Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a3a2f33322d3335203d3e20323634303235.roa
File:                     323830343a323939633a3a2f33322d3335203d3e20323634303235.roa (raw, json)
Hash identifier:          1MmlZ7G2VPQ/3QSeJhQE+lXGfuKFRmN8sqi1yvCGoo0=
Subject key identifier:   0B:43:BB:83:42:63:0F:99:F3:A4:E3:98:F8:32:C6:42:79:17:EB:0A
Certificate issuer:       /CN=374F51C9ED54F1414625E1F43A042A23F1C7C299
Certificate serial:       4074373DC47DB749BEEB56C9EC91B25099ACE64E
Authority key identifier: 37:4F:51:C9:ED:54:F1:41:46:25:E1:F4:3A:04:2A:23:F1:C7:C2:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/374F51C9ED54F1414625E1F43A042A23F1C7C299.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a3a2f33322d3335203d3e20323634303235.roa
Signing time:             Tue 07 Nov 2023 15:19:12 +0000
ROA not before:           Tue 07 Nov 2023 15:14:12 +0000
ROA not after:            Tue 05 Nov 2024 15:19:12 +0000
asID:                     264025
IP address blocks:        2804:299c::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:74:37:3d:c4:7d:b7:49:be:eb:56:c9:ec:91:b2:50:99:ac:e6:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374F51C9ED54F1414625E1F43A042A23F1C7C299
        Validity
            Not Before: Nov  7 15:14:12 2023 GMT
            Not After : Nov  5 15:19:12 2024 GMT
        Subject: CN=0B43BB8342630F99F3A4E398F832C6427917EB0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:11:1d:c5:84:20:ce:83:0b:16:18:57:ea:80:
                    bc:4b:54:1f:a7:b2:30:5b:2a:91:ff:cc:0b:e8:a7:
                    2a:54:12:77:48:25:07:84:f5:e4:85:e6:8b:03:e4:
                    85:0e:5d:d0:c4:12:a5:8a:92:75:8f:b0:a3:26:21:
                    80:5a:c3:01:24:0b:84:66:5f:76:78:86:bc:7b:00:
                    c8:3a:f5:4b:d6:cd:88:bd:d6:03:04:14:b1:0c:43:
                    51:08:c3:4e:5b:b3:74:30:4d:2f:4c:7f:ac:1e:f5:
                    05:c9:11:6a:73:c7:64:4c:42:c9:ec:e7:7e:32:c9:
                    5e:99:18:4b:dd:20:07:fd:da:6a:db:04:ae:e7:da:
                    c0:47:c0:a3:a2:cd:aa:df:88:eb:12:38:98:3d:65:
                    1a:60:1c:5c:5c:f1:09:95:ad:0b:34:0b:20:6f:7e:
                    d0:c7:2f:2e:b7:0f:d7:1e:5c:6f:61:23:9e:82:d6:
                    67:89:09:72:62:b6:be:07:e8:5b:c9:0c:57:35:db:
                    e7:26:23:e9:88:46:56:44:e9:a4:09:54:dc:85:89:
                    cf:fd:f4:3a:81:c6:e7:67:b6:ed:b9:c7:f3:85:19:
                    93:b3:2d:8e:65:76:24:0a:a3:e6:d6:51:b3:3e:84:
                    c2:80:4e:bb:3f:6d:86:52:93:dd:be:75:35:79:6b:
                    d7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:43:BB:83:42:63:0F:99:F3:A4:E3:98:F8:32:C6:42:79:17:EB:0A
            X509v3 Authority Key Identifier:
                keyid:37:4F:51:C9:ED:54:F1:41:46:25:E1:F4:3A:04:2A:23:F1:C7:C2:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/374F51C9ED54F1414625E1F43A042A23F1C7C299.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/374F51C9ED54F1414625E1F43A042A23F1C7C299.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a3a2f33322d3335203d3e20323634303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:299c::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:84:9c:b5:58:0b:11:38:79:67:cb:41:cf:dd:d5:68:1f:c2:
         5d:73:66:7d:b4:c6:12:c9:d5:34:59:49:ca:59:6f:7b:86:68:
         ee:fd:3e:78:85:04:1b:67:24:2d:cb:1b:53:9c:8c:6c:18:93:
         a6:8f:40:27:02:84:bf:0b:62:fb:f5:11:da:88:d5:11:54:ac:
         6d:c6:f3:80:c9:5e:02:44:76:2e:9d:2e:c1:24:20:26:21:c7:
         2d:43:24:51:66:ee:56:d8:99:53:73:ee:08:13:6e:e2:8a:64:
         88:3a:51:15:d8:62:6a:aa:d7:91:04:97:4d:5f:66:b6:ee:5a:
         d3:3f:f7:dc:9a:1a:40:a2:44:be:17:d1:ec:a6:c9:97:f6:b1:
         32:57:c4:71:dc:13:69:e2:3c:ad:58:63:f1:76:38:c7:0f:8b:
         78:e8:de:f4:a8:4c:1c:61:9a:a3:52:96:7b:ba:d1:1f:3b:b1:
         df:46:c9:4d:0d:fb:a8:e4:91:99:6d:9f:e0:43:e6:a8:71:48:
         ee:2c:30:d8:bc:c2:1e:66:9a:9f:26:2c:d7:20:96:97:79:93:
         32:17:54:10:b3:a4:5d:24:7a:6d:82:c0:db:35:51:7c:05:8d:
         6b:0f:ce:ea:06:91:89:10:be:b9:58:15:ba:23:d0:ce:e4:1f:
         46:68:be:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org