Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/0/323830343a323961303a3a2f33322d3334203d3e203238323139.roa
File:                     323830343a323961303a3a2f33322d3334203d3e203238323139.roa (raw, json)
Hash identifier:          sHdry4D5IeQajd/A5FxkWsNN5b4WsZ7EJmAfZlsqLMI=
Subject key identifier:   1F:16:A1:38:76:C9:CC:00:80:FD:D4:E8:EE:4F:FE:4D:0B:BD:FF:87
Certificate issuer:       /CN=D3FE378BD4E7B3E9AF1C47D245624178DC4E9709
Certificate serial:       109A8790040441E45C564D26ED927E87C8CB6033
Authority key identifier: D3:FE:37:8B:D4:E7:B3:E9:AF:1C:47:D2:45:62:41:78:DC:4E:97:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3FE378BD4E7B3E9AF1C47D245624178DC4E9709.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/0/323830343a323961303a3a2f33322d3334203d3e203238323139.roa
Signing time:             Fri 08 Dec 2023 13:39:55 +0000
ROA not before:           Fri 08 Dec 2023 13:34:55 +0000
ROA not after:            Fri 06 Dec 2024 13:39:55 +0000
asID:                     28219
IP address blocks:        2804:29a0::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:9a:87:90:04:04:41:e4:5c:56:4d:26:ed:92:7e:87:c8:cb:60:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3FE378BD4E7B3E9AF1C47D245624178DC4E9709
        Validity
            Not Before: Dec  8 13:34:55 2023 GMT
            Not After : Dec  6 13:39:55 2024 GMT
        Subject: CN=1F16A13876C9CC0080FDD4E8EE4FFE4D0BBDFF87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d9:44:ff:7e:3c:5f:69:44:4b:a3:89:3c:26:
                    c2:75:ee:59:6b:e1:29:84:ec:3f:44:44:da:43:07:
                    67:07:41:18:c6:b2:ea:79:91:13:41:03:52:a4:8e:
                    91:e3:4e:cc:7f:5a:29:49:1b:fc:15:38:2a:38:fe:
                    07:a1:22:2b:06:36:06:7c:b1:14:25:a2:52:2f:a4:
                    02:c9:07:b9:fb:c6:18:64:16:0c:dc:33:0d:ea:52:
                    2e:66:f3:bb:9f:9a:26:9f:3d:a8:ce:8d:25:cd:ab:
                    48:b4:25:b2:17:b9:c3:15:5c:34:63:b8:56:75:34:
                    e9:67:01:19:9a:f5:a3:67:d5:64:4a:b6:75:eb:65:
                    b2:a0:25:10:7c:b2:52:21:da:76:61:81:62:f0:0e:
                    74:97:f8:02:d5:28:46:bb:86:28:d0:08:d6:ad:07:
                    a6:79:3d:f5:52:96:92:c0:a6:14:0f:bb:3b:d1:80:
                    ee:89:85:cb:fe:61:ab:bd:ef:10:01:e1:5b:4e:4a:
                    11:02:06:c8:fe:0a:7f:1c:2f:4e:c2:16:83:01:07:
                    b2:94:89:69:51:d3:72:77:20:8c:05:f6:fe:3d:85:
                    cf:bf:86:5b:80:97:fa:3b:d9:16:dd:ba:47:78:d1:
                    3f:64:e9:88:1a:a9:d4:4e:64:e6:75:85:dd:d6:fb:
                    b8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:16:A1:38:76:C9:CC:00:80:FD:D4:E8:EE:4F:FE:4D:0B:BD:FF:87
            X509v3 Authority Key Identifier:
                keyid:D3:FE:37:8B:D4:E7:B3:E9:AF:1C:47:D2:45:62:41:78:DC:4E:97:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/0/D3FE378BD4E7B3E9AF1C47D245624178DC4E9709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3FE378BD4E7B3E9AF1C47D245624178DC4E9709.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/0/323830343a323961303a3a2f33322d3334203d3e203238323139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:29a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:b7:02:a8:02:34:f1:ba:e9:b1:f4:d7:cf:b7:c0:4f:84:57:
         44:06:33:5b:10:dc:1f:27:71:f2:d0:9b:cd:3f:f0:a6:a6:ee:
         8a:cc:1a:84:39:2e:27:23:b0:0b:3d:83:06:30:28:93:15:6a:
         eb:e4:4a:ab:df:9a:01:b8:8a:9a:64:e1:dd:55:07:5d:fa:6b:
         95:6a:28:02:cb:a9:f1:af:54:c1:64:a3:05:dd:0a:be:aa:95:
         06:84:6e:e6:94:71:6a:cf:b1:af:47:66:e4:f3:40:39:fb:56:
         02:26:9d:3e:a8:27:37:41:1d:00:db:0b:1b:f7:c1:eb:97:72:
         95:ff:25:51:2f:de:24:f2:a2:6b:09:db:15:18:fe:78:64:fd:
         f8:81:b8:e4:a1:26:df:d2:79:6c:9a:d5:11:f8:4e:e8:bd:28:
         08:e7:33:57:10:b2:ff:f3:00:5a:7d:37:a3:6c:41:9d:65:2f:
         9b:b0:89:6d:3a:13:39:e7:23:db:3c:94:0a:48:f3:64:c7:c5:
         1f:e7:76:76:c1:08:9f:15:e8:bd:ae:0c:0e:4b:5e:e9:0b:b8:
         e3:66:b8:f6:c4:e6:4c:f2:4c:fb:22:e5:b2:3f:95:16:b0:50:
         18:75:2c:6c:80:21:71:c6:28:58:3f:b7:08:f3:28:79:bf:69:
         69:3c:6d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org