Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/0/323830343a323266303a3a2f33322d3332203d3e20323634313333.roa
File:                     323830343a323266303a3a2f33322d3332203d3e20323634313333.roa (raw, json)
Hash identifier:          uJK7Wch4zONHVpoLmsD/8hHgsdFsK5IpLIPLJYzrxK0=
Subject key identifier:   35:63:F3:18:5E:80:2F:14:59:E9:B1:A1:7C:BD:68:BF:8B:D4:B6:35
Certificate issuer:       /CN=7CAD81394911919A4CBA9E9939030CFB3F3B9D90
Certificate serial:       19058E7742E354AAB05E87641F130613DAA586F8
Authority key identifier: 7C:AD:81:39:49:11:91:9A:4C:BA:9E:99:39:03:0C:FB:3F:3B:9D:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CAD81394911919A4CBA9E9939030CFB3F3B9D90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/0/323830343a323266303a3a2f33322d3332203d3e20323634313333.roa
Signing time:             Tue 06 Feb 2024 17:08:04 +0000
ROA not before:           Tue 06 Feb 2024 17:03:04 +0000
ROA not after:            Tue 04 Feb 2025 17:08:04 +0000
asID:                     264133
IP address blocks:        2804:22f0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:05:8e:77:42:e3:54:aa:b0:5e:87:64:1f:13:06:13:da:a5:86:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD81394911919A4CBA9E9939030CFB3F3B9D90
        Validity
            Not Before: Feb  6 17:03:04 2024 GMT
            Not After : Feb  4 17:08:04 2025 GMT
        Subject: CN=3563F3185E802F1459E9B1A17CBD68BF8BD4B635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:68:ed:e0:c9:bb:3b:92:95:0b:ef:0e:28:ab:
                    45:6c:cc:06:2b:e4:b1:d5:5a:06:87:53:1e:cc:49:
                    b0:66:c2:27:64:90:ce:f9:40:ce:ae:d7:eb:7f:7c:
                    f0:bf:ab:5f:58:1d:ea:ec:61:52:ba:d9:4f:23:8e:
                    d7:87:43:94:de:89:8a:2e:e1:2e:6f:97:77:f7:ed:
                    00:3d:7d:c3:ff:2c:2c:e3:c8:03:f6:43:f6:d6:37:
                    39:1e:e8:1c:78:ed:bb:3d:e4:e4:46:26:e0:d7:af:
                    36:42:ab:d4:0b:43:60:6b:b2:69:9a:d8:08:31:b6:
                    d5:ea:be:17:1d:87:66:58:73:09:f3:30:39:78:16:
                    18:22:ee:e3:27:04:6e:30:b8:ab:22:95:f5:72:98:
                    83:b7:f8:e1:34:fc:4d:e9:16:ef:45:5b:e9:84:92:
                    ed:56:08:ab:e9:cc:3d:5e:d2:94:d8:95:a6:e0:30:
                    14:c5:8c:02:8b:88:06:a1:7d:eb:3f:de:28:ce:ae:
                    e4:ed:97:53:8f:f4:6f:ef:83:7b:bf:ac:14:8b:69:
                    8c:03:e1:35:1e:ca:5d:91:6a:d4:61:cf:1a:ce:7d:
                    36:b5:28:8f:bb:65:bc:53:f7:23:9c:a0:04:f7:ba:
                    28:86:33:e9:fc:5e:21:bf:36:a9:0c:5c:b3:de:7f:
                    1e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:63:F3:18:5E:80:2F:14:59:E9:B1:A1:7C:BD:68:BF:8B:D4:B6:35
            X509v3 Authority Key Identifier:
                keyid:7C:AD:81:39:49:11:91:9A:4C:BA:9E:99:39:03:0C:FB:3F:3B:9D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/0/7CAD81394911919A4CBA9E9939030CFB3F3B9D90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CAD81394911919A4CBA9E9939030CFB3F3B9D90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/0/323830343a323266303a3a2f33322d3332203d3e20323634313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:d6:c2:38:22:16:8f:0e:f4:da:99:86:6e:2b:81:94:89:f4:
         ef:10:01:65:74:70:98:1b:81:73:c2:b2:2e:fa:87:06:15:6b:
         63:d9:8e:32:cc:ff:4a:72:b5:c8:61:46:79:00:04:0c:1b:1e:
         d9:67:18:ca:9c:3d:0c:23:ec:86:28:c2:38:38:8f:ef:fc:ef:
         23:94:02:50:39:42:a3:15:f1:b9:f7:30:0a:cd:33:9f:c4:53:
         4a:6f:6b:6d:c9:3b:5e:aa:e3:da:15:54:06:01:36:d5:58:22:
         4b:6f:b9:ef:fb:3f:38:2a:a2:e8:f8:0f:ce:66:e6:b6:be:0a:
         21:2e:9d:e1:49:e6:90:e6:f6:e8:85:16:3e:94:8a:68:61:4d:
         39:b4:1f:63:58:f1:70:9e:89:e5:c3:ef:f7:9b:f9:2d:7a:87:
         98:11:ab:14:1a:7c:64:a9:a8:2f:24:21:63:bf:87:18:29:f9:
         19:aa:96:03:59:0e:b8:75:6e:d2:17:3e:89:07:d9:ae:e4:8c:
         b3:e8:3e:96:99:42:7b:f1:7f:bd:d0:3b:1e:8a:6d:e8:55:b9:
         5e:62:30:76:18:4a:cb:ac:f8:18:cb:70:13:5c:2a:43:84:e5:
         83:0a:9e:ee:68:69:b4:32:b2:fc:9f:84:6a:21:b9:ce:6a:74:
         fe:d9:20:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org