Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/0/323830343a333731343a3a2f33322d3438203d3e20323636333838.roa
File:                     323830343a333731343a3a2f33322d3438203d3e20323636333838.roa (raw, json)
Hash identifier:          aD/vqrAQgusXtEf3RZqQI9o41dufj/0VHFtnEJFB97A=
Subject key identifier:   1D:FE:97:A1:0A:2E:0A:58:2B:2A:79:EC:E9:42:88:F0:3E:EA:F6:95
Certificate issuer:       /CN=48A2894AA5501C96F790A8A2BBFD27CDFD55659F
Certificate serial:       02FD7E54C5BC143D55D3AC45FA5835E8A90B2112
Authority key identifier: 48:A2:89:4A:A5:50:1C:96:F7:90:A8:A2:BB:FD:27:CD:FD:55:65:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48A2894AA5501C96F790A8A2BBFD27CDFD55659F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/0/323830343a333731343a3a2f33322d3438203d3e20323636333838.roa
Signing time:             Mon 10 Jul 2023 19:24:56 +0000
ROA not before:           Mon 10 Jul 2023 19:19:56 +0000
ROA not after:            Mon 08 Jul 2024 19:24:56 +0000
asID:                     266388
IP address blocks:        2804:3714::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:fd:7e:54:c5:bc:14:3d:55:d3:ac:45:fa:58:35:e8:a9:0b:21:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48A2894AA5501C96F790A8A2BBFD27CDFD55659F
        Validity
            Not Before: Jul 10 19:19:56 2023 GMT
            Not After : Jul  8 19:24:56 2024 GMT
        Subject: CN=1DFE97A10A2E0A582B2A79ECE94288F03EEAF695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:df:0d:17:be:0c:a2:c6:37:53:67:eb:1c:98:
                    30:87:cc:5f:32:d7:a8:67:34:a9:6a:9b:38:6d:9d:
                    18:6c:e6:32:c6:25:8b:31:49:84:a3:c2:1c:6b:80:
                    b9:41:d7:55:cb:1c:e9:3d:5b:d2:0a:2b:aa:7d:1e:
                    ae:1d:86:81:50:58:a3:21:f6:6d:38:03:a9:ba:9a:
                    37:91:f5:a6:54:10:e5:36:6d:c5:e2:05:a6:06:76:
                    4f:c2:44:9c:e8:34:99:40:8d:e5:a0:8a:05:41:f2:
                    05:6f:d2:9c:71:bb:2c:e3:08:1f:91:85:66:f6:15:
                    7d:a7:c2:ad:41:12:57:52:f6:6e:57:7f:3c:47:a2:
                    cc:72:71:d7:4f:b5:fd:ea:6f:67:8b:db:ce:4e:f8:
                    66:76:d1:f2:fb:ce:6f:fc:8e:db:79:f2:cb:9f:89:
                    e8:70:04:63:db:13:16:6b:88:31:73:e9:c8:74:43:
                    94:23:23:c2:51:39:d4:ba:d6:2c:a9:b0:22:30:0f:
                    35:37:21:82:8e:8a:04:50:0d:a0:c7:c0:5d:56:74:
                    6a:cc:7b:02:a3:54:ee:89:0b:9d:2a:00:a8:3d:c6:
                    8d:67:ba:11:0a:c1:3b:21:d3:65:70:83:43:74:11:
                    da:eb:55:4f:b9:1e:40:31:73:34:52:34:6a:6f:70:
                    25:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FE:97:A1:0A:2E:0A:58:2B:2A:79:EC:E9:42:88:F0:3E:EA:F6:95
            X509v3 Authority Key Identifier:
                keyid:48:A2:89:4A:A5:50:1C:96:F7:90:A8:A2:BB:FD:27:CD:FD:55:65:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/0/48A2894AA5501C96F790A8A2BBFD27CDFD55659F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48A2894AA5501C96F790A8A2BBFD27CDFD55659F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/0/323830343a333731343a3a2f33322d3438203d3e20323636333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3714::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:05:0d:cb:67:ff:41:8a:bc:2d:e0:0e:68:38:81:36:8a:5a:
         b6:6c:16:d1:1b:09:11:9e:dc:53:49:f0:fd:54:f9:5d:23:80:
         92:82:c7:42:1b:a4:83:6e:7d:72:0a:1b:7c:c5:9b:7d:f0:cf:
         35:5e:fc:e3:f2:06:04:c1:25:c4:14:35:50:e0:f8:5d:28:d1:
         bd:63:6a:68:32:bd:f2:0c:f4:10:7c:e8:bd:0a:f6:91:a3:4a:
         72:31:9d:5e:0d:97:2f:3c:b1:76:59:da:5d:e9:eb:ef:8c:c9:
         9e:03:4a:71:0c:1b:ac:05:02:2c:8f:13:7f:81:d5:22:74:b2:
         20:81:ba:41:0a:4b:4f:01:8b:75:0d:2a:40:94:da:5f:5c:0f:
         70:87:d5:2a:5e:03:5b:fb:5f:e8:35:b7:d9:b6:49:e8:61:57:
         71:37:6c:fd:29:ec:47:02:19:12:1b:e5:15:a1:32:7d:8e:6b:
         17:9c:76:cf:90:1c:aa:47:e5:6a:44:7f:3c:f9:45:7b:fb:dc:
         7f:d1:c7:16:97:f2:86:c6:7c:3d:3c:40:86:aa:13:58:26:8e:
         9e:3a:49:8e:6a:3a:9d:82:44:0f:49:ed:9a:3d:69:16:21:10:
         c0:fb:dd:69:a5:9e:35:7e:91:ab:65:05:02:70:41:ab:a4:da:
         6b:8b:42:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org