb 25 17:30:41 2025 GMT
        Subject: CN=89173F42D29FD32DC9BC554EBE413496618CE441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:45:cd:a9:14:15:7e:be:f0:ce:2a:0f:7b:41:
                    05:8c:3b:7f:84:ce:75:97:9d:89:68:22:b8:57:79:
                    73:a0:25:d5:8a:11:16:89:61:ec:b5:d5:ce:00:ac:
                    ee:6a:da:af:ab:d9:61:9a:03:27:2c:3f:24:e1:19:
                    da:c2:cb:b8:68:88:28:21:cf:f1:ca:9b:17:16:68:
                    c7:ee:8b:26:99:c1:bf:dd:99:53:19:db:68:24:ea:
                    e2:0d:f1:20:e8:2b:0c:81:8a:f5:f7:eb:35:dc:5f:
                    63:0a:24:34:d7:70:bc:30:44:f9:ab:f6:d1:91:3d:
                    0e:48:d4:de:df:9d:76:cf:eb:e5:eb:1b:78:ff:53:
                    62:f0:35:e7:31:27:5e:c8:aa:e0:88:24:09:35:58:
                    86:da:a5:d6:74:f1:0e:15:1a:7c:cd:9e:1b:9e:90:
                    b3:1f:bc:3d:b8:03:8f:71:6d:f3:89:db:9e:bd:79:
                    07:53:ff:4e:b4:93:4c:58:61:ef:10:4c:9b:74:00:
                    24:6c:c7:66:e1:7b:41:56:ac:63:c0:1e:4a:96:72:
                    04:d4:e4:eb:79:c7:3d:2c:f5:dd:f7:35:0c:27:b6:
                    10:fa:96:8d:22:ac:47:04:21:e8:f8:8a:ad:be:f9:
                    ca:35:e7:f7:55:e5:e4:ae:8a:02:24:53:1c:25:4d:
                    c1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:17:3F:42:D2:9F:D3:2D:C9:BC:55:4E:BE:41:34:96:61:8C:E4:41
            X509v3 Authority Key Identifier:
                keyid:42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a3a2f33352d3335203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1778::/35

    Signature Algorithm: sha256WithRSAEncryption
         a9:bf:64:49:e4:77:b2:e4:66:94:d1:0f:7a:66:57:16:43:7e:
         eb:2b:ad:6b:b5:b9:21:d5:36:41:11:ae:0f:c7:84:77:d4:2c:
         f6:3e:a2:1e:78:a5:67:5b:a9:b5:0a:01:68:c4:59:17:24:7d:
         80:6d:39:64:fe:db:03:f8:51:db:86:b8:fb:6b:2c:f4:a3:0b:
         87:f4:53:a6:09:f8:19:8b:f8:a4:4c:da:ee:d5:ac:16:12:21:
         af:75:5c:a1:de:3e:a5:dc:2b:c5:ff:01:6a:98:17:ab:ec:ee:
         d3:d0:a0:85:ef:96:6a:2c:00:13:99:bd:a0:ae:51:00:d8:49:
         77:38:6e:87:e3:be:11:fc:d5:bf:5d:2d:8e:4b:ca:57:98:a3:
         cb:80:8b:d0:b3:a5:9b:b9:ef:c8:6c:98:ab:0c:c3:31:44:70:
         2a:14:63:8d:a4:a4:0a:67:12:8e:c7:15:6f:8f:46:8e:89:7e:
         05:9f:16:51:f6:af:77:7c:d3:80:a8:86:2b:7f:41:8e:28:a1:
         76:c0:69:9b:f4:c9:76:2b:18:f0:4c:93:63:84:49:4b:7d:33:
         f8:36:54:1f:66:09:f9:b4:39:cb:81:20:57:0b:b2:11:a7:74:
         17:3f:4e:8f:aa:e4:4f:3e:63:97:cf:95:95:0b:81:b3:c9:93:
         05:de:16:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org