Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/0/323830343a356233303a3a2f33322d3438203d3e20323638383234.roa
File:                     323830343a356233303a3a2f33322d3438203d3e20323638383234.roa (raw, json)
Hash identifier:          5Uh6JymPuCMMFFZNalrqTPYk0MYXcickrbaz06kyA8U=
Subject key identifier:   3C:7B:E1:47:AC:88:4A:F5:EE:82:D7:4B:86:53:0B:BF:EE:77:05:F8
Certificate issuer:       /CN=7A2DCE8AD3C9E8A31D53D532C968E987DBBC70F3
Certificate serial:       241023E7A87F25931E3C39A6AFAD847316CBBD18
Authority key identifier: 7A:2D:CE:8A:D3:C9:E8:A3:1D:53:D5:32:C9:68:E9:87:DB:BC:70:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A2DCE8AD3C9E8A31D53D532C968E987DBBC70F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/0/323830343a356233303a3a2f33322d3438203d3e20323638383234.roa
Signing time:             Mon 17 Jul 2023 12:10:57 +0000
ROA not before:           Mon 17 Jul 2023 12:05:57 +0000
ROA not after:            Mon 15 Jul 2024 12:10:57 +0000
asID:                     268824
IP address blocks:        2804:5b30::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:10:23:e7:a8:7f:25:93:1e:3c:39:a6:af:ad:84:73:16:cb:bd:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A2DCE8AD3C9E8A31D53D532C968E987DBBC70F3
        Validity
            Not Before: Jul 17 12:05:57 2023 GMT
            Not After : Jul 15 12:10:57 2024 GMT
        Subject: CN=3C7BE147AC884AF5EE82D74B86530BBFEE7705F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2e:9f:1d:4f:ab:a6:b9:3b:9e:a4:1b:c5:71:
                    a4:b8:6c:b8:2e:f8:50:c6:b4:8e:da:73:df:eb:22:
                    25:b0:23:72:3a:fd:af:08:b6:a0:f6:d9:67:13:8d:
                    7e:34:56:de:d2:5e:1b:52:14:6b:34:70:87:81:e5:
                    36:f2:9d:63:dd:df:ed:86:71:c8:01:93:04:29:ce:
                    5f:b8:56:f6:e5:71:30:51:31:68:1a:4c:19:ac:a6:
                    c8:46:e2:9b:a2:e5:d9:15:99:f6:ea:6d:b0:eb:e3:
                    42:1f:52:61:9d:93:12:1a:52:a3:b3:6b:72:b5:5e:
                    45:31:f3:82:1d:fe:8e:bd:07:7c:c7:0f:1d:f1:26:
                    33:88:c2:f7:d2:a0:14:58:85:63:fa:a3:f2:f8:1e:
                    92:46:6c:48:52:2e:c8:6d:7e:cd:3b:53:bb:14:e4:
                    b5:51:ee:ca:50:80:49:67:92:bf:cf:44:ad:bb:e9:
                    f0:28:6f:a5:45:8f:25:fa:34:6b:e3:01:87:f0:f7:
                    55:f1:4c:3a:87:36:3f:d5:55:8f:70:62:79:1b:dd:
                    56:20:2e:55:84:33:c0:0c:2e:79:f3:82:6b:6b:28:
                    1c:dc:94:9d:b3:a0:67:d7:b1:b8:fe:2b:42:da:76:
                    cb:90:17:ba:8b:3e:2c:cd:94:36:0b:85:23:80:dd:
                    1c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7B:E1:47:AC:88:4A:F5:EE:82:D7:4B:86:53:0B:BF:EE:77:05:F8
            X509v3 Authority Key Identifier:
                keyid:7A:2D:CE:8A:D3:C9:E8:A3:1D:53:D5:32:C9:68:E9:87:DB:BC:70:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/0/7A2DCE8AD3C9E8A31D53D532C968E987DBBC70F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A2DCE8AD3C9E8A31D53D532C968E987DBBC70F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/0/323830343a356233303a3a2f33322d3438203d3e20323638383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b30::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:3f:ca:bd:43:69:51:2e:2d:00:12:79:02:f6:8a:53:d3:3e:
         16:cb:0a:44:82:3f:c2:df:9d:b1:b8:5a:3d:a8:14:83:41:98:
         25:e0:27:91:8e:32:8b:17:9a:3c:94:fc:be:9f:df:72:23:17:
         69:93:07:02:c9:21:aa:93:37:c5:95:10:00:66:ac:27:98:6b:
         f9:06:f7:cd:88:e1:30:70:01:d4:8d:e6:90:df:83:98:68:5e:
         aa:dd:8b:4c:e7:fb:8a:e0:30:18:47:17:83:f9:33:3e:03:e0:
         5b:3d:ae:8a:da:21:16:08:ec:0d:f5:5c:c8:33:96:ec:9e:e7:
         ab:f5:c6:db:10:09:82:17:44:cb:b5:e9:ca:42:38:23:57:ee:
         c3:24:44:35:eb:f4:d2:77:43:a9:d8:a6:8a:ed:7d:95:b6:fc:
         cf:73:87:d8:09:2a:1d:0e:68:12:02:53:0d:1b:17:c5:57:8c:
         88:94:af:28:06:fe:0d:41:8f:09:3d:b6:24:00:fc:2a:30:db:
         10:e8:2a:88:2a:7c:5d:9f:c8:e7:38:a5:1c:38:ca:eb:ab:5d:
         ad:28:ab:c0:2f:de:76:de:18:c3:1e:51:92:7b:73:77:1e:48:
         d4:af:f3:23:61:05:a5:8b:8a:4e:f4:ae:00:26:81:eb:4c:50:
         c7:2b:f0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org