Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/323830343a6439303a3a2f33322d3536203d3e2033333536.roa
File:                     323830343a6439303a3a2f33322d3536203d3e2033333536.roa (raw, json)
Hash identifier:          soChV/DPXL6ENALXeu8w9+cEEQCNK8efGNwqBXAAG/8=
Subject key identifier:   26:9C:22:FC:44:3A:38:0C:78:AD:FE:8F:38:00:9B:18:90:D2:92:E5
Certificate issuer:       /CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
Certificate serial:       4D4B7CEC2908598868C5FDA787198B4AD980B195
Authority key identifier: 24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/323830343a6439303a3a2f33322d3536203d3e2033333536.roa
Signing time:             Mon 20 Nov 2023 20:09:01 +0000
ROA not before:           Mon 20 Nov 2023 20:04:01 +0000
ROA not after:            Mon 18 Nov 2024 20:09:01 +0000
asID:                     3356
IP address blocks:        2804:d90::/32 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:4b:7c:ec:29:08:59:88:68:c5:fd:a7:87:19:8b:4a:d9:80:b1:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
        Validity
            Not Before: Nov 20 20:04:01 2023 GMT
            Not After : Nov 18 20:09:01 2024 GMT
        Subject: CN=269C22FC443A380C78ADFE8F38009B1890D292E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6a:61:d8:7c:27:07:d5:d7:6a:41:bf:ce:76:
                    a8:df:88:51:e2:e5:26:64:53:f0:dc:51:a3:77:05:
                    fa:1a:fa:b2:c8:2b:9e:56:9a:d6:e5:1b:77:2a:dd:
                    a0:23:c2:1d:e4:81:d9:29:6a:39:59:44:1f:57:18:
                    9e:91:2b:26:bc:08:cc:50:30:6e:ae:d1:00:a4:8a:
                    22:7a:75:d4:89:0f:d1:43:76:0c:a8:9d:b5:4a:44:
                    d5:41:3f:99:ef:05:a0:62:42:13:c0:77:c7:e1:14:
                    39:15:d5:5b:be:c5:24:d6:12:b9:fb:e7:2b:f5:7a:
                    b3:0c:86:9e:f5:1a:51:b0:45:26:7e:50:df:67:55:
                    e8:96:08:a0:4f:54:4e:50:46:ec:27:da:ff:5c:ac:
                    3b:66:5d:7c:58:ef:5a:67:10:4c:bb:c9:4f:ab:94:
                    91:43:1e:85:f6:a4:5f:b3:c0:93:d8:a0:7e:8c:6b:
                    f8:eb:4e:31:2f:1d:c1:2e:d4:d8:20:21:e6:a0:b1:
                    ca:c2:4e:f5:a4:88:e0:29:9c:e7:b0:40:c6:92:49:
                    39:fa:3b:37:9f:c4:63:bb:f0:62:b0:3f:ce:3d:13:
                    01:55:60:a8:6f:af:60:0f:db:45:8c:bd:48:44:bc:
                    c9:02:16:8b:8a:42:e7:2a:b9:da:34:67:da:03:28:
                    99:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9C:22:FC:44:3A:38:0C:78:AD:FE:8F:38:00:9B:18:90:D2:92:E5
            X509v3 Authority Key Identifier:
                keyid:24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/323830343a6439303a3a2f33322d3536203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:f9:e7:8c:06:73:fc:69:3c:ec:cc:62:26:6e:8d:ca:fc:4d:
         fc:cc:c9:2f:10:b7:9f:4e:3a:ba:12:42:db:0a:93:e2:ac:c6:
         b4:f7:8a:dd:33:63:c8:ca:aa:5f:5a:8a:cd:8d:28:26:6e:7a:
         be:01:c4:bf:88:35:70:3e:25:ab:d2:9e:2f:08:81:8c:85:c4:
         57:e5:42:94:c2:3b:51:d2:13:65:aa:dd:e0:90:e2:90:9d:48:
         e9:8c:e3:a2:5b:a2:25:e1:1c:57:bd:03:70:bc:dc:8a:cb:3a:
         64:82:fd:a8:71:1d:b4:3d:ee:8e:a7:3f:8c:94:cd:0c:6b:a0:
         6f:8e:52:59:a9:92:02:e3:09:3b:21:08:60:20:81:a2:a2:63:
         fb:cd:ac:35:34:01:93:b2:1f:9b:fe:d1:ed:17:bc:4f:99:89:
         44:c1:7c:18:85:0c:0e:dd:6f:b5:9b:b3:17:b1:05:56:fd:fd:
         20:a3:60:1b:5a:92:9f:0a:bb:e4:3a:5a:ef:ba:86:39:61:cf:
         c5:d7:bf:34:8d:40:a8:2c:ae:30:65:12:3a:b6:f8:0e:b4:83:
         56:33:9c:b3:df:41:28:2a:e9:24:1c:2b:7b:ff:47:0b:ee:90:
         ac:08:ab:70:00:6b:12:bb:ae:1c:c0:07:95:a1:59:cb:45:78:
         bf:97:0a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org