Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a3a2f33322d3336203d3e20323638313331.roa
File:                     323830343a353837383a3a2f33322d3336203d3e20323638313331.roa (raw, json)
Hash identifier:          oYKQTdndq45HLqgr/RwJL9uCUo8wzfRHt7T0IaPyQbU=
Subject key identifier:   57:6B:10:86:C7:33:94:BC:E5:80:D0:B2:42:E5:0E:D1:07:2A:A4:C0
Certificate issuer:       /CN=D05DBE5248CB8C880A34D01683308EF146CC9819
Certificate serial:       7B4351F1654D71A7A8607774545387705F505AF6
Authority key identifier: D0:5D:BE:52:48:CB:8C:88:0A:34:D0:16:83:30:8E:F1:46:CC:98:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D05DBE5248CB8C880A34D01683308EF146CC9819.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a3a2f33322d3336203d3e20323638313331.roa
Signing time:             Thu 03 Aug 2023 21:00:00 +0000
ROA not before:           Thu 03 Aug 2023 20:55:00 +0000
ROA not after:            Thu 01 Aug 2024 21:00:00 +0000
asID:                     268131
IP address blocks:        2804:5878::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:43:51:f1:65:4d:71:a7:a8:60:77:74:54:53:87:70:5f:50:5a:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05DBE5248CB8C880A34D01683308EF146CC9819
        Validity
            Not Before: Aug  3 20:55:00 2023 GMT
            Not After : Aug  1 21:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fd:0c:27:a1:e7:f5:2a:4f:05:9b:ee:11:97:
                    1b:be:91:29:81:77:57:6f:66:a4:d4:ae:90:6f:48:
                    8f:fe:7f:8a:81:3e:9a:58:a7:f0:7a:f8:a3:21:df:
                    2c:23:ad:75:1b:c9:c6:d9:c8:16:17:f7:73:ff:eb:
                    8c:41:55:a6:97:83:dc:88:68:2a:17:64:40:c1:a0:
                    98:97:86:34:65:32:dc:f6:d9:a8:34:83:96:ae:e6:
                    1f:41:42:f2:7f:7c:f0:0f:91:56:fd:f6:fd:88:87:
                    d1:39:01:07:fa:e8:6d:1c:77:82:5c:d9:cb:23:cc:
                    9c:01:a2:eb:04:43:f8:1b:d7:73:f1:89:bb:0c:a1:
                    e0:0d:75:63:a9:f5:44:d8:d2:fe:ff:7a:56:4b:11:
                    48:b2:3a:02:10:35:fb:b2:e9:67:2b:2d:f1:f5:91:
                    cc:ae:83:ce:2d:c3:e5:2f:11:51:22:c8:33:0d:7c:
                    32:a5:cb:90:8d:cf:d6:49:89:1e:f9:2f:30:e9:f6:
                    4e:0f:5e:45:e3:17:22:9b:04:62:7e:4c:32:7a:95:
                    bd:b6:7d:5e:22:b0:79:1b:d0:8b:db:71:bb:84:bd:
                    e3:91:69:07:89:ed:be:0d:ff:ea:12:0a:75:9f:1c:
                    cb:7f:29:2f:27:05:ab:ad:76:9c:8b:f7:d8:e2:01:
                    bc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6B:10:86:C7:33:94:BC:E5:80:D0:B2:42:E5:0E:D1:07:2A:A4:C0
            X509v3 Authority Key Identifier:
                keyid:D0:5D:BE:52:48:CB:8C:88:0A:34:D0:16:83:30:8E:F1:46:CC:98:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/D05DBE5248CB8C880A34D01683308EF146CC9819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D05DBE5248CB8C880A34D01683308EF146CC9819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a3a2f33322d3336203d3e20323638313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5878::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:43:cb:91:05:bb:b4:17:11:37:c5:f9:6b:bb:bf:74:18:7f:
         23:03:7d:2c:a3:19:47:be:a3:66:bd:18:bf:70:7b:9c:2e:8e:
         40:25:4d:50:6d:c9:f1:c0:95:32:a4:d0:bf:b1:90:1a:9b:62:
         e1:19:b1:cc:03:de:5b:f1:6c:68:89:fe:98:0e:ee:fb:ad:74:
         aa:19:00:7c:30:97:51:41:1d:fc:54:4a:cd:b3:59:30:aa:c0:
         b8:93:ac:47:cb:30:a1:fd:37:1d:56:27:ea:9d:f1:9c:82:c9:
         6b:d1:8a:e2:f4:10:02:20:2e:1d:d2:59:b4:eb:1f:be:26:6c:
         e1:80:da:ed:c1:ad:82:41:bb:17:d2:63:ea:7c:e9:2e:fa:70:
         6a:7c:5a:e5:5d:e3:83:0e:7f:1d:d6:8b:dc:e4:5c:ea:c0:b9:
         dc:3e:a9:a6:d5:8a:ab:46:9a:4d:d3:0c:b5:15:58:88:11:f5:
         02:5f:c9:56:bd:26:c9:82:ca:90:c4:ff:72:55:ec:a7:f8:c2:
         f6:d7:31:e3:69:2a:fe:f1:29:6a:36:4f:14:1f:be:68:15:2f:
         f3:6c:ce:2c:3b:9f:aa:d7:a8:2d:8f:20:ea:7e:24:59:7f:af:
         6d:ee:cb:23:8f:74:22:6f:db:33:c3:74:7b:2e:a9:01:4a:b9:
         8f:eb:cb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org