Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/2/323830343a323366303a3130303a3a2f34302d3430203d3e20323634313932.roa
File:                     323830343a323366303a3130303a3a2f34302d3430203d3e20323634313932.roa (raw, json)
Hash identifier:          siRZbY8Vm3+zIV+UFjn7oGV8zHukTM/0ogHQwcSKTWk=
Subject key identifier:   DC:8C:08:2E:5D:2A:56:5C:84:6B:2B:BC:22:9A:6E:9F:15:24:C5:D7
Certificate issuer:       /CN=91B7E6716A44D048F1370CFA1A1700037F360F29
Certificate serial:       3ABBB8A90863B4CB876E0FEFE4F9B7BF02B5F32A
Authority key identifier: 91:B7:E6:71:6A:44:D0:48:F1:37:0C:FA:1A:17:00:03:7F:36:0F:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91B7E6716A44D048F1370CFA1A1700037F360F29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/2/323830343a323366303a3130303a3a2f34302d3430203d3e20323634313932.roa
Signing time:             Thu 04 Apr 2024 12:38:13 +0000
ROA not before:           Thu 04 Apr 2024 12:33:13 +0000
ROA not after:            Thu 03 Apr 2025 12:38:13 +0000
asID:                     264192
IP address blocks:        2804:23f0:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:bb:b8:a9:08:63:b4:cb:87:6e:0f:ef:e4:f9:b7:bf:02:b5:f3:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91B7E6716A44D048F1370CFA1A1700037F360F29
        Validity
            Not Before: Apr  4 12:33:13 2024 GMT
            Not After : Apr  3 12:38:13 2025 GMT
        Subject: CN=DC8C082E5D2A565C846B2BBC229A6E9F1524C5D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a0:32:c9:de:67:12:1f:b6:52:a9:b3:11:e6:
                    14:cd:5d:02:f0:c4:07:c4:24:4a:b3:68:9a:ce:e8:
                    fd:ef:35:95:8a:25:bf:d0:c9:5d:e4:e7:1c:bf:07:
                    11:47:8a:0e:c1:4f:b4:cb:17:a6:8f:f5:ec:bc:e7:
                    a4:2b:94:0d:43:b7:8f:b6:33:f3:aa:9d:9e:9b:de:
                    1d:df:db:87:25:c5:6f:ec:a9:b9:cd:86:a3:8e:6a:
                    66:da:01:98:14:9b:80:43:e8:f0:a0:e9:e1:df:e8:
                    fd:1e:78:19:bb:0c:b2:c1:1c:fb:98:f6:ab:fc:3b:
                    cf:87:96:83:3c:e5:0f:34:7e:44:01:ac:eb:a0:e2:
                    f8:83:06:98:f7:93:1d:fd:99:bd:6b:12:99:7b:03:
                    8e:b4:b3:30:e9:be:29:fb:e0:c1:47:c2:28:19:47:
                    2e:b7:d2:43:36:82:f6:4e:0c:10:e8:dc:2b:0a:c4:
                    e8:5d:6f:48:ef:0b:aa:39:3e:ba:82:22:0b:fd:be:
                    e1:23:da:27:d7:75:ad:55:56:96:eb:50:c3:29:f2:
                    19:9f:6b:1b:17:de:c2:9a:3b:1a:d3:c8:aa:9e:b1:
                    d7:72:7a:ec:2e:34:d0:8d:5f:bf:86:e1:e9:d4:e3:
                    ee:db:ac:98:fb:4b:45:9c:8f:dc:ca:1b:ff:9c:92:
                    8d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8C:08:2E:5D:2A:56:5C:84:6B:2B:BC:22:9A:6E:9F:15:24:C5:D7
            X509v3 Authority Key Identifier:
                keyid:91:B7:E6:71:6A:44:D0:48:F1:37:0C:FA:1A:17:00:03:7F:36:0F:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/2/91B7E6716A44D048F1370CFA1A1700037F360F29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91B7E6716A44D048F1370CFA1A1700037F360F29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/2/323830343a323366303a3130303a3a2f34302d3430203d3e20323634313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23f0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         8e:0f:c6:bf:de:70:83:5c:16:f7:9c:b1:00:b6:92:b7:78:52:
         db:dc:21:43:22:11:5e:e9:3b:17:37:da:dd:c6:e4:1c:87:c1:
         9d:9e:bc:7d:79:d9:9d:04:60:04:3a:a3:b9:28:ef:be:dc:5f:
         60:59:75:81:a7:5f:d6:a9:7c:42:95:e4:4c:d8:9a:a3:4b:0a:
         8f:25:4a:5a:f0:8a:84:b2:89:e7:9e:c5:88:81:d7:24:70:cd:
         8a:2e:ee:12:ef:b9:af:7e:d5:0b:76:2e:46:a4:73:c3:75:f3:
         1f:dd:94:a8:af:e1:ef:4d:1b:ae:ec:01:d9:c3:3c:88:69:02:
         e5:ae:0b:6b:b5:ce:58:16:1b:80:5a:a0:aa:29:0a:51:0b:b4:
         5f:4f:36:c0:a3:47:65:d9:5a:c3:23:33:e4:06:f8:39:8e:ce:
         86:85:1c:ac:ac:c2:06:e7:2f:ab:53:a6:cd:5b:04:dd:9b:23:
         20:a2:3b:40:17:49:8c:69:c7:88:a7:1c:37:f0:4f:56:59:a7:
         6d:39:47:b5:93:c9:1f:b5:bd:7e:85:99:fb:30:d1:7e:05:a6:
         84:fd:01:0d:0c:87:80:b7:11:e4:90:49:c0:6e:46:02:43:2b:
         58:eb:ac:57:e7:66:4a:2d:ee:7c:09:77:53:86:6a:0e:c0:4d:
         17:c7:8a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 02:57:44 2024 by rpki-client on console-ams.rpki-client.org