Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/323830343a333433343a3a2f33322d3334203d3e20323635343432.roa
File:                     323830343a333433343a3a2f33322d3334203d3e20323635343432.roa (raw, json)
Hash identifier:          b+a3qsApURsIoCxUYBOc2B75qFLbIuIzzIS5y32Fzww=
Subject key identifier:   EB:BB:B5:E4:DE:EF:57:0B:2B:1D:61:35:78:20:57:68:77:46:DC:D6
Certificate issuer:       /CN=96241E2937532ADFA240CD6F40331679CB3DEFD8
Certificate serial:       2291CCFFEA4AA9EE12D8DC8ED5B72744128D99D2
Authority key identifier: 96:24:1E:29:37:53:2A:DF:A2:40:CD:6F:40:33:16:79:CB:3D:EF:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96241E2937532ADFA240CD6F40331679CB3DEFD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/323830343a333433343a3a2f33322d3334203d3e20323635343432.roa
Signing time:             Mon 31 Jul 2023 17:56:10 +0000
ROA not before:           Mon 31 Jul 2023 17:51:10 +0000
ROA not after:            Mon 29 Jul 2024 17:56:10 +0000
asID:                     265442
IP address blocks:        2804:3434::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:91:cc:ff:ea:4a:a9:ee:12:d8:dc:8e:d5:b7:27:44:12:8d:99:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96241E2937532ADFA240CD6F40331679CB3DEFD8
        Validity
            Not Before: Jul 31 17:51:10 2023 GMT
            Not After : Jul 29 17:56:10 2024 GMT
        Subject: CN=EBBBB5E4DEEF570B2B1D6135782057687746DCD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d7:e4:ce:5d:76:f6:38:21:2c:ed:df:89:30:
                    39:23:43:f3:ac:3f:f4:f2:f0:70:ca:72:24:88:3f:
                    1b:30:f6:00:53:76:79:bd:06:71:43:5d:1f:49:8b:
                    b7:50:dd:12:89:b5:52:1d:8a:1e:a8:db:ba:38:d1:
                    d0:d0:56:0a:17:d3:17:03:2b:a2:bb:50:f0:29:5d:
                    a9:60:e0:9a:b6:7b:aa:df:ed:f2:4b:83:a1:61:17:
                    45:fd:f4:06:ae:a4:c5:2f:ca:21:c8:40:8d:44:61:
                    14:c1:b2:43:d9:34:a8:b0:96:e8:e0:40:d2:4d:5e:
                    98:59:a2:4c:e1:0a:dd:64:ac:5f:47:71:ef:97:ac:
                    7b:15:4f:6e:8b:54:35:e9:2e:62:ba:08:3b:fb:be:
                    29:06:e8:e9:1b:d3:35:21:d8:df:de:2f:32:be:a2:
                    f8:43:1f:55:4d:ab:f9:00:21:c4:f2:f1:c6:71:23:
                    66:cd:da:4a:46:43:67:18:bd:42:14:53:4d:32:cc:
                    67:69:c5:21:83:4c:be:8a:7b:ec:73:19:56:b3:8d:
                    d5:c6:78:d8:a0:f9:2c:10:03:7e:0e:eb:7b:52:78:
                    af:bc:d1:46:ef:8c:0f:5d:92:14:b4:5a:2a:1f:ea:
                    14:0f:7a:9a:a4:cb:80:f2:7d:b2:56:b9:5e:21:f6:
                    27:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:BB:B5:E4:DE:EF:57:0B:2B:1D:61:35:78:20:57:68:77:46:DC:D6
            X509v3 Authority Key Identifier:
                keyid:96:24:1E:29:37:53:2A:DF:A2:40:CD:6F:40:33:16:79:CB:3D:EF:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/96241E2937532ADFA240CD6F40331679CB3DEFD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96241E2937532ADFA240CD6F40331679CB3DEFD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/323830343a333433343a3a2f33322d3334203d3e20323635343432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3434::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:ce:b4:b2:cf:79:99:2f:dc:7b:7f:c0:f5:d4:58:44:75:c2:
         d8:8c:3b:64:be:ae:43:db:95:10:d0:bb:12:85:e0:f9:54:cf:
         a2:7a:cd:ac:cb:06:bc:bd:b1:3f:bc:be:ba:f2:35:f7:34:b9:
         16:77:e2:f3:3d:b3:0e:3b:a6:28:75:c4:f8:83:30:f0:66:87:
         f5:99:85:1b:ea:58:e0:63:ba:cf:95:74:1e:6d:e1:0c:c0:97:
         07:34:7d:39:46:8f:aa:a0:0d:ba:47:6e:0c:40:bc:44:4d:59:
         db:f4:e3:2e:9b:d4:1e:c3:47:81:f1:ce:84:da:1e:b6:2e:0c:
         12:e2:ad:b0:60:b2:68:79:dd:52:53:96:c1:fc:d7:10:b5:c4:
         07:a6:fb:a5:71:e6:a9:de:aa:ad:24:8c:bb:ba:54:03:14:f7:
         87:fc:04:60:82:10:9d:30:ec:f2:7c:80:84:6f:5a:c1:5d:24:
         65:90:b7:d9:bd:56:14:6a:83:d2:64:4d:cc:f5:6d:b1:aa:0c:
         11:5c:03:ba:d4:cb:1d:6d:f2:30:10:1b:b4:06:98:1a:bf:6f:
         03:69:11:0c:35:62:29:3c:da:bc:22:84:d4:e0:05:06:ae:0d:
         32:40:c9:f7:cf:91:c5:1f:0a:a3:68:a7:bd:3a:d1:ed:f5:35:
         66:7f:5a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:02 2024 by rpki-client on console-ams.rpki-client.org