Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/0/323830313a38303a333938303a3a2f34382d3438203d3e20323730373730.roa
File:                     323830313a38303a333938303a3a2f34382d3438203d3e20323730373730.roa (raw, json)
Hash identifier:          qJlGjP2Lot0Gxjah4ho4vbbngLHzdqRQdAXjoZZBwQ4=
Subject key identifier:   7B:CE:F8:00:43:E4:B5:F6:76:D0:B6:E5:80:C2:D5:07:85:85:D2:FA
Certificate issuer:       /CN=42009413094777E86D462A87543681113F5E42E8
Certificate serial:       26A07A96FE78B6035F5585E591014C82AF02714A
Authority key identifier: 42:00:94:13:09:47:77:E8:6D:46:2A:87:54:36:81:11:3F:5E:42:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42009413094777E86D462A87543681113F5E42E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/0/323830313a38303a333938303a3a2f34382d3438203d3e20323730373730.roa
Signing time:             Thu 13 Jul 2023 19:00:00 +0000
ROA not before:           Thu 13 Jul 2023 18:55:00 +0000
ROA not after:            Sat 13 Jul 2024 19:00:00 +0000
asID:                     270770
IP address blocks:        2801:80:3980::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a0:7a:96:fe:78:b6:03:5f:55:85:e5:91:01:4c:82:af:02:71:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42009413094777E86D462A87543681113F5E42E8
        Validity
            Not Before: Jul 13 18:55:00 2023 GMT
            Not After : Jul 13 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:48:00:c6:c8:4d:c5:40:bb:ed:23:ae:8a:e1:
                    21:09:28:08:fd:a7:7f:5e:8a:aa:09:88:46:12:dc:
                    d7:07:0d:31:57:d3:2e:d1:fc:ba:98:9d:8f:b6:e6:
                    04:e3:ee:12:97:65:e4:7e:2b:31:16:be:37:61:67:
                    c3:9c:54:8f:85:29:27:45:01:7f:b3:9d:68:05:e9:
                    d3:39:b2:1b:0e:94:db:fa:89:0b:6e:3c:c4:f9:47:
                    2c:fe:0f:3d:5b:ba:81:91:ad:c8:b1:64:9c:86:91:
                    79:db:b9:45:cc:7b:05:da:ea:da:82:57:54:d4:46:
                    53:e3:5c:6f:66:bf:7e:74:58:d3:d4:39:6a:1d:f0:
                    20:5d:c1:23:48:81:72:27:b2:ee:3c:7d:a4:d3:29:
                    64:f9:9f:4a:ff:1b:14:3a:c8:62:0f:38:4b:8a:94:
                    e6:79:e7:44:45:f7:aa:3a:b4:4e:86:56:38:6e:ae:
                    b3:9e:2b:53:02:ab:b4:6f:b4:ad:f9:2c:f1:11:30:
                    3e:e2:aa:da:86:2d:42:80:62:90:84:2d:ae:cd:e9:
                    8f:55:b6:62:a6:f3:85:40:cb:5a:8e:95:3f:13:aa:
                    4a:db:9d:2d:37:11:a8:5e:bd:8d:1b:84:0d:fe:87:
                    dc:b6:8c:b1:89:98:bf:7c:f6:14:d6:24:51:a9:f7:
                    01:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CE:F8:00:43:E4:B5:F6:76:D0:B6:E5:80:C2:D5:07:85:85:D2:FA
            X509v3 Authority Key Identifier:
                keyid:42:00:94:13:09:47:77:E8:6D:46:2A:87:54:36:81:11:3F:5E:42:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/0/42009413094777E86D462A87543681113F5E42E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42009413094777E86D462A87543681113F5E42E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/0/323830313a38303a333938303a3a2f34382d3438203d3e20323730373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:3980::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:92:cc:70:6f:55:1d:0b:d0:fb:85:ed:ff:c3:ce:b8:8a:76:
         ff:3a:c8:3f:f4:c2:5b:83:40:75:cf:0f:1d:fa:84:0c:f7:71:
         8b:c8:49:39:cb:a9:40:03:99:6e:b0:05:94:0a:02:3c:1e:70:
         df:ee:35:c7:4f:2d:2c:72:99:3f:6d:06:33:25:fc:1e:9f:df:
         ce:08:ec:2a:a8:42:6f:96:1d:4f:d1:e6:64:b0:5e:66:a0:3b:
         20:ce:00:03:35:fa:0f:d5:4c:eb:42:00:5f:09:7a:50:1a:53:
         2f:07:2d:af:e4:95:66:8f:1b:7d:1d:b4:23:e1:0f:1c:41:6e:
         1b:42:bb:ef:5a:37:52:5c:e3:7c:05:bc:b2:0e:95:95:d0:c6:
         d3:94:9e:97:00:80:e5:84:6c:32:d3:59:28:a8:51:e1:eb:a5:
         91:c6:5b:a0:1d:0a:d5:37:d0:0f:cf:a2:c5:3c:49:20:73:c1:
         d0:92:73:a3:7d:83:9a:a1:99:fc:6f:ef:93:82:ce:c0:c9:06:
         d0:75:98:8d:90:05:a0:a6:40:ea:49:93:17:f2:9f:a7:a6:39:
         26:f8:75:05:d0:40:bb:b5:c2:9b:c3:98:55:f1:d8:ec:f6:e3:
         3e:4b:77:6d:29:38:a5:a8:bd:1d:dd:a5:f5:94:ea:a1:f8:23:
         5f:12:49:8d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org