Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/2/323830343a333336343a3530303a3a2f34302d3430203d3e20323635333933.roa
File:                     323830343a333336343a3530303a3a2f34302d3430203d3e20323635333933.roa (raw, json)
Hash identifier:          WvSPtD2L+CxuvAVomAe2mAMn/X1WuuAFGzrhYsZAUBY=
Subject key identifier:   E2:82:BE:1B:81:14:59:31:97:80:FB:3D:2B:19:07:4E:72:0B:9C:D0
Certificate issuer:       /CN=997C15C2A44451CDBD2E1A86BDF8E5CE95CC6A1C
Certificate serial:       19D35D2E57D63E5A3FF4F8CE0B260B787D601A79
Authority key identifier: 99:7C:15:C2:A4:44:51:CD:BD:2E:1A:86:BD:F8:E5:CE:95:CC:6A:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/997C15C2A44451CDBD2E1A86BDF8E5CE95CC6A1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/2/323830343a333336343a3530303a3a2f34302d3430203d3e20323635333933.roa
Signing time:             Mon 15 Jan 2024 00:20:36 +0000
ROA not before:           Mon 15 Jan 2024 00:15:36 +0000
ROA not after:            Mon 13 Jan 2025 00:20:36 +0000
asID:                     265393
IP address blocks:        2804:3364:500::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d3:5d:2e:57:d6:3e:5a:3f:f4:f8:ce:0b:26:0b:78:7d:60:1a:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=997C15C2A44451CDBD2E1A86BDF8E5CE95CC6A1C
        Validity
            Not Before: Jan 15 00:15:36 2024 GMT
            Not After : Jan 13 00:20:36 2025 GMT
        Subject: CN=E282BE1B811459319780FB3D2B19074E720B9CD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1c:ec:cc:74:d6:4d:6b:bf:20:51:d3:b9:3d:
                    48:47:2c:cb:65:2b:58:30:86:0e:98:7d:bf:ec:65:
                    3e:d7:47:ba:39:d5:b4:41:8d:de:a8:c1:5d:e5:ac:
                    d7:5a:7d:fb:ea:c1:d7:b3:2b:90:82:08:bb:cb:7d:
                    d5:af:54:52:0b:76:17:a7:1b:70:5a:f0:13:e4:41:
                    c3:2c:a5:96:9c:33:7e:aa:7e:a1:d8:ec:89:24:c0:
                    ad:a9:ee:35:31:ff:98:e8:5d:c7:d4:a8:8d:bf:8c:
                    4e:18:f9:0e:c4:82:86:06:1c:9d:58:bd:26:4b:8f:
                    53:b3:5d:27:78:a4:77:2c:59:12:88:aa:be:3d:be:
                    72:32:1d:00:41:b5:cc:54:12:f1:09:4a:34:72:94:
                    81:26:f8:d6:94:68:3d:fd:62:4b:35:e1:11:a2:cb:
                    25:26:dd:f8:d9:43:68:9a:aa:fa:02:a7:7d:94:4a:
                    24:3d:fb:d7:c9:1d:ff:cc:23:2a:c3:90:55:f6:d6:
                    db:14:88:29:92:77:88:af:21:28:fa:88:2b:1e:a6:
                    92:d2:ab:4f:70:28:5d:97:43:83:66:34:25:37:69:
                    43:83:df:58:eb:c8:2b:6f:2b:65:5a:9d:c0:5e:1c:
                    e9:ea:62:97:22:80:a3:98:a4:ca:e3:91:db:36:3e:
                    89:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:82:BE:1B:81:14:59:31:97:80:FB:3D:2B:19:07:4E:72:0B:9C:D0
            X509v3 Authority Key Identifier:
                keyid:99:7C:15:C2:A4:44:51:CD:BD:2E:1A:86:BD:F8:E5:CE:95:CC:6A:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/2/997C15C2A44451CDBD2E1A86BDF8E5CE95CC6A1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/997C15C2A44451CDBD2E1A86BDF8E5CE95CC6A1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/2/323830343a333336343a3530303a3a2f34302d3430203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3364:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         9d:d6:77:8a:c7:94:24:81:09:1d:de:9f:b5:27:00:83:d8:3b:
         ef:82:b9:78:ef:79:ac:05:33:7e:5b:db:5b:5f:aa:c3:23:36:
         0e:94:43:8d:eb:9d:9a:1d:c4:04:3b:df:d2:60:79:ff:ea:4a:
         ea:9c:94:6a:e8:c0:29:c6:59:5c:ed:02:45:77:bb:52:e2:9d:
         26:1d:c5:5f:9a:d8:9b:b5:e8:ed:db:5c:26:1d:46:bf:1e:96:
         0b:d0:6e:b7:25:99:9a:ad:33:32:3d:13:b2:33:e9:b8:d3:72:
         8b:a0:7b:1e:10:52:b6:6a:33:a8:1a:dd:49:0b:e5:d0:6a:3a:
         1d:2f:de:5e:23:e2:ab:4a:28:b3:db:d2:37:96:e0:3a:1b:cf:
         17:a2:63:93:b5:23:53:54:0c:b8:4b:15:a6:76:9e:f6:89:03:
         6a:91:16:5b:aa:c1:9e:9b:bb:90:5f:8f:ab:f2:49:51:4f:ab:
         15:d0:4a:f2:ab:1e:db:d7:b7:64:6d:24:4a:fa:de:c5:06:25:
         7d:d1:1f:08:a4:88:5f:03:c1:b7:8e:6e:63:55:ce:bc:76:4a:
         bf:8d:45:67:33:92:3b:d3:94:42:1e:f4:9a:b9:78:2e:b6:ae:
         e5:1e:de:25:33:e1:6d:67:90:20:5c:a3:17:24:da:cb:b4:6e:
         bf:99:ce:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-ams.rpki-client.org