Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/323830343a343037383a383030303a3a2f33332d3333203d3e20323635393631.roa
File:                     323830343a343037383a383030303a3a2f33332d3333203d3e20323635393631.roa (raw, json)
Hash identifier:          wE4uSanm3ojtgk6bs2WCnFR8e17qyVeBS11KfxTN2p4=
Subject key identifier:   41:CD:0B:D0:5B:87:AB:57:77:A9:7B:E5:A5:44:DA:B3:FA:05:97:CA
Certificate issuer:       /CN=D61E35C6D73BF7E003298CCB24C4D4586086BB9D
Certificate serial:       2B7D2971616BFB97DA2735BA63C54D916C2251B3
Authority key identifier: D6:1E:35:C6:D7:3B:F7:E0:03:29:8C:CB:24:C4:D4:58:60:86:BB:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D61E35C6D73BF7E003298CCB24C4D4586086BB9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/323830343a343037383a383030303a3a2f33332d3333203d3e20323635393631.roa
Signing time:             Wed 06 Dec 2023 19:07:56 +0000
ROA not before:           Wed 06 Dec 2023 19:02:56 +0000
ROA not after:            Wed 04 Dec 2024 19:07:56 +0000
asID:                     265961
IP address blocks:        2804:4078:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:7d:29:71:61:6b:fb:97:da:27:35:ba:63:c5:4d:91:6c:22:51:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D61E35C6D73BF7E003298CCB24C4D4586086BB9D
        Validity
            Not Before: Dec  6 19:02:56 2023 GMT
            Not After : Dec  4 19:07:56 2024 GMT
        Subject: CN=41CD0BD05B87AB5777A97BE5A544DAB3FA0597CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fc:50:2b:e4:df:58:7d:02:83:a4:f7:e8:11:
                    9f:b1:66:32:1c:97:13:4f:e7:2f:69:3d:eb:eb:d9:
                    37:ed:51:de:0b:a3:8a:1b:1c:a6:86:76:9b:99:b2:
                    e2:69:4f:66:89:68:88:c0:e1:ec:12:15:48:f6:37:
                    ac:a5:ea:ef:aa:8a:cb:0f:7b:12:be:00:bd:4a:e9:
                    15:d1:de:d3:32:f5:cc:15:6a:0e:46:3e:dd:a1:38:
                    7c:4a:e0:42:89:2f:6a:e1:51:54:bb:0f:57:60:46:
                    76:4f:df:57:5e:b0:13:59:a1:2f:48:02:8d:94:0d:
                    7f:e0:5c:81:4c:48:11:26:f4:fa:1c:ff:de:39:39:
                    88:15:5f:59:bf:76:a3:60:c3:8e:5d:93:57:97:ce:
                    2f:6b:79:c3:08:e8:c8:00:e7:df:c5:87:5d:4b:24:
                    50:a1:3e:53:2c:6b:66:a0:89:a5:83:fd:47:2a:c4:
                    32:0c:21:39:48:a3:fe:16:c4:bf:e3:42:70:95:bc:
                    c2:0f:ad:7f:85:ca:db:21:0e:04:2d:fd:6e:22:5c:
                    5b:73:ab:21:45:a6:3c:dd:82:64:2c:cc:47:b6:01:
                    f5:b6:bf:53:9b:51:41:a9:19:15:22:ae:a3:2f:e7:
                    19:ac:f8:99:bf:31:5f:58:3e:07:58:00:51:67:be:
                    e3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CD:0B:D0:5B:87:AB:57:77:A9:7B:E5:A5:44:DA:B3:FA:05:97:CA
            X509v3 Authority Key Identifier:
                keyid:D6:1E:35:C6:D7:3B:F7:E0:03:29:8C:CB:24:C4:D4:58:60:86:BB:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/D61E35C6D73BF7E003298CCB24C4D4586086BB9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D61E35C6D73BF7E003298CCB24C4D4586086BB9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/323830343a343037383a383030303a3a2f33332d3333203d3e20323635393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4078:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         59:ea:21:43:65:a4:46:d1:72:81:33:8e:23:10:69:85:31:b5:
         24:1b:20:b4:54:8d:63:82:de:2a:40:4c:f3:2d:2d:58:0b:d6:
         1e:20:39:67:36:cb:0b:96:33:70:af:e7:9f:98:5d:4e:c2:90:
         70:e5:5e:0b:42:3f:bb:84:27:c2:61:88:3a:46:51:80:ce:2d:
         bf:76:fc:89:78:1c:41:02:e2:a1:66:74:41:66:9b:3c:23:c7:
         9a:51:71:3d:d4:73:a5:a7:4b:2a:18:60:01:a0:5f:ab:38:78:
         b8:3b:2a:7e:92:69:9e:ef:2e:eb:34:9f:19:e9:81:a2:80:d0:
         42:a1:c1:4b:e5:4f:d6:1d:29:68:01:92:8d:12:2a:46:51:57:
         b1:0f:6c:2e:75:fb:c6:3f:60:61:3d:0a:5b:ad:a4:d5:6f:a8:
         51:2b:46:80:00:87:39:f8:a8:05:2a:60:24:e8:22:25:b0:f4:
         8a:12:6b:2d:a1:71:9f:a2:38:a2:41:6a:d9:cb:38:37:b6:27:
         70:f8:f2:b7:09:8f:8e:87:a8:cb:e5:56:3c:92:c4:fb:74:eb:
         cf:ed:85:5e:3d:dd:b0:32:7e:81:57:f5:af:2d:3b:c2:39:d9:
         d6:65:ea:10:e1:22:fa:2e:1d:cc:c5:d7:7e:57:48:ae:2e:2b:
         8e:2a:ec:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org