Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7S5oA7gWhenZZDoUT9g8oBFvDgCFpzoLAhBXsaVYnrB/0/323830343a376437303a3a2f33322d313238203d3e20323731353631.roa
File:                     323830343a376437303a3a2f33322d313238203d3e20323731353631.roa (raw, json)
Hash identifier:          GUkdql1GZFU2pJgQ1903BuvXSWtkx8hzWfvRyzHvSro=
Subject key identifier:   A0:92:48:59:69:CD:61:62:3C:E6:1D:37:12:4B:8B:3B:3A:12:09:49
Certificate issuer:       /CN=C9A3BF9B6F3514CAB31F17CB41F1E20F89E25C59
Certificate serial:       3FFA1A819B998D9182027C4836FFC2ABED5665CF
Authority key identifier: C9:A3:BF:9B:6F:35:14:CA:B3:1F:17:CB:41:F1:E2:0F:89:E2:5C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9A3BF9B6F3514CAB31F17CB41F1E20F89E25C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7S5oA7gWhenZZDoUT9g8oBFvDgCFpzoLAhBXsaVYnrB/0/323830343a376437303a3a2f33322d313238203d3e20323731353631.roa
Signing time:             Sun 03 Mar 2024 18:30:39 +0000
ROA not before:           Sun 03 Mar 2024 18:25:39 +0000
ROA not after:            Sun 02 Mar 2025 18:30:39 +0000
asID:                     271561
IP address blocks:        2804:7d70::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:fa:1a:81:9b:99:8d:91:82:02:7c:48:36:ff:c2:ab:ed:56:65:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9A3BF9B6F3514CAB31F17CB41F1E20F89E25C59
        Validity
            Not Before: Mar  3 18:25:39 2024 GMT
            Not After : Mar  2 18:30:39 2025 GMT
        Subject: CN=A092485969CD61623CE61D37124B8B3B3A120949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b5:8e:ef:c1:b4:47:da:c2:62:a1:85:88:15:
                    ba:3c:61:24:b1:67:1e:38:3c:6a:97:72:83:40:c9:
                    8f:45:52:84:f7:50:09:8a:cd:98:c7:91:24:ab:87:
                    cc:81:1c:a2:db:d5:68:de:8a:aa:24:7f:b2:cb:18:
                    2e:d9:82:07:0f:83:50:8a:eb:bd:2e:11:fe:7d:36:
                    5e:6c:e1:9b:15:d6:81:44:e6:52:cd:33:ad:eb:89:
                    26:ab:c4:9d:fd:72:05:ad:4f:ea:67:17:07:83:fb:
                    a0:89:e0:b7:37:fc:4f:00:82:8d:d8:59:13:ae:55:
                    87:23:a8:27:c4:d6:30:ed:c3:09:a8:9a:9d:fa:bb:
                    f9:1b:73:62:ec:d8:e5:26:f2:38:18:02:8c:45:78:
                    c3:e9:2b:6d:91:bb:6d:d1:4b:3a:fe:a4:b4:d5:b6:
                    e5:5d:b0:5a:72:e5:c5:d6:3b:31:d6:91:71:dc:39:
                    c4:ac:12:88:3a:d5:c7:48:bb:4e:44:a9:41:df:2c:
                    5f:13:b6:dc:31:c1:a9:23:18:11:21:d1:5b:a8:3f:
                    34:92:a0:6b:9e:42:52:2c:7e:b0:6c:17:37:59:b3:
                    c8:6a:0c:1d:e7:05:8f:72:32:71:44:bb:00:9d:87:
                    3a:ba:68:d3:46:18:20:c9:0d:4e:82:bf:6b:8d:93:
                    43:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:92:48:59:69:CD:61:62:3C:E6:1D:37:12:4B:8B:3B:3A:12:09:49
            X509v3 Authority Key Identifier:
                keyid:C9:A3:BF:9B:6F:35:14:CA:B3:1F:17:CB:41:F1:E2:0F:89:E2:5C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7S5oA7gWhenZZDoUT9g8oBFvDgCFpzoLAhBXsaVYnrB/0/C9A3BF9B6F3514CAB31F17CB41F1E20F89E25C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9A3BF9B6F3514CAB31F17CB41F1E20F89E25C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7S5oA7gWhenZZDoUT9g8oBFvDgCFpzoLAhBXsaVYnrB/0/323830343a376437303a3a2f33322d313238203d3e20323731353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d70::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:45:41:91:0b:cc:2e:fa:87:8e:5c:a8:e0:42:df:0e:d7:b0:
         d9:e8:d6:33:cf:2b:c8:f9:66:1f:99:08:8d:16:ae:b3:46:c4:
         8d:ce:42:4d:b6:fa:97:02:f6:f2:42:a8:c7:82:f1:a5:ad:a4:
         0a:31:16:6e:2d:02:63:0d:16:6f:da:ca:c2:3d:73:83:68:e1:
         9f:df:4f:19:02:a7:7e:14:b0:1f:7b:9c:e8:c1:00:41:74:ed:
         0c:2b:9d:cb:23:f7:b4:58:57:40:f3:96:84:1d:59:d6:7c:bf:
         79:ac:6c:57:24:85:88:60:79:37:8d:4e:11:2f:66:cc:41:10:
         ae:0f:80:ee:12:0e:26:8b:cd:9a:2b:24:b5:98:b3:37:d5:0d:
         bc:84:87:de:38:79:66:7e:45:9c:12:d5:33:b3:be:17:ae:4a:
         47:f0:a9:6a:1e:22:cf:dc:88:64:60:31:60:9c:50:94:1a:ee:
         cf:ae:59:3f:74:77:70:d1:4f:8e:5e:04:78:e8:25:da:77:bb:
         88:18:53:7c:9e:6a:6e:cd:09:1c:5c:5a:9a:83:d5:55:cf:e8:
         10:0a:c8:d4:f8:b8:e9:1b:1e:0d:f7:04:71:b0:f2:3c:d2:06:
         9b:b8:9f:45:c1:59:37:85:0d:f3:5e:02:57:c9:c9:dd:a2:26:
         49:1c:26:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org