Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/0/323830343a376562303a3a2f33322d313238203d3e20323731323739.roa
File:                     323830343a376562303a3a2f33322d313238203d3e20323731323739.roa (raw, json)
Hash identifier:          bXmrCDSLwq/VodhE3BqQammA6W+gsU4JkXLZ7EatckI=
Subject key identifier:   52:37:27:92:C9:9C:05:51:45:79:E1:42:25:31:D6:20:A4:DB:F3:8C
Certificate issuer:       /CN=D2F7452DD5564A2585DD665D38AD7886662B208D
Certificate serial:       67FC3D58EF0DED3AD6609B138A4803A9AC521643
Authority key identifier: D2:F7:45:2D:D5:56:4A:25:85:DD:66:5D:38:AD:78:86:66:2B:20:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2F7452DD5564A2585DD665D38AD7886662B208D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/0/323830343a376562303a3a2f33322d313238203d3e20323731323739.roa
Signing time:             Fri 20 Oct 2023 00:21:19 +0000
ROA not before:           Fri 20 Oct 2023 00:16:19 +0000
ROA not after:            Fri 18 Oct 2024 00:21:19 +0000
asID:                     271279
IP address blocks:        2804:7eb0::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:fc:3d:58:ef:0d:ed:3a:d6:60:9b:13:8a:48:03:a9:ac:52:16:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2F7452DD5564A2585DD665D38AD7886662B208D
        Validity
            Not Before: Oct 20 00:16:19 2023 GMT
            Not After : Oct 18 00:21:19 2024 GMT
        Subject: CN=52372792C99C05514579E1422531D620A4DBF38C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3e:ce:ce:c4:56:3a:5c:7b:59:bd:f7:b7:a7:
                    cd:89:54:01:20:cf:74:6d:cc:29:47:ce:62:5e:3e:
                    d7:6a:95:64:3b:48:98:63:d2:11:58:a0:11:d8:52:
                    e7:0a:f6:a3:56:e5:75:4a:69:ff:33:c3:04:0b:b4:
                    2c:0f:aa:a2:f1:d5:82:7e:6c:1a:33:eb:62:f3:55:
                    b1:4f:80:06:7a:d1:cd:3c:fe:92:3e:48:a3:d2:8b:
                    27:4d:eb:28:0d:3d:fb:d6:3c:13:f2:b0:d8:9f:3a:
                    de:e8:2d:9b:da:8d:53:7d:76:04:f2:46:f9:37:74:
                    52:49:b3:69:0b:b3:94:ec:ed:04:9b:ec:bc:ea:e7:
                    8e:44:5d:10:43:2d:9c:4c:4c:fe:52:a4:f6:88:7d:
                    15:8a:f3:fd:a1:dd:d1:f4:43:eb:bb:f6:18:1d:2a:
                    1d:01:b1:01:ac:a5:34:1f:0d:ee:ed:ca:bd:a3:98:
                    ec:06:50:74:8c:15:00:6d:3d:b2:6f:d8:c8:d7:72:
                    2a:95:70:02:93:82:3c:c1:7e:d8:58:ed:46:e7:76:
                    f7:f8:04:b6:42:b9:cd:9b:81:ee:c4:08:8d:d4:6d:
                    da:d6:be:af:da:91:bd:f6:be:de:0f:15:21:ba:03:
                    67:c6:10:2e:70:cc:6d:0e:bf:3a:09:c7:8d:f1:50:
                    c9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:37:27:92:C9:9C:05:51:45:79:E1:42:25:31:D6:20:A4:DB:F3:8C
            X509v3 Authority Key Identifier:
                keyid:D2:F7:45:2D:D5:56:4A:25:85:DD:66:5D:38:AD:78:86:66:2B:20:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/0/D2F7452DD5564A2585DD665D38AD7886662B208D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2F7452DD5564A2585DD665D38AD7886662B208D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/0/323830343a376562303a3a2f33322d313238203d3e20323731323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7eb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:f8:14:31:d9:69:92:21:90:be:1c:2a:b4:92:e8:6d:48:44:
         de:de:07:c2:05:41:b2:56:a7:e4:3d:eb:54:11:2b:37:ec:50:
         a5:c9:12:85:87:3d:07:60:e9:3e:a8:3c:94:7b:49:a0:c5:6e:
         2a:ff:70:84:22:d3:f2:ce:d0:12:ef:43:f2:09:d8:2c:e3:a1:
         6b:1e:bd:ca:d7:76:c7:ac:7a:0d:9b:99:f9:18:3d:1a:44:a9:
         95:ec:23:78:ab:1b:b6:1f:99:5b:28:06:e4:bf:ba:f8:4a:77:
         71:04:5c:96:72:23:b0:3f:63:2d:24:60:0b:a3:70:f8:3a:c1:
         40:ff:64:f3:9b:29:b7:2b:04:4c:35:4a:6b:9a:3a:51:83:3b:
         5f:ea:e0:3e:f5:ad:b2:e5:28:69:ec:e2:8f:22:ca:0c:b0:0d:
         0f:4d:a1:0c:32:3d:d9:be:2a:f0:56:73:07:31:f6:a5:d7:0f:
         66:02:f7:f3:5b:c5:94:46:9f:5e:70:1b:43:1c:0d:ac:5d:8b:
         7a:1a:4f:a3:1e:f7:e0:51:00:1a:07:d1:43:b8:c6:43:96:d7:
         3a:f6:ce:38:b2:49:46:84:90:3b:df:e0:22:e4:b1:7c:0a:80:
         21:13:85:bc:d0:e3:75:bd:c8:ec:52:17:76:3d:84:29:04:81:
         c5:7d:c4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org