Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YALjWqUpXCdVD3C8oSfNw8oiAkXskHtj79AfrPw9cKx/1/323830343a383433633a353030303a3a2f34342d3434203d3e20323732323438.roa
File:                     323830343a383433633a353030303a3a2f34342d3434203d3e20323732323438.roa (raw, json)
Hash identifier:          u4Hs/1t2WIWy9DorKYMdjRwDLaTo7Y/PxWoYm2cFhac=
Subject key identifier:   28:6E:2D:87:52:18:66:54:6D:A3:FA:76:1A:45:43:79:9D:FE:41:1D
Certificate issuer:       /CN=DB724DB3505453957D3CA377AB7C94F919EED6F5
Certificate serial:       511CA08422563948C2CD4B9AF09DE6810ECF937A
Authority key identifier: DB:72:4D:B3:50:54:53:95:7D:3C:A3:77:AB:7C:94:F9:19:EE:D6:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB724DB3505453957D3CA377AB7C94F919EED6F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YALjWqUpXCdVD3C8oSfNw8oiAkXskHtj79AfrPw9cKx/1/323830343a383433633a353030303a3a2f34342d3434203d3e20323732323438.roa
Signing time:             Thu 04 Apr 2024 16:49:00 +0000
ROA not before:           Thu 04 Apr 2024 16:44:00 +0000
ROA not after:            Thu 03 Apr 2025 16:49:00 +0000
asID:                     272248
IP address blocks:        2804:843c:5000::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:1c:a0:84:22:56:39:48:c2:cd:4b:9a:f0:9d:e6:81:0e:cf:93:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB724DB3505453957D3CA377AB7C94F919EED6F5
        Validity
            Not Before: Apr  4 16:44:00 2024 GMT
            Not After : Apr  3 16:49:00 2025 GMT
        Subject: CN=286E2D87521866546DA3FA761A4543799DFE411D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e4:5d:a1:23:2f:45:be:a1:e6:25:3f:cd:ea:
                    fe:a8:bf:15:a0:da:5f:9d:3c:8c:f0:04:96:13:64:
                    8d:69:8a:c6:4b:1a:60:98:8f:ec:e0:d0:44:d5:62:
                    ff:d0:43:ae:dc:30:14:a6:97:14:9c:03:c5:92:21:
                    c0:94:73:7b:50:98:d8:1c:a9:93:1a:3f:16:c1:5f:
                    25:cb:32:c1:1c:44:92:d6:ac:d3:c1:db:2f:3e:bb:
                    6d:f3:90:aa:17:6a:5e:f3:6b:f3:7d:0a:19:84:3b:
                    a6:ef:7e:01:6e:5d:e1:b6:21:1a:7d:5a:4f:bc:5d:
                    54:ec:dc:fe:05:3b:40:1e:90:b7:25:b6:45:b3:13:
                    9b:82:bd:1e:d9:2b:06:e9:de:40:75:24:bf:bc:9e:
                    cc:50:c8:b3:67:42:ac:b4:ff:a0:5f:a7:aa:77:e3:
                    e1:31:eb:ba:a7:7b:f5:be:04:4f:90:43:a0:06:38:
                    30:63:d6:b3:41:9e:1e:99:01:86:84:09:82:10:62:
                    98:67:43:c0:bd:96:2a:0a:9b:e3:40:e8:6e:89:1f:
                    af:b0:80:13:d4:86:9f:58:74:6e:25:bc:80:8c:c1:
                    a5:06:d6:1a:86:06:db:83:aa:d3:8f:d6:2e:22:eb:
                    10:20:44:a3:de:29:87:73:65:5d:96:e5:f9:18:b8:
                    b3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6E:2D:87:52:18:66:54:6D:A3:FA:76:1A:45:43:79:9D:FE:41:1D
            X509v3 Authority Key Identifier:
                keyid:DB:72:4D:B3:50:54:53:95:7D:3C:A3:77:AB:7C:94:F9:19:EE:D6:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YALjWqUpXCdVD3C8oSfNw8oiAkXskHtj79AfrPw9cKx/1/DB724DB3505453957D3CA377AB7C94F919EED6F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB724DB3505453957D3CA377AB7C94F919EED6F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YALjWqUpXCdVD3C8oSfNw8oiAkXskHtj79AfrPw9cKx/1/323830343a383433633a353030303a3a2f34342d3434203d3e20323732323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:843c:5000::/44

    Signature Algorithm: sha256WithRSAEncryption
         54:d4:b9:50:4c:50:ee:3c:27:4b:6a:83:87:dc:86:3c:e1:5b:
         2a:10:9d:6b:30:2b:87:f9:d0:01:36:7d:80:80:77:62:2b:0c:
         3e:05:8b:0d:48:a5:cd:bc:57:a6:0b:7b:ee:e4:2f:7b:64:be:
         50:d1:fc:bb:07:fb:3f:ed:18:cc:53:e7:b9:9e:ac:a3:85:94:
         cb:e4:c0:b9:d2:e9:1f:fd:d9:10:b9:f1:71:d3:e7:fd:5b:35:
         a6:2e:8a:04:a4:11:78:1b:d3:73:39:ad:6f:64:d5:4a:86:3f:
         d6:da:9b:15:f5:46:21:08:d6:06:af:7e:b5:b1:c0:3a:1c:2d:
         a7:81:a3:6d:9e:03:48:2d:8a:63:62:0d:f8:20:17:ad:26:10:
         b6:28:1c:d0:17:f8:21:be:90:58:3a:0f:df:02:cd:e3:24:23:
         8c:71:eb:e4:53:f0:db:72:68:da:27:35:6c:30:1e:65:de:a0:
         c4:ad:5c:03:2e:bd:56:bc:4f:b4:74:65:1e:2f:08:3c:e8:59:
         b3:44:b9:a9:77:04:11:d7:e8:71:be:94:5a:04:cd:52:78:23:
         72:6b:68:88:85:ff:62:ce:3c:c2:6a:ec:33:79:dd:29:6c:52:
         42:ac:27:6f:c6:b2:ac:26:c7:7c:94:91:d6:ab:55:2a:2b:61:
         d5:f3:53:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-ams.rpki-client.org