Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/323830343a333438303a3a2f33332d3333203d3e20323635343632.roa
File:                     323830343a333438303a3a2f33332d3333203d3e20323635343632.roa (raw, json)
Hash identifier:          1aheMt0rWg1b228dKnL+4XnM/usJAwZ4xEyAVh7wGTo=
Subject key identifier:   81:D3:98:1E:93:A5:7C:92:5E:86:F3:7C:48:B2:62:52:F3:93:25:14
Certificate issuer:       /CN=1BD78CF68D71E5E540716C9B42A8969E9BE28F22
Certificate serial:       53B3CECBD3058E94C5645982A29DA5447383F9BB
Authority key identifier: 1B:D7:8C:F6:8D:71:E5:E5:40:71:6C:9B:42:A8:96:9E:9B:E2:8F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BD78CF68D71E5E540716C9B42A8969E9BE28F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/323830343a333438303a3a2f33332d3333203d3e20323635343632.roa
Signing time:             Mon 26 Jun 2023 13:08:05 +0000
ROA not before:           Mon 26 Jun 2023 13:03:05 +0000
ROA not after:            Mon 24 Jun 2024 13:08:05 +0000
asID:                     265462
IP address blocks:        2804:3480::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b3:ce:cb:d3:05:8e:94:c5:64:59:82:a2:9d:a5:44:73:83:f9:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BD78CF68D71E5E540716C9B42A8969E9BE28F22
        Validity
            Not Before: Jun 26 13:03:05 2023 GMT
            Not After : Jun 24 13:08:05 2024 GMT
        Subject: CN=81D3981E93A57C925E86F37C48B26252F3932514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:dd:22:b3:0b:9c:34:28:28:86:6c:44:a2:f9:
                    2b:2f:31:df:b0:8c:d6:bb:c7:56:7c:f5:06:0a:ff:
                    42:18:50:15:99:7f:c7:ac:99:7b:c9:8c:4a:ac:54:
                    0f:6c:3d:ff:11:98:fe:fb:db:03:ee:eb:80:94:91:
                    ca:17:00:9d:a0:37:3d:60:dc:83:30:6e:ee:e8:e0:
                    9b:bc:bf:d7:ce:95:00:07:57:4e:0f:e4:37:65:5c:
                    23:db:cc:c6:00:e3:a7:15:89:a5:7a:35:de:2d:2d:
                    dd:69:a5:0c:17:ba:40:1f:b1:7e:b5:fa:db:93:38:
                    27:58:7c:dd:0d:1a:35:d0:e9:92:e6:b2:ed:23:3f:
                    22:14:e2:73:da:3a:d0:54:9a:07:02:d8:7e:49:3a:
                    a0:7f:b3:13:bd:b4:35:1c:43:aa:43:ec:1e:5f:cf:
                    36:0a:05:a2:88:cb:54:f7:c5:77:c9:0e:c0:d5:6c:
                    d5:e4:7f:bd:ef:1d:7b:e0:38:ef:8f:5e:7a:64:d5:
                    49:19:c0:3d:e3:62:ae:03:76:dc:80:08:f5:b3:0b:
                    ca:50:93:ef:d3:94:88:a5:47:a8:b8:47:eb:6a:a4:
                    c0:67:7e:d1:14:b6:22:36:b0:55:5b:6b:82:bf:f3:
                    39:3c:93:45:f3:41:4d:94:93:08:f1:59:dc:5a:81:
                    e6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D3:98:1E:93:A5:7C:92:5E:86:F3:7C:48:B2:62:52:F3:93:25:14
            X509v3 Authority Key Identifier:
                keyid:1B:D7:8C:F6:8D:71:E5:E5:40:71:6C:9B:42:A8:96:9E:9B:E2:8F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/1BD78CF68D71E5E540716C9B42A8969E9BE28F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BD78CF68D71E5E540716C9B42A8969E9BE28F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/323830343a333438303a3a2f33332d3333203d3e20323635343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3480::/33

    Signature Algorithm: sha256WithRSAEncryption
         60:1c:76:04:c8:4e:2e:7a:3a:ac:9a:c2:5b:a3:b4:6a:52:07:
         32:9f:fd:bf:57:72:a6:6f:a2:44:27:4d:6a:e7:fd:9f:c3:33:
         77:79:ee:a7:bc:be:9a:fb:ba:9e:7f:5c:5d:da:c7:bf:65:35:
         c9:c7:aa:1b:d8:51:ef:e9:71:c3:ee:a7:55:17:cf:13:61:0c:
         81:86:18:5d:3b:f3:8b:bf:77:18:e9:e2:79:21:3c:7b:74:d3:
         e7:87:51:6b:f0:a4:a5:fc:b9:d3:6c:42:73:c3:6a:9b:ea:78:
         47:a7:02:08:49:fc:e4:8f:08:94:b1:76:27:4a:38:dd:da:d8:
         a0:8f:7d:99:66:aa:62:73:74:b1:77:e6:ac:bd:59:ba:2f:91:
         4f:10:c2:7f:45:89:8d:cb:52:a8:09:87:bd:90:6c:35:46:78:
         99:28:6a:b4:22:93:b1:b4:d8:a5:6e:a9:c1:75:6b:2a:1a:16:
         99:a2:e2:c3:87:f7:83:bb:72:7f:35:24:69:d0:a2:6c:16:1d:
         07:d8:0c:09:7d:f2:8d:9d:98:e0:b7:54:7a:2e:fe:5f:de:b9:
         02:83:5f:e7:54:6e:69:1a:80:9c:18:c2:48:c7:f1:47:ec:49:
         ec:70:06:d7:5d:5a:ad:0a:bd:d1:71:eb:ce:7b:55:e3:9c:94:
         10:2f:0c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-ams.rpki-client.org