Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/323830343a336538633a3a2f33322d3430203d3e20323636363035.roa
File:                     323830343a336538633a3a2f33322d3430203d3e20323636363035.roa (raw, json)
Hash identifier:          KuM6U5n6g3uL3io9R2Sq+L2cmpykVNXnE/L67XdBUG4=
Subject key identifier:   9B:10:2D:22:B7:6A:AA:75:4B:43:87:EB:2A:7F:3B:72:B5:10:06:8D
Certificate issuer:       /CN=72D873FAFB0393C93F1E89BAE1E171F762DA38F1
Certificate serial:       5901EC7CA6F5ADE03DB39E0BCB6BD98F42F1F165
Authority key identifier: 72:D8:73:FA:FB:03:93:C9:3F:1E:89:BA:E1:E1:71:F7:62:DA:38:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72D873FAFB0393C93F1E89BAE1E171F762DA38F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/323830343a336538633a3a2f33322d3430203d3e20323636363035.roa
Signing time:             Wed 17 May 2023 16:48:46 +0000
ROA not before:           Wed 17 May 2023 16:43:46 +0000
ROA not after:            Wed 15 May 2024 16:48:46 +0000
asID:                     266605
IP address blocks:        2804:3e8c::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:01:ec:7c:a6:f5:ad:e0:3d:b3:9e:0b:cb:6b:d9:8f:42:f1:f1:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D873FAFB0393C93F1E89BAE1E171F762DA38F1
        Validity
            Not Before: May 17 16:43:46 2023 GMT
            Not After : May 15 16:48:46 2024 GMT
        Subject: CN=9B102D22B76AAA754B4387EB2A7F3B72B510068D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5d:d4:01:a6:6b:53:23:96:2c:7e:44:2c:3f:
                    b0:39:13:fa:85:e5:a1:9f:e0:c4:11:48:1f:0e:d4:
                    e8:ab:bc:ba:ed:dc:0c:11:8a:40:6e:63:cd:d5:be:
                    ee:66:74:a8:51:18:f8:33:b2:88:f1:11:b8:52:22:
                    47:e8:16:7f:d1:11:6f:ee:58:9c:d4:85:72:89:80:
                    25:68:cb:fe:b6:95:62:8c:26:2a:4d:32:8c:b3:ea:
                    fb:15:36:42:b5:d6:a9:17:c0:d0:bf:d1:8b:6d:a5:
                    f5:c9:55:e5:30:95:7a:ec:e6:00:b2:1d:70:8b:ad:
                    b7:d4:f6:b4:67:ec:a7:50:0e:d3:89:29:df:52:b0:
                    b0:88:c5:2d:8c:4b:e3:9e:44:18:70:2c:d6:4c:7d:
                    a3:f3:d4:96:60:08:3d:bb:26:81:b5:cf:05:20:bd:
                    ca:df:2c:50:32:27:54:ac:af:cf:f2:b1:7b:38:2e:
                    25:14:75:4f:86:27:6d:ac:c0:95:81:b6:6f:86:8c:
                    36:eb:1d:2b:dd:63:7a:f0:3e:c8:dc:25:f0:00:cd:
                    5e:9a:c8:cc:14:f2:f3:cf:7a:12:16:84:26:f7:77:
                    1e:b4:07:c0:48:0d:e2:0d:0a:3a:15:01:51:a6:12:
                    ea:39:f7:97:28:5c:ce:a1:f4:1b:5b:df:98:97:bc:
                    f7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:10:2D:22:B7:6A:AA:75:4B:43:87:EB:2A:7F:3B:72:B5:10:06:8D
            X509v3 Authority Key Identifier:
                keyid:72:D8:73:FA:FB:03:93:C9:3F:1E:89:BA:E1:E1:71:F7:62:DA:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/72D873FAFB0393C93F1E89BAE1E171F762DA38F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72D873FAFB0393C93F1E89BAE1E171F762DA38F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/323830343a336538633a3a2f33322d3430203d3e20323636363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:12:40:36:c6:56:cd:23:34:6e:6a:f1:65:a5:48:c8:99:8f:
         40:1d:b4:61:eb:96:e9:e4:18:e6:7f:02:a0:22:ea:cb:68:79:
         58:9a:54:11:d6:ec:74:7d:c0:73:de:b0:ba:0b:99:a4:81:e1:
         be:b4:a0:41:a8:23:29:67:a1:d9:83:13:d5:9f:7c:55:5a:ee:
         30:47:69:c4:1a:55:e6:f5:5f:14:5a:e8:ab:f8:68:24:37:c3:
         61:29:cc:02:b6:c1:4e:40:c3:bd:17:5f:ce:43:b3:3f:19:4a:
         70:f4:a9:31:d3:3e:cb:c3:e4:c2:fe:fd:23:69:3e:25:84:ba:
         30:b4:e5:fa:42:cb:ff:b8:2d:9a:06:da:61:9a:6e:2a:4d:ce:
         eb:ce:13:98:31:83:47:0c:f7:84:48:1e:d6:ca:a6:b0:65:17:
         ef:71:a3:28:35:af:7b:4c:e9:5d:61:ea:65:c9:55:da:7b:fe:
         c3:05:06:9b:4e:64:e3:cc:60:15:6a:b2:c6:fd:2b:d0:65:48:
         00:88:ae:42:56:93:1c:5f:8e:12:04:5e:fe:78:68:76:55:26:
         06:6e:b0:fd:65:5f:d9:9f:ba:d8:c4:ea:d1:a3:02:25:05:f2:
         20:46:89:60:13:6f:82:0a:51:35:1a:22:9e:94:ea:07:12:98:
         75:25:56:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org