Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/323830343a333433633a3a2f33322d3332203d3e203238323230.roa
File:                     323830343a333433633a3a2f33322d3332203d3e203238323230.roa (raw, json)
Hash identifier:          rTJJH8Dzxk70jVtUui2oOZcRepv9eOpKshKmUFQFB3I=
Subject key identifier:   AD:B1:15:4F:C6:87:56:E4:11:38:6E:9F:81:36:94:A1:54:52:4F:C8
Certificate issuer:       /CN=875C6B712816806313AA14E9282E1F7F57860019
Certificate serial:       127C64E55A64B4C1DB32D009772E2F9D8365ED54
Authority key identifier: 87:5C:6B:71:28:16:80:63:13:AA:14:E9:28:2E:1F:7F:57:86:00:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/875C6B712816806313AA14E9282E1F7F57860019.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/323830343a333433633a3a2f33322d3332203d3e203238323230.roa
Signing time:             Fri 15 Mar 2024 14:58:31 +0000
ROA not before:           Fri 15 Mar 2024 14:53:31 +0000
ROA not after:            Fri 14 Mar 2025 14:58:31 +0000
asID:                     28220
IP address blocks:        2804:343c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:7c:64:e5:5a:64:b4:c1:db:32:d0:09:77:2e:2f:9d:83:65:ed:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875C6B712816806313AA14E9282E1F7F57860019
        Validity
            Not Before: Mar 15 14:53:31 2024 GMT
            Not After : Mar 14 14:58:31 2025 GMT
        Subject: CN=ADB1154FC68756E411386E9F813694A154524FC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c0:d0:83:e7:3b:74:51:f6:09:a6:c6:38:18:
                    ce:86:1c:07:2a:ec:d8:86:1e:3d:39:e3:93:07:d5:
                    60:e4:78:df:69:c7:36:e6:b3:52:36:3f:56:ee:3f:
                    b5:31:87:36:3b:b5:34:30:fc:e7:3f:cb:81:01:31:
                    f3:29:06:a3:00:8c:23:0a:09:28:a1:f7:f1:f2:52:
                    cf:4d:4c:8d:71:f5:5b:34:e8:d7:ff:2c:68:2c:38:
                    66:52:b8:80:86:74:82:64:38:39:36:05:21:52:4a:
                    0f:fe:80:73:96:33:b1:62:b4:b2:cb:00:03:12:85:
                    e2:a0:08:d0:dc:f0:41:17:9f:7d:cc:df:ce:e9:23:
                    c6:d1:1b:b6:27:79:9c:f9:51:68:53:77:f1:22:d7:
                    27:57:49:aa:62:3f:01:a5:11:40:6f:04:8a:59:9b:
                    4b:8d:c1:d7:36:74:00:0d:b3:1a:24:20:04:f2:0c:
                    57:4d:16:f9:09:4d:73:0c:e8:5b:71:15:75:99:af:
                    8d:e9:29:42:4f:40:68:bb:cf:12:b8:8a:70:1b:57:
                    eb:e2:03:1c:26:43:0f:c9:56:b1:05:11:f7:6d:bf:
                    e7:41:03:a0:1b:9f:20:65:70:ac:2b:60:a1:9e:3e:
                    d5:2a:aa:1a:48:a2:cd:b5:70:a7:29:54:55:1d:93:
                    95:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B1:15:4F:C6:87:56:E4:11:38:6E:9F:81:36:94:A1:54:52:4F:C8
            X509v3 Authority Key Identifier:
                keyid:87:5C:6B:71:28:16:80:63:13:AA:14:E9:28:2E:1F:7F:57:86:00:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/875C6B712816806313AA14E9282E1F7F57860019.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/875C6B712816806313AA14E9282E1F7F57860019.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/323830343a333433633a3a2f33322d3332203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:343c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:8a:c7:b3:40:c6:27:a8:44:c2:f4:ca:50:5e:28:3f:16:85:
         b8:59:e2:38:05:ba:bf:34:03:e9:2d:b5:67:db:66:28:01:08:
         7c:8a:88:33:5b:6b:2f:94:94:0b:3a:5f:89:c0:5b:66:77:44:
         53:1b:5d:9a:8a:14:1a:dd:bf:b2:79:12:98:d9:1b:68:e0:95:
         04:f2:dd:e6:f5:92:d7:46:c1:fa:54:81:02:48:2c:87:ce:82:
         c3:1e:e5:49:69:ab:4e:94:57:35:99:d7:18:75:55:75:e5:e1:
         be:1e:57:14:27:62:d8:cd:16:4d:64:e3:de:9a:c8:ad:8f:fa:
         77:b7:71:33:22:53:f5:c1:1a:a1:7e:f3:fe:3c:af:67:c8:89:
         18:fd:57:75:88:12:7c:e8:54:8c:3b:51:ca:b0:e5:17:ca:05:
         7d:22:c3:50:46:22:70:13:63:92:a1:7e:ae:37:9a:ad:38:db:
         49:5f:2a:4d:1c:73:5b:6e:0a:dc:b9:c4:7a:6a:a6:be:33:d3:
         60:4d:f9:29:a0:a8:79:21:c7:02:92:de:5d:97:04:45:70:e5:
         29:72:f3:5a:c4:1b:e3:50:c9:ea:7e:26:fd:a7:69:17:ef:b1:
         fc:73:cf:d0:bb:b0:67:b0:d7:e8:e4:48:2f:a1:47:9d:89:a1:
         c9:30:36:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org