Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Wf7Wq6KH1sCbxFeowfFcKipQEGbfjmMCzZJeGGL37eh/1/323830343a383735383a3a2f33322d3336203d3e20323732373033.roa
File:                     323830343a383735383a3a2f33322d3336203d3e20323732373033.roa (raw, json)
Hash identifier:          P6Y1RO++6o6Yh6utdHT06KC/4DKx5C+aVGlcwKzAzQ4=
Subject key identifier:   E4:AB:E6:99:4B:B9:24:55:A0:13:8D:45:10:90:10:CC:EC:A3:BD:C0
Certificate issuer:       /CN=D7E3D80456F5EB70E02D7480E0602E1837BFCC93
Certificate serial:       470BA5C6E65520427EAB3632A7C13780E6FE0D57
Authority key identifier: D7:E3:D8:04:56:F5:EB:70:E0:2D:74:80:E0:60:2E:18:37:BF:CC:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7E3D80456F5EB70E02D7480E0602E1837BFCC93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Wf7Wq6KH1sCbxFeowfFcKipQEGbfjmMCzZJeGGL37eh/1/323830343a383735383a3a2f33322d3336203d3e20323732373033.roa
Signing time:             Wed 10 Apr 2024 22:14:10 +0000
ROA not before:           Wed 10 Apr 2024 22:09:10 +0000
ROA not after:            Wed 09 Apr 2025 22:14:10 +0000
asID:                     272703
IP address blocks:        2804:8758::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:0b:a5:c6:e6:55:20:42:7e:ab:36:32:a7:c1:37:80:e6:fe:0d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7E3D80456F5EB70E02D7480E0602E1837BFCC93
        Validity
            Not Before: Apr 10 22:09:10 2024 GMT
            Not After : Apr  9 22:14:10 2025 GMT
        Subject: CN=E4ABE6994BB92455A0138D45109010CCECA3BDC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bd:7a:a5:df:5a:53:db:88:d2:b5:82:93:28:
                    a5:17:26:44:5e:a0:b4:66:0b:71:c3:f1:ef:b5:cd:
                    e7:ce:b6:9e:e8:a5:fe:39:f7:ef:d1:d5:a1:cd:44:
                    db:47:59:dd:32:54:33:fd:64:04:a6:07:15:e3:86:
                    5e:47:a0:32:dc:0c:c1:bd:92:98:ea:2a:79:82:a3:
                    93:40:48:1d:a6:ca:e0:15:ac:a5:e7:b1:f7:4a:da:
                    2b:81:4c:87:1e:ab:e9:bc:b6:e0:9f:7f:6a:d9:21:
                    dd:bc:44:26:dc:5f:42:5a:ea:95:8f:67:d5:6d:4c:
                    8d:3d:d2:63:73:3c:bd:83:bb:23:5f:91:02:72:f1:
                    8b:6f:3f:7a:09:25:a1:a0:59:df:a7:8f:46:38:de:
                    53:54:57:ba:c9:37:eb:22:ca:7a:78:b5:6f:fa:3a:
                    96:a0:7d:62:80:a2:59:d9:38:ac:fa:f4:a5:44:4b:
                    a1:e8:7d:31:e1:ba:3d:5e:c1:b2:7a:40:ce:a6:58:
                    8c:83:99:19:d5:cd:2c:f5:53:fd:70:df:71:56:1b:
                    e0:9b:1d:c8:eb:56:25:28:b1:05:b4:a1:0b:ae:b5:
                    78:bc:cf:c0:d1:16:f7:f0:fb:89:eb:31:c5:b4:7c:
                    39:a7:92:61:d5:9e:5a:13:43:91:83:e2:eb:a2:89:
                    83:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AB:E6:99:4B:B9:24:55:A0:13:8D:45:10:90:10:CC:EC:A3:BD:C0
            X509v3 Authority Key Identifier:
                keyid:D7:E3:D8:04:56:F5:EB:70:E0:2D:74:80:E0:60:2E:18:37:BF:CC:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Wf7Wq6KH1sCbxFeowfFcKipQEGbfjmMCzZJeGGL37eh/1/D7E3D80456F5EB70E02D7480E0602E1837BFCC93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7E3D80456F5EB70E02D7480E0602E1837BFCC93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Wf7Wq6KH1sCbxFeowfFcKipQEGbfjmMCzZJeGGL37eh/1/323830343a383735383a3a2f33322d3336203d3e20323732373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8758::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:c0:77:eb:51:07:3f:c6:f8:74:6d:3b:f6:99:77:f3:3a:f4:
         f9:af:3d:d5:e9:83:90:ed:47:82:b0:c1:f8:89:79:f0:73:5e:
         79:34:24:07:5b:68:b9:08:b1:1f:9b:58:a5:ef:cb:e4:05:7e:
         69:1d:c7:63:3a:3e:b5:c2:f3:36:b3:dd:54:ad:4e:7e:4d:44:
         44:58:44:a5:ee:17:58:f4:a2:e8:8a:d2:ca:61:45:62:99:f9:
         09:56:8a:fd:fd:50:cc:52:cf:79:4a:dc:da:cc:17:53:16:85:
         f1:66:6d:22:af:b1:c4:82:3d:92:0a:de:46:fe:fa:e6:b6:d6:
         f3:fe:01:f3:ee:c5:d5:0f:f8:4a:01:43:12:c3:0f:ab:bd:f8:
         1e:9d:dd:45:df:c4:c3:15:8d:5f:a4:5e:93:63:90:12:80:8b:
         57:10:4c:4e:5c:ea:b6:86:7f:19:8f:56:d7:b5:ec:16:ee:ef:
         5e:d4:9b:66:0b:0e:29:46:56:57:1a:30:ef:a3:89:fb:da:cf:
         f2:d0:af:ca:83:d1:54:9f:ae:47:40:63:f5:a6:9f:30:ed:49:
         46:01:30:cc:08:5e:3f:98:7b:b2:6c:ac:02:d1:3a:e6:fa:f1:
         c6:05:a6:5c:01:6b:c9:d5:dd:0f:0a:3a:ee:f6:cd:05:4e:df:
         3d:f8:9c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:49 2024 by rpki-client on console-fra.rpki-client.org