Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/323830343a333430343a3a2f33322d3438203d3e203532353339.roa
File:                     323830343a333430343a3a2f33322d3438203d3e203532353339.roa (raw, json)
Hash identifier:          GHLK98ATQJUfv5dabqAK2q29kLfIKSAO8LnolM/p8+8=
Subject key identifier:   F5:49:9A:0D:0D:AF:F0:C0:9C:D8:DB:A6:3A:90:D4:98:96:BF:9B:F8
Certificate issuer:       /CN=DC7AAFB80904AFEEF9CE19A5091BDFD6E0D184F7
Certificate serial:       59B1E75875B54F41D6AA849D304D1E1B30D980E0
Authority key identifier: DC:7A:AF:B8:09:04:AF:EE:F9:CE:19:A5:09:1B:DF:D6:E0:D1:84:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC7AAFB80904AFEEF9CE19A5091BDFD6E0D184F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/323830343a333430343a3a2f33322d3438203d3e203532353339.roa
Signing time:             Thu 20 Jul 2023 18:48:00 +0000
ROA not before:           Thu 20 Jul 2023 18:43:00 +0000
ROA not after:            Thu 18 Jul 2024 18:48:00 +0000
asID:                     52539
IP address blocks:        2804:3404::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b1:e7:58:75:b5:4f:41:d6:aa:84:9d:30:4d:1e:1b:30:d9:80:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC7AAFB80904AFEEF9CE19A5091BDFD6E0D184F7
        Validity
            Not Before: Jul 20 18:43:00 2023 GMT
            Not After : Jul 18 18:48:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:7e:98:73:4a:9d:6b:44:a6:ee:39:15:78:
                    cd:74:6f:94:fb:31:5b:4a:c9:02:56:5e:eb:eb:b6:
                    0d:42:8d:86:ba:1c:ac:d1:fa:c5:a2:31:d5:fe:5c:
                    07:f9:de:00:5c:ba:ee:dd:71:55:f3:33:e7:4c:47:
                    d3:c0:bc:62:23:ad:af:7f:1e:53:5c:46:2d:df:71:
                    62:d9:05:80:6a:ba:96:97:ad:0a:1e:07:a2:ab:4a:
                    4a:5a:a1:76:89:87:a6:29:04:df:9d:af:58:e7:6f:
                    1e:5e:18:61:78:94:d6:1b:5c:15:a0:de:cd:49:e0:
                    85:8f:e8:76:86:2c:56:68:fe:9a:ef:39:34:86:94:
                    61:52:34:74:1a:90:0c:5c:de:d7:89:7c:cd:f2:9f:
                    95:63:ae:d3:b1:22:6a:63:31:8a:dc:08:55:ff:4f:
                    fb:5e:9a:f3:05:b5:8d:6f:0d:a4:48:2e:d1:c3:bd:
                    27:3b:28:7b:31:12:61:7e:06:cd:5c:79:5c:fe:9c:
                    32:54:a8:4c:70:cf:e4:de:65:15:5a:c6:27:2e:c5:
                    2f:f6:e6:7c:1e:89:67:63:08:2f:6a:e2:d9:14:8a:
                    7e:b3:bd:3c:61:b7:51:41:7f:80:7f:88:bc:58:e4:
                    d0:a6:12:54:6a:73:9b:7c:5b:44:98:3c:3b:0c:4a:
                    e6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:49:9A:0D:0D:AF:F0:C0:9C:D8:DB:A6:3A:90:D4:98:96:BF:9B:F8
            X509v3 Authority Key Identifier:
                keyid:DC:7A:AF:B8:09:04:AF:EE:F9:CE:19:A5:09:1B:DF:D6:E0:D1:84:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/DC7AAFB80904AFEEF9CE19A5091BDFD6E0D184F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC7AAFB80904AFEEF9CE19A5091BDFD6E0D184F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/323830343a333430343a3a2f33322d3438203d3e203532353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3404::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:8e:bc:84:fa:20:fb:72:14:7a:23:fb:96:48:d9:2f:c7:ea:
         1f:2b:de:4f:3c:cc:07:de:90:2a:a6:fe:92:e6:a8:1d:b6:f9:
         15:ac:a8:5b:d3:bf:31:82:8a:e8:39:ab:05:43:5b:31:cd:80:
         4c:43:99:4c:90:f1:c8:aa:1e:cc:f5:1c:99:ae:fc:ad:99:32:
         22:70:a5:8e:df:c5:17:1a:dc:84:f6:a9:1d:fe:d2:db:cd:b4:
         47:27:ec:85:b1:cf:b8:55:1a:d7:81:a5:92:9a:05:12:8c:03:
         29:ad:27:21:69:a3:fd:a5:81:85:0e:38:7e:7a:ff:0d:34:e0:
         37:fd:41:8a:4c:f0:d7:4f:0e:66:07:5a:9d:5d:8d:79:3c:68:
         7b:55:68:6a:28:62:26:1a:4e:bf:29:9b:d6:d8:1c:88:3d:48:
         97:bc:81:9b:93:1f:89:c6:48:8b:be:bc:d8:3c:f2:9c:1b:d1:
         87:15:e3:c8:11:81:06:93:9d:2f:cb:23:39:c7:5e:c2:72:49:
         1e:84:8f:29:3c:b0:5f:77:06:a6:0e:9e:aa:e2:5b:a1:39:b2:
         0b:f9:71:ab:42:05:d1:6f:45:43:eb:b0:a2:93:39:4f:1b:97:
         a0:b5:c0:c1:14:08:6c:f5:04:15:fe:c0:25:1a:75:62:24:75:
         de:99:88:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org