Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/0/323830343a333166633a3a2f33322d3336203d3e203533303232.roa
File:                     323830343a333166633a3a2f33322d3336203d3e203533303232.roa (raw, json)
Hash identifier:          0213SaG9YyJtv7gSQuGH3BeX0eme9QXekpz065M9Ylc=
Subject key identifier:   57:FD:7B:90:26:D2:14:C6:56:6D:49:0B:30:5F:A6:92:23:E6:5B:15
Certificate issuer:       /CN=EF008F90C42A20E9090F9B30F2E957EB35C1D300
Certificate serial:       4FF0ADC4C4213BCF3E4CA17E7EA200DEB2AC1EBC
Authority key identifier: EF:00:8F:90:C4:2A:20:E9:09:0F:9B:30:F2:E9:57:EB:35:C1:D3:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF008F90C42A20E9090F9B30F2E957EB35C1D300.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/0/323830343a333166633a3a2f33322d3336203d3e203533303232.roa
Signing time:             Wed 22 Nov 2023 18:08:48 +0000
ROA not before:           Wed 22 Nov 2023 18:03:48 +0000
ROA not after:            Wed 20 Nov 2024 18:08:48 +0000
asID:                     53022
IP address blocks:        2804:31fc::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f0:ad:c4:c4:21:3b:cf:3e:4c:a1:7e:7e:a2:00:de:b2:ac:1e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF008F90C42A20E9090F9B30F2E957EB35C1D300
        Validity
            Not Before: Nov 22 18:03:48 2023 GMT
            Not After : Nov 20 18:08:48 2024 GMT
        Subject: CN=57FD7B9026D214C6566D490B305FA69223E65B15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:17:b0:09:72:f9:75:13:99:7d:88:a0:3a:11:
                    fb:66:14:0c:6c:67:d2:e6:b6:05:7c:86:65:c1:7f:
                    2e:4c:e9:d1:c6:63:b0:dd:00:bc:7e:1e:40:f4:b8:
                    8e:d3:d7:d8:13:95:19:ff:50:5d:cd:61:08:6b:83:
                    c9:b4:b2:0e:01:10:ea:66:79:87:3f:22:f9:b8:35:
                    88:c4:84:6f:00:9c:02:77:7f:37:41:d9:f6:0d:0f:
                    c3:f7:cd:1d:dc:1e:61:9a:4e:a9:c7:8b:19:ba:53:
                    65:26:b6:51:bd:25:0a:2a:bd:f9:ff:9a:ab:52:2d:
                    aa:7a:8e:66:23:1d:37:d9:59:22:fa:18:97:9a:86:
                    71:0c:c3:93:50:ff:b0:43:cc:38:28:ba:40:40:5f:
                    11:2e:63:8a:77:8e:77:10:9e:a9:d2:be:65:4b:c3:
                    dc:5d:0f:32:f5:e8:21:4b:8f:1b:6e:95:76:13:a5:
                    64:9c:07:5f:ae:fa:a1:38:2f:b2:7e:ef:62:36:c9:
                    24:cc:de:03:f3:29:0b:53:4f:80:9a:80:1c:b3:e8:
                    69:30:5d:49:f7:55:dd:28:e4:60:f0:1d:26:1a:bd:
                    96:06:c5:00:0c:8f:35:a2:93:b6:41:d2:46:36:d7:
                    19:20:e3:ae:6f:33:ff:24:07:e9:26:0c:b4:90:2e:
                    c9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FD:7B:90:26:D2:14:C6:56:6D:49:0B:30:5F:A6:92:23:E6:5B:15
            X509v3 Authority Key Identifier:
                keyid:EF:00:8F:90:C4:2A:20:E9:09:0F:9B:30:F2:E9:57:EB:35:C1:D3:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/0/EF008F90C42A20E9090F9B30F2E957EB35C1D300.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF008F90C42A20E9090F9B30F2E957EB35C1D300.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/0/323830343a333166633a3a2f33322d3336203d3e203533303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:61:91:12:49:ec:0d:11:56:21:00:93:29:b4:eb:6d:19:32:
         f3:31:2c:40:69:11:1f:11:bb:7e:11:7f:4f:9c:b0:e2:77:8b:
         b0:68:95:9e:d5:0b:50:58:67:46:40:f4:9e:ce:21:5e:ca:40:
         a2:38:40:38:69:ec:81:e6:8a:bf:f5:d7:b7:fb:7b:fb:2b:92:
         18:f9:f2:fc:d0:6d:dc:c4:73:95:50:99:29:3b:7c:0e:8a:c8:
         a4:4d:f6:27:5c:bb:3c:cb:c2:ad:4f:84:c2:69:cf:30:6f:80:
         47:a8:62:8d:99:f3:3b:de:ef:ac:ff:a6:cd:ab:2d:4f:e9:64:
         8b:12:e8:52:ab:e1:1e:c2:d1:34:58:8c:d6:d4:ab:b1:35:bb:
         2f:dc:3b:b7:b9:9f:7c:f1:f1:de:27:9d:43:1e:d1:46:03:a7:
         d9:59:ee:52:4e:83:02:68:4c:81:57:df:36:05:cf:94:fc:56:
         89:b0:6e:61:43:82:75:85:99:c1:d9:5d:eb:53:35:d1:fe:90:
         6a:35:a3:fa:e4:a3:c4:c3:aa:1d:4b:27:fd:44:6c:2a:58:04:
         1b:3c:4e:99:72:bf:5f:80:0f:5b:e7:31:60:8a:70:a4:d2:36:
         29:c6:f8:f8:bf:8d:0e:51:45:b6:ee:a0:0e:35:4e:45:4b:e6:
         77:cf:10:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org