Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/0/323830343a373234633a3a2f33322d3438203d3e20323730383435.roa
File:                     323830343a373234633a3a2f33322d3438203d3e20323730383435.roa (raw, json)
Hash identifier:          dQpBYUN4T1eIXW7V0wgF9ydv60xuirj28Y3/s+52b9I=
Subject key identifier:   22:8E:4B:F6:4C:F0:15:E5:EA:65:D2:79:55:78:2C:52:57:9E:D4:ED
Certificate issuer:       /CN=33718F506AE5FB47237C2E6EF6823661F4EFE0D7
Certificate serial:       244BF212DB316D849E779EAAB1B6FE840DD4ECE7
Authority key identifier: 33:71:8F:50:6A:E5:FB:47:23:7C:2E:6E:F6:82:36:61:F4:EF:E0:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33718F506AE5FB47237C2E6EF6823661F4EFE0D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/0/323830343a373234633a3a2f33322d3438203d3e20323730383435.roa
Signing time:             Tue 21 Nov 2023 18:56:54 +0000
ROA not before:           Tue 21 Nov 2023 18:51:54 +0000
ROA not after:            Tue 19 Nov 2024 18:56:54 +0000
asID:                     270845
IP address blocks:        2804:724c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:4b:f2:12:db:31:6d:84:9e:77:9e:aa:b1:b6:fe:84:0d:d4:ec:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33718F506AE5FB47237C2E6EF6823661F4EFE0D7
        Validity
            Not Before: Nov 21 18:51:54 2023 GMT
            Not After : Nov 19 18:56:54 2024 GMT
        Subject: CN=228E4BF64CF015E5EA65D27955782C52579ED4ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5b:29:02:1f:ea:d6:c9:32:38:b2:94:eb:11:
                    92:41:ec:8c:00:71:3a:4a:d8:f9:75:55:99:88:b8:
                    da:42:8a:84:6b:18:ca:cc:ee:40:21:bf:dd:9e:be:
                    45:7f:58:41:6d:9d:ee:11:ff:f7:25:d6:7d:1b:cb:
                    25:52:39:72:d7:e3:68:7c:76:a4:af:bc:24:51:b1:
                    ae:7a:a9:7b:51:50:42:1f:be:56:a7:c8:e4:93:99:
                    92:94:5a:8f:73:04:8e:a8:e7:eb:1a:b7:73:77:a2:
                    00:f7:23:bd:21:6d:67:26:b6:b5:52:19:f1:be:0d:
                    ab:bc:d9:f3:19:c1:c2:73:af:38:fe:17:0e:2e:3e:
                    f4:a6:8a:a3:1d:35:11:a8:27:3a:d0:b0:ee:97:3f:
                    ea:28:87:e4:40:b2:92:a6:f5:a8:cd:a4:ca:fd:49:
                    92:fd:4a:21:01:63:ef:18:a0:b7:a8:b6:e6:9e:3a:
                    98:4d:d3:79:e5:74:50:8c:00:f9:8f:74:57:27:5f:
                    c4:13:20:f9:af:ec:54:46:22:91:ec:d0:92:d0:f9:
                    ac:45:3e:82:be:dc:e6:f7:2e:c4:fb:f2:fd:9c:e2:
                    9c:da:95:e1:cb:85:16:9f:70:fb:8b:b1:2f:dd:6f:
                    2b:ac:22:76:df:31:ae:37:f3:f1:0e:09:b8:46:48:
                    ff:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8E:4B:F6:4C:F0:15:E5:EA:65:D2:79:55:78:2C:52:57:9E:D4:ED
            X509v3 Authority Key Identifier:
                keyid:33:71:8F:50:6A:E5:FB:47:23:7C:2E:6E:F6:82:36:61:F4:EF:E0:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/0/33718F506AE5FB47237C2E6EF6823661F4EFE0D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33718F506AE5FB47237C2E6EF6823661F4EFE0D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/0/323830343a373234633a3a2f33322d3438203d3e20323730383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:724c::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:be:e1:de:8f:db:97:b9:ee:e0:17:d7:2d:46:d2:0e:43:45:
         a9:62:43:cd:8b:61:a9:43:84:ae:9c:e6:e7:3a:eb:eb:99:dd:
         c0:bf:45:b1:53:76:e4:ec:a9:5d:c8:47:02:bc:13:76:ea:8e:
         e5:00:48:96:a0:84:8a:e8:92:45:1d:76:62:4d:43:5b:9a:93:
         93:c0:26:4d:f5:16:a5:e1:a9:78:84:3d:6d:88:6f:37:49:54:
         1d:d7:c6:84:44:ce:cc:6e:e5:14:91:1c:27:da:95:b2:a2:95:
         03:2d:a6:87:ca:b6:c2:fb:db:9c:1a:81:a2:79:49:49:0d:51:
         2e:0c:bd:9c:c2:ba:0c:2f:02:e9:ec:05:8a:db:5a:51:6c:c6:
         7e:02:c3:c0:d1:41:17:5a:f8:0d:8c:8c:eb:a5:17:56:4f:47:
         a3:55:38:42:2a:cf:b6:94:66:f3:15:f3:bc:8b:2e:ab:37:9f:
         ef:d6:6a:3a:aa:f9:16:6f:4e:f2:b9:6a:f2:89:b4:4e:4a:9d:
         57:85:7e:d7:99:a7:33:fd:14:13:6d:9a:2a:ce:c9:25:f8:70:
         31:2d:5a:11:d7:a6:26:f2:44:e5:ed:5f:25:ff:e2:21:75:ee:
         05:1e:ab:fb:de:76:6c:a3:51:0e:75:58:ec:5b:93:9f:dc:65:
         05:11:84:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org