Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/323830343a6231383a3a2f33322d3634203d3e203532393431.roa
File:                     323830343a6231383a3a2f33322d3634203d3e203532393431.roa (raw, json)
Hash identifier:          nDlnLZG1YtAzaKrP0HcYKiHjEK3sZlxgnFcWs34khkM=
Subject key identifier:   04:10:91:80:FF:2F:50:28:D9:D6:AD:52:A6:D9:5A:D5:E5:00:F1:3D
Certificate issuer:       /CN=89D3BA1A689174A62F9425DDD0F6892EC0EE6E0A
Certificate serial:       7D5DFDF96AE3D4097C8657B54E51D8CED27A9A69
Authority key identifier: 89:D3:BA:1A:68:91:74:A6:2F:94:25:DD:D0:F6:89:2E:C0:EE:6E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/89D3BA1A689174A62F9425DDD0F6892EC0EE6E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/323830343a6231383a3a2f33322d3634203d3e203532393431.roa
Signing time:             Mon 24 Jul 2023 04:00:00 +0000
ROA not before:           Mon 24 Jul 2023 03:55:00 +0000
ROA not after:            Mon 22 Jul 2024 04:00:00 +0000
asID:                     52941
IP address blocks:        2804:b18::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5d:fd:f9:6a:e3:d4:09:7c:86:57:b5:4e:51:d8:ce:d2:7a:9a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89D3BA1A689174A62F9425DDD0F6892EC0EE6E0A
        Validity
            Not Before: Jul 24 03:55:00 2023 GMT
            Not After : Jul 22 04:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b1:d0:97:14:97:ad:4d:d7:63:8d:0c:6e:ba:
                    d7:24:93:66:1e:c8:4f:d3:28:0b:1c:95:b0:fd:df:
                    09:a2:7a:2f:75:52:6b:af:bf:20:24:97:40:47:3e:
                    2b:73:ce:19:42:15:ea:c0:cb:d9:cc:cb:61:4c:27:
                    86:76:2a:8c:f9:d0:3f:42:72:60:e2:2d:1f:a4:74:
                    a5:fb:51:9a:de:0c:da:3b:e8:0a:98:c0:ca:c4:0a:
                    10:dd:a8:c0:65:f8:ad:f4:c6:01:e8:97:bb:50:5d:
                    6f:27:dd:78:33:03:a6:a8:ce:5d:8c:c7:90:fb:b1:
                    6b:48:b5:8e:c1:e1:62:64:e0:7c:9f:9e:26:04:2c:
                    b0:11:e1:1f:fd:18:89:53:cb:f1:ab:b2:42:aa:f5:
                    50:b9:83:f7:ba:83:39:0a:df:b9:70:9d:16:df:5a:
                    56:bf:86:12:67:77:c6:29:b7:e1:e8:4b:d0:99:fd:
                    62:18:4c:5c:6c:30:4d:be:da:9a:f9:38:94:fe:1e:
                    32:0c:24:fa:ff:30:6b:db:05:a6:93:fa:e0:2a:e3:
                    36:e9:19:bf:f4:c1:fc:06:72:06:94:1e:c0:b9:bb:
                    cd:96:aa:04:99:98:e5:69:a6:54:d8:e7:36:d8:22:
                    ec:17:74:f0:55:95:57:c8:c9:f6:c2:9f:4d:a9:4d:
                    e4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:10:91:80:FF:2F:50:28:D9:D6:AD:52:A6:D9:5A:D5:E5:00:F1:3D
            X509v3 Authority Key Identifier:
                keyid:89:D3:BA:1A:68:91:74:A6:2F:94:25:DD:D0:F6:89:2E:C0:EE:6E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/89D3BA1A689174A62F9425DDD0F6892EC0EE6E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/89D3BA1A689174A62F9425DDD0F6892EC0EE6E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/323830343a6231383a3a2f33322d3634203d3e203532393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b18::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:0b:40:e8:30:b3:3f:43:26:87:05:61:75:58:5f:f9:32:84:
         05:81:2f:c7:96:25:ab:0a:b2:90:cc:27:e7:1f:ff:02:bc:38:
         14:a7:a7:05:56:a2:35:e7:01:b0:1d:66:a1:ad:24:6a:bd:da:
         e8:72:dc:f6:56:35:83:23:91:33:90:24:4f:df:83:d4:78:b3:
         ee:11:76:34:96:ea:f7:85:26:c6:40:51:96:a5:04:4a:9e:ce:
         e5:d7:7d:6e:fa:55:d5:5f:a8:42:f7:41:07:54:3c:12:6f:27:
         e8:4f:e9:12:6b:da:1d:95:9e:30:76:4c:bf:8e:d8:53:f5:f6:
         7d:7b:be:a6:8f:49:20:fa:f4:08:bd:98:ad:7a:a8:5f:05:4f:
         13:41:2e:9a:72:dc:7f:af:14:8d:4c:7e:26:58:ef:51:28:fe:
         87:16:98:70:fa:b2:84:21:9a:cf:1d:3f:f2:cb:af:62:06:35:
         f0:90:f3:30:ca:54:23:09:12:b1:e0:a4:32:8a:70:d8:74:6f:
         ca:00:59:33:c4:71:12:e2:7b:7d:0a:30:39:fa:33:32:19:b4:
         da:fb:92:5a:b5:1c:4b:89:c4:69:58:4b:8a:46:3f:da:e9:9b:
         f8:c6:56:d9:c3:9b:df:c5:97:40:af:94:3e:99:aa:cc:c6:fe:
         ec:13:a3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org