Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/0/323830343a353764343a3a2f33322d3438203d3e20323638303839.roa
File:                     323830343a353764343a3a2f33322d3438203d3e20323638303839.roa (raw, json)
Hash identifier:          QnFKWPiySSWCiYLT9UldCFt+V/k61Rs7P/VJmtM5A+Y=
Subject key identifier:   47:23:0F:5D:79:68:BF:2C:4B:FC:EF:21:F7:30:A5:BC:13:BE:6D:17
Certificate issuer:       /CN=AB674C0301AF3A3C804582A5BC3F2AADFE065DD2
Certificate serial:       74D7DE400E494032E8E2C5838FAF11B720D1349B
Authority key identifier: AB:67:4C:03:01:AF:3A:3C:80:45:82:A5:BC:3F:2A:AD:FE:06:5D:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB674C0301AF3A3C804582A5BC3F2AADFE065DD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/0/323830343a353764343a3a2f33322d3438203d3e20323638303839.roa
Signing time:             Thu 22 Jun 2023 22:27:25 +0000
ROA not before:           Thu 22 Jun 2023 22:22:25 +0000
ROA not after:            Thu 20 Jun 2024 22:27:25 +0000
asID:                     268089
IP address blocks:        2804:57d4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d7:de:40:0e:49:40:32:e8:e2:c5:83:8f:af:11:b7:20:d1:34:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB674C0301AF3A3C804582A5BC3F2AADFE065DD2
        Validity
            Not Before: Jun 22 22:22:25 2023 GMT
            Not After : Jun 20 22:27:25 2024 GMT
        Subject: CN=47230F5D7968BF2C4BFCEF21F730A5BC13BE6D17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:67:86:1f:03:14:cb:09:87:5d:ca:96:5d:cd:
                    f0:35:72:c1:1b:98:5c:e2:26:33:80:d3:ec:5a:21:
                    33:5f:c7:8f:33:f2:bf:a4:32:55:d5:0a:bb:89:b1:
                    59:62:83:d3:b0:96:f7:29:df:e6:08:62:43:ed:44:
                    c5:9e:fa:f7:c8:dc:3f:48:de:77:c1:44:39:23:6b:
                    ae:ce:aa:9b:a2:79:56:e5:08:f4:aa:62:21:ae:a9:
                    35:f6:b0:ee:60:41:92:9c:fb:d8:da:e9:e3:65:0b:
                    c2:bb:83:af:91:c9:78:ee:61:a6:ff:ec:8b:02:9c:
                    18:4d:5f:21:f0:fe:c5:b4:96:88:42:bd:3a:d4:80:
                    61:84:4f:6e:f4:43:76:6b:eb:92:de:ae:1a:d8:60:
                    7a:99:d4:bd:e8:ba:6e:c8:98:55:63:93:63:f4:99:
                    59:da:cd:d8:49:bc:92:25:c1:a1:b1:80:af:54:85:
                    98:23:22:cd:14:0d:7c:24:2b:a4:23:3f:f7:12:41:
                    0b:ca:0a:91:5f:4c:ca:29:e2:5e:d5:d7:ff:d7:8a:
                    34:fd:61:1b:46:98:7e:7b:79:f6:46:ee:f6:42:dd:
                    a7:90:a4:be:2b:79:31:bd:99:af:de:97:4d:e4:87:
                    d4:91:54:0a:65:f7:5a:5f:76:db:1c:69:f7:66:ca:
                    8d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:23:0F:5D:79:68:BF:2C:4B:FC:EF:21:F7:30:A5:BC:13:BE:6D:17
            X509v3 Authority Key Identifier:
                keyid:AB:67:4C:03:01:AF:3A:3C:80:45:82:A5:BC:3F:2A:AD:FE:06:5D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/0/AB674C0301AF3A3C804582A5BC3F2AADFE065DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB674C0301AF3A3C804582A5BC3F2AADFE065DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/0/323830343a353764343a3a2f33322d3438203d3e20323638303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:a7:28:0c:db:28:b8:73:30:4f:dd:86:ca:43:5e:68:42:db:
         00:b8:61:ac:f0:79:95:24:46:42:e4:3f:48:ab:2c:07:c1:50:
         82:ca:bf:79:76:03:71:8d:80:97:9b:3b:4c:c5:37:be:d8:f2:
         50:2a:b5:28:a4:e8:ae:4b:49:e5:50:da:13:24:2c:29:85:33:
         05:17:fc:1e:7b:19:98:26:17:aa:5f:d8:1e:96:5e:1d:38:12:
         13:20:1e:e5:1d:99:ff:7c:e3:ca:c5:8b:79:06:cc:7c:18:3b:
         8b:21:c4:36:fa:5a:68:7f:e0:8c:c8:1b:e4:3f:1a:73:3f:54:
         7a:a4:09:72:6a:b6:54:e7:af:00:35:b5:10:36:89:18:ad:2a:
         e9:97:e8:ac:3a:ff:11:3b:d2:74:87:de:0c:ba:cc:7e:02:a9:
         2e:17:ec:0b:5c:84:a2:8f:2a:af:15:b4:d5:3e:6e:ca:0c:2b:
         5b:88:e2:a5:58:11:85:29:15:ea:26:c8:c9:f4:74:7e:11:f3:
         1a:a4:e5:f4:55:13:26:ca:b9:7f:7d:0d:b4:e1:02:c6:3b:22:
         3a:bd:34:75:c2:50:46:70:e3:a6:1f:6d:b3:e7:e5:23:c9:ec:
         e7:13:ea:b7:28:43:31:1e:51:e5:e8:81:91:d8:1a:7f:41:3b:
         ae:62:89:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org