Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/323830343a6431303a3a2f33322d3332203d3e203532353933.roa
File:                     323830343a6431303a3a2f33322d3332203d3e203532353933.roa (raw, json)
Hash identifier:          mXfhpw42Ff384DyodVjbcUTA19X55IG4Ix2t8g6J3kA=
Subject key identifier:   00:0C:29:A9:CB:0E:C0:A9:67:1A:8C:F3:B8:EC:C6:60:23:6F:9B:3D
Certificate issuer:       /CN=7C37FFCC1D615C16EF1298A3443587FBF6361EE6
Certificate serial:       21AB79FB83211EA90AC633A9B2126D57CA56111F
Authority key identifier: 7C:37:FF:CC:1D:61:5C:16:EF:12:98:A3:44:35:87:FB:F6:36:1E:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C37FFCC1D615C16EF1298A3443587FBF6361EE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/323830343a6431303a3a2f33322d3332203d3e203532353933.roa
Signing time:             Tue 19 Sep 2023 12:52:19 +0000
ROA not before:           Tue 19 Sep 2023 12:47:19 +0000
ROA not after:            Tue 17 Sep 2024 12:52:19 +0000
asID:                     52593
IP address blocks:        2804:d10::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ab:79:fb:83:21:1e:a9:0a:c6:33:a9:b2:12:6d:57:ca:56:11:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C37FFCC1D615C16EF1298A3443587FBF6361EE6
        Validity
            Not Before: Sep 19 12:47:19 2023 GMT
            Not After : Sep 17 12:52:19 2024 GMT
        Subject: CN=000C29A9CB0EC0A9671A8CF3B8ECC660236F9B3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c7:42:a7:71:97:69:60:01:0d:57:8f:49:61:
                    ca:51:c7:51:de:a2:7f:e6:63:e4:94:98:2b:0d:55:
                    e3:c2:9b:bb:53:1e:b7:a2:dd:fc:6e:40:71:13:00:
                    be:f5:f4:ed:9f:0f:2b:80:e0:ba:a1:47:08:31:ed:
                    d1:58:7e:0e:ee:40:59:ff:78:0e:80:6f:31:42:10:
                    6f:e6:1f:01:83:d6:af:ee:dc:d7:eb:10:5c:6d:ce:
                    ca:7c:b6:d6:d6:66:37:68:3d:c6:f4:79:e0:6e:a3:
                    5e:42:4d:c0:d8:8a:8a:e0:d6:ad:47:ef:b6:ad:c1:
                    71:d0:f3:a6:f6:bc:85:6b:f0:47:24:ff:e1:29:54:
                    fd:8f:a7:8b:6b:35:72:3e:38:02:a3:07:2c:0d:33:
                    95:ef:90:b9:cb:e1:01:4b:3a:99:a8:9f:6a:1c:70:
                    b5:f9:a3:b1:55:b1:4f:f3:60:08:61:3b:92:2f:4c:
                    b2:06:2f:1d:fa:61:7b:36:f1:93:be:80:3c:b0:50:
                    fd:00:4a:d0:37:32:f0:4e:75:d4:d1:ce:8d:bf:78:
                    82:34:f9:1f:d3:62:8c:f5:0a:b5:b6:6c:d0:f2:f2:
                    0b:cb:1f:0a:1c:48:95:d8:22:93:9c:4d:55:b5:d7:
                    f1:12:89:bd:5c:c5:d0:44:95:34:c2:17:55:c1:4f:
                    3f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0C:29:A9:CB:0E:C0:A9:67:1A:8C:F3:B8:EC:C6:60:23:6F:9B:3D
            X509v3 Authority Key Identifier:
                keyid:7C:37:FF:CC:1D:61:5C:16:EF:12:98:A3:44:35:87:FB:F6:36:1E:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/7C37FFCC1D615C16EF1298A3443587FBF6361EE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C37FFCC1D615C16EF1298A3443587FBF6361EE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/323830343a6431303a3a2f33322d3332203d3e203532353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:13:d9:3b:57:8f:1c:75:95:6d:fd:b0:11:7e:73:dc:d9:af:
         dc:24:8b:e2:97:4b:d6:f1:c8:fa:f9:68:e0:1d:fa:79:ec:85:
         eb:a4:45:70:22:cc:fb:5e:bc:80:e0:4c:4d:ee:7c:a5:63:ff:
         2d:17:7d:01:35:c3:79:d8:83:08:b7:15:c1:08:67:ad:b6:d1:
         2e:e8:3a:cc:0e:ea:f4:23:51:ed:d7:78:9a:90:e1:4c:b1:62:
         e2:f7:c2:1d:bb:b2:73:a2:8c:0d:36:f6:c2:3c:6c:b3:be:fe:
         1e:08:e2:04:b9:04:80:a0:c5:08:c0:0b:43:d5:47:8a:57:fb:
         b5:f0:32:f3:42:1f:53:c5:a2:96:d6:12:e3:c8:85:a0:ec:6b:
         2a:2f:7a:d9:4a:4d:25:8b:1d:09:62:c8:d2:3a:88:46:32:37:
         73:26:3c:81:34:2e:da:8e:fc:b4:10:c2:db:43:96:31:83:3b:
         39:6e:a3:6a:1f:3f:f0:06:c8:98:7f:9c:b8:26:3e:93:85:85:
         ba:d4:e0:e4:26:5e:c5:f3:0d:15:87:26:3f:de:36:69:46:54:
         8e:53:b7:26:00:d4:ae:70:7b:58:e4:dd:12:aa:3d:97:b9:96:
         75:b3:56:84:a3:e7:3d:0d:ce:7a:c4:02:cf:03:79:87:8b:5f:
         2f:61:aa:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org