Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/1/323830343a323366303a3130303a3a2f34302d3430203d3e20323634313932.roa
File:                     323830343a323366303a3130303a3a2f34302d3430203d3e20323634313932.roa (raw, json)
Hash identifier:          X+54K/cZCpMPiLp1WdA3ywOjpOyzeQ7/4sEGuNeNJ1g=
Subject key identifier:   B8:02:43:97:4B:1B:EC:5E:39:A7:34:F0:F1:51:FD:F6:04:02:FA:CB
Certificate issuer:       /CN=7416BDE8982661C0715BA0ADF262F83EB49F1381
Certificate serial:       39C994B152F017A341D23B7EA90EA41414E33270
Authority key identifier: 74:16:BD:E8:98:26:61:C0:71:5B:A0:AD:F2:62:F8:3E:B4:9F:13:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7416BDE8982661C0715BA0ADF262F83EB49F1381.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/1/323830343a323366303a3130303a3a2f34302d3430203d3e20323634313932.roa
Signing time:             Wed 13 Dec 2023 12:38:12 +0000
ROA not before:           Wed 13 Dec 2023 12:33:12 +0000
ROA not after:            Wed 11 Dec 2024 12:38:12 +0000
asID:                     264192
IP address blocks:        2804:23f0:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c9:94:b1:52:f0:17:a3:41:d2:3b:7e:a9:0e:a4:14:14:e3:32:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7416BDE8982661C0715BA0ADF262F83EB49F1381
        Validity
            Not Before: Dec 13 12:33:12 2023 GMT
            Not After : Dec 11 12:38:12 2024 GMT
        Subject: CN=B80243974B1BEC5E39A734F0F151FDF60402FACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bc:66:61:4f:6f:9d:96:1f:92:2f:69:2c:f2:
                    10:75:12:87:74:e2:a3:75:da:26:01:df:e2:f4:81:
                    36:63:c9:2e:ba:4c:fa:58:bd:40:78:0d:4a:c4:d1:
                    cb:a4:f6:69:84:88:95:8e:07:5c:28:7a:6a:30:0f:
                    f3:5e:22:19:3d:b2:bd:bf:d4:82:dc:dd:5c:07:63:
                    fc:ab:ce:e7:bf:5f:f2:cc:76:ad:d7:ad:8b:f7:da:
                    94:7d:6f:b9:a8:61:3a:c1:78:0f:25:31:66:03:ea:
                    cf:ae:95:b6:58:af:92:80:af:fb:f3:b7:db:c3:d7:
                    b0:4e:94:87:de:91:28:fe:00:22:e8:4e:99:7e:46:
                    eb:95:3c:f2:79:a2:51:67:81:bd:6b:ee:93:63:cc:
                    eb:b1:e1:90:e1:94:44:05:00:49:00:9f:ad:4f:94:
                    5d:6b:fe:76:82:bf:72:46:e9:fd:9f:1b:50:5c:82:
                    6f:69:c2:67:8a:10:d3:6c:d2:5f:73:eb:02:04:ed:
                    57:e1:b4:60:f9:3a:98:64:da:6d:e3:80:89:10:be:
                    59:cb:b1:10:40:70:8d:cd:ad:48:1e:39:01:11:19:
                    dd:4a:c8:fa:3c:5a:9b:86:8e:89:5f:c7:96:ca:74:
                    0a:4c:47:47:9e:09:8a:89:97:57:fd:81:09:be:45:
                    82:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:02:43:97:4B:1B:EC:5E:39:A7:34:F0:F1:51:FD:F6:04:02:FA:CB
            X509v3 Authority Key Identifier:
                keyid:74:16:BD:E8:98:26:61:C0:71:5B:A0:AD:F2:62:F8:3E:B4:9F:13:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/1/7416BDE8982661C0715BA0ADF262F83EB49F1381.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7416BDE8982661C0715BA0ADF262F83EB49F1381.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/1/323830343a323366303a3130303a3a2f34302d3430203d3e20323634313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23f0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:c7:c2:ed:88:cb:3f:94:54:f4:74:02:63:d8:3f:71:b4:ff:
         ce:54:78:f9:5d:fc:ff:fa:cf:ee:81:43:0f:da:9d:9f:5a:ae:
         b7:f0:2f:b1:48:49:44:d3:e1:e8:2b:37:ff:b5:c6:e8:76:48:
         35:ba:13:a3:7e:10:ab:be:dc:c1:76:61:33:8c:2c:73:09:d2:
         66:2f:83:59:da:fd:23:fd:d5:fe:ae:b1:5b:c2:24:7b:07:af:
         31:67:9d:d8:70:28:fa:ec:13:e9:78:ee:54:a6:41:3a:b6:46:
         1e:08:1e:80:11:6b:73:25:74:77:7b:9c:30:a9:be:8f:f7:3c:
         38:27:2b:c8:a2:c2:c2:ff:5c:89:1f:a5:15:e8:93:c5:3e:0e:
         c0:16:a4:45:2e:d4:f2:9b:7b:64:11:ed:19:58:98:54:94:77:
         2a:40:e6:69:6d:e1:ff:23:fd:c9:9c:fc:72:33:b9:63:0c:85:
         dd:da:34:15:0b:11:78:91:ba:f9:9f:c8:4c:fa:29:08:25:e0:
         02:1d:58:c3:ee:db:63:17:b8:ad:c7:d0:0c:d6:b5:81:39:1e:
         1e:13:c2:aa:a5:7e:40:8f:4d:13:47:87:2e:13:75:d0:6c:c0:
         b1:2c:54:c9:58:fa:4e:9a:8d:93:e5:22:20:91:4b:a1:8d:f6:
         44:44:41:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org