Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YALjWqUpXCdVD3C8oSfNw8oiAkXskHtj79AfrPw9cKx/1/323830343a383433633a3a2f33322d3334203d3e20323732323438.roa
File:                     323830343a383433633a3a2f33322d3334203d3e20323732323438.roa (raw, json)
Hash identifier:          PswZYArPt/hbHQuWwOdsZTGVC+cfwQJFmsiuuZV5sG0=
Subject key identifier:   97:AE:2E:DC:44:24:DF:65:E2:C7:19:78:99:BD:B3:48:76:15:BA:AD
Certificate issuer:       /CN=DB724DB3505453957D3CA377AB7C94F919EED6F5
Certificate serial:       43C0F2DA367D26B8A49112424415E720F86AF215
Authority key identifier: DB:72:4D:B3:50:54:53:95:7D:3C:A3:77:AB:7C:94:F9:19:EE:D6:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB724DB3505453957D3CA377AB7C94F919EED6F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YALjWqUpXCdVD3C8oSfNw8oiAkXskHtj79AfrPw9cKx/1/323830343a383433633a3a2f33322d3334203d3e20323732323438.roa
Signing time:             Thu 04 Apr 2024 16:49:00 +0000
ROA not before:           Thu 04 Apr 2024 16:44:00 +0000
ROA not after:            Thu 03 Apr 2025 16:49:00 +0000
asID:                     272248
IP address blocks:        2804:843c::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c0:f2:da:36:7d:26:b8:a4:91:12:42:44:15:e7:20:f8:6a:f2:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB724DB3505453957D3CA377AB7C94F919EED6F5
        Validity
            Not Before: Apr  4 16:44:00 2024 GMT
            Not After : Apr  3 16:49:00 2025 GMT
        Subject: CN=97AE2EDC4424DF65E2C7197899BDB3487615BAAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:42:43:d7:e2:e9:6a:f4:3a:13:05:71:77:5d:
                    44:db:a3:02:22:2f:93:f6:8b:de:68:9d:35:f8:1c:
                    e7:7d:0e:15:f5:38:da:36:b5:2c:6f:05:bb:9c:b3:
                    b6:73:c6:81:f3:65:10:be:37:e1:73:24:ca:5d:36:
                    6d:92:c3:b6:bd:f2:5c:2c:cc:01:10:87:96:d0:3e:
                    67:cf:e6:ec:64:88:fe:71:a5:2f:fb:99:ec:64:16:
                    e4:b1:a5:56:97:06:10:d4:00:c0:bf:04:63:ac:ee:
                    10:f4:54:b1:cf:93:9a:e0:63:83:74:c7:f1:86:11:
                    77:bb:05:9c:01:32:55:16:32:51:05:00:50:ed:99:
                    bc:36:3e:24:a0:22:e8:44:1e:41:e6:b4:ed:3d:41:
                    b0:bc:20:5e:8f:73:67:2d:a3:e6:f1:00:02:35:6a:
                    0c:47:4e:1d:76:f4:7f:0c:b5:eb:16:61:40:3a:f3:
                    fd:ba:a4:2c:df:d2:00:58:db:01:99:a5:e1:1e:9c:
                    c3:bf:ba:50:e3:30:78:f3:94:c7:21:9a:f7:74:85:
                    41:1e:f7:e0:aa:54:da:b9:b9:19:b7:76:62:12:a7:
                    c6:b2:00:12:7c:b5:6d:26:66:2c:d0:dd:d5:f3:f3:
                    5f:81:85:e9:5c:a1:4b:80:a2:60:7e:13:39:38:23:
                    e7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AE:2E:DC:44:24:DF:65:E2:C7:19:78:99:BD:B3:48:76:15:BA:AD
            X509v3 Authority Key Identifier:
                keyid:DB:72:4D:B3:50:54:53:95:7D:3C:A3:77:AB:7C:94:F9:19:EE:D6:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YALjWqUpXCdVD3C8oSfNw8oiAkXskHtj79AfrPw9cKx/1/DB724DB3505453957D3CA377AB7C94F919EED6F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB724DB3505453957D3CA377AB7C94F919EED6F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YALjWqUpXCdVD3C8oSfNw8oiAkXskHtj79AfrPw9cKx/1/323830343a383433633a3a2f33322d3334203d3e20323732323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:843c::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:7d:1f:05:39:2b:fc:39:86:4f:49:a7:7f:c2:e9:70:fd:03:
         e2:92:62:59:b8:a6:81:16:85:3f:d8:68:76:c7:b3:d3:3a:1f:
         3f:46:be:72:43:4b:6d:af:66:26:2a:91:82:b3:09:18:b4:9d:
         85:1e:47:7d:6d:52:53:48:f6:24:d7:d3:6d:3d:b5:30:55:8b:
         ad:f1:9e:90:40:19:3d:80:e9:29:28:ac:32:0e:ee:d8:a4:10:
         b5:b5:12:63:ad:c3:7b:6b:57:dc:6c:4f:89:f2:d8:8a:e4:14:
         26:a3:02:24:85:37:6c:11:c3:60:95:c7:3c:d1:a1:7d:85:cf:
         cc:e2:74:4e:76:da:e6:e9:4b:87:26:52:ec:de:fa:d1:5e:69:
         88:87:97:93:c8:93:18:b3:dc:e0:d4:6e:8d:ad:fc:59:89:6a:
         30:d7:db:4c:4e:3d:00:9a:1a:a9:67:06:67:8c:9b:12:e0:f9:
         2b:1b:97:c5:62:49:b4:cb:b8:1c:16:fc:6d:59:79:79:43:14:
         f8:f5:00:6c:47:33:d5:93:26:e2:70:72:e0:5c:80:83:d1:66:
         fd:4a:25:6b:69:83:9f:70:fa:28:28:b6:10:bb:94:db:e5:30:
         79:4a:b4:18:ba:7a:8e:a8:00:ca:d8:d0:40:42:29:31:d5:c4:
         e4:fa:76:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-ams.rpki-client.org