Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/323830343a6439303a3a2f33322d3536203d3e20323033.roa
File:                     323830343a6439303a3a2f33322d3536203d3e20323033.roa (raw, json)
Hash identifier:          UU7BHBxc2iMupA5KXQYLFv+psl7kiPHNRij6qjJraEo=
Subject key identifier:   FB:35:81:FD:9F:A8:0A:6D:F2:87:32:2F:0D:B6:DF:27:30:08:8D:64
Certificate issuer:       /CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
Certificate serial:       6754ECEE8C0A66CF92401EBC4B74975A8ACC8B4D
Authority key identifier: 24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/323830343a6439303a3a2f33322d3536203d3e20323033.roa
Signing time:             Mon 20 Nov 2023 20:09:01 +0000
ROA not before:           Mon 20 Nov 2023 20:04:01 +0000
ROA not after:            Mon 18 Nov 2024 20:09:01 +0000
asID:                     203
IP address blocks:        2804:d90::/32 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:54:ec:ee:8c:0a:66:cf:92:40:1e:bc:4b:74:97:5a:8a:cc:8b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
        Validity
            Not Before: Nov 20 20:04:01 2023 GMT
            Not After : Nov 18 20:09:01 2024 GMT
        Subject: CN=FB3581FD9FA80A6DF287322F0DB6DF2730088D64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9f:32:fd:83:5a:9c:42:07:04:3f:b9:de:81:
                    bd:7c:e6:d6:d7:8f:3e:13:7a:33:af:c6:b0:30:a1:
                    0b:e2:91:76:c9:37:84:aa:a8:90:9e:6b:97:2c:d2:
                    99:2c:14:8b:e1:99:d8:04:89:52:57:f4:a0:73:8b:
                    51:1a:38:94:0d:7b:8a:00:80:e3:4e:38:fd:8c:a1:
                    7e:ef:de:df:27:b0:a8:69:81:2c:6d:8d:d2:42:de:
                    e7:22:27:37:84:68:80:73:d2:03:d4:7a:b8:ef:7c:
                    8e:c1:d6:c3:86:46:80:b0:3f:69:5c:93:19:a9:a9:
                    81:7f:4e:c0:1c:eb:8b:88:9a:60:63:a6:4b:fa:49:
                    3f:85:9d:c3:d3:e5:76:b8:b0:65:8e:5f:a5:c0:bd:
                    6e:dc:dc:b0:d8:4b:07:05:47:d1:44:52:a5:13:ec:
                    a6:37:2d:d9:41:a0:44:3a:23:ed:c8:fc:2a:2f:2b:
                    0d:87:bc:83:6c:7d:f2:a2:e5:05:78:1a:36:70:40:
                    73:26:e3:62:d6:f2:b0:ff:0c:49:c8:1c:1a:2b:84:
                    31:ae:2f:12:d9:d6:07:c7:2f:92:59:dd:f2:f1:08:
                    11:b5:53:e6:2e:83:6c:b5:b6:60:d7:71:0d:12:ea:
                    f4:ff:d3:32:4d:d3:2d:4c:05:73:32:ab:ce:7c:a5:
                    25:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:35:81:FD:9F:A8:0A:6D:F2:87:32:2F:0D:B6:DF:27:30:08:8D:64
            X509v3 Authority Key Identifier:
                keyid:24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/323830343a6439303a3a2f33322d3536203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:60:7b:55:05:98:a5:a6:9d:5d:57:f4:1b:8e:38:30:c8:ee:
         de:36:af:ad:12:7f:e2:8f:ac:37:ee:c2:0b:f0:b7:0b:5c:5c:
         0d:00:93:c9:7c:65:db:95:94:bd:4b:e8:e9:94:cd:ea:22:19:
         5c:05:da:4b:17:d0:3b:19:b6:68:14:e4:ec:80:46:31:03:39:
         db:2a:61:e5:97:41:94:d1:88:81:e4:9e:5e:2b:af:d0:46:e4:
         70:59:6d:8c:f5:50:23:f7:44:98:14:11:6c:a0:98:f8:a9:b2:
         b2:eb:0b:ff:81:36:cf:76:0a:07:06:58:b1:1f:0e:0a:6f:31:
         ca:fb:a5:04:06:7a:c3:aa:b8:63:5f:4d:45:9a:4c:6d:14:bb:
         a1:28:bc:13:33:8e:7d:ef:9e:65:70:f1:91:08:2b:ce:4a:8e:
         17:36:37:83:9c:5d:09:c0:cd:f0:d0:f2:45:70:ed:95:f7:0e:
         bb:f9:97:06:68:7f:b6:07:e3:dd:2e:ae:ec:33:f2:54:a7:01:
         d4:8e:3c:f6:04:da:07:bd:c5:0c:cc:5b:64:6e:59:05:3a:f8:
         01:5c:f9:9e:89:f2:7b:c7:41:67:84:7d:85:44:da:6a:4c:8a:
         a1:a8:b6:6e:d0:0f:3a:79:fd:f4:aa:64:50:bd:8f:fc:bb:4e:
         fb:ec:50:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org