Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/1/323830343a3365383a3a2f33322d3438203d3e203238363633.roa
File:                     323830343a3365383a3a2f33322d3438203d3e203238363633.roa (raw, json)
Hash identifier:          85I0vG3iEvfarCjwPC6ojIN2hJCg/QUX8zxNJlZtaeU=
Subject key identifier:   8F:81:FA:03:7E:59:64:26:94:18:B0:ED:6C:E9:DB:93:8C:72:8F:03
Certificate issuer:       /CN=E105AB76EC1E159F0B8C636B1B58629153C43F24
Certificate serial:       63CAA1CD4789937610BD0BEC9166C36E4F03357B
Authority key identifier: E1:05:AB:76:EC:1E:15:9F:0B:8C:63:6B:1B:58:62:91:53:C4:3F:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E105AB76EC1E159F0B8C636B1B58629153C43F24.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/1/323830343a3365383a3a2f33322d3438203d3e203238363633.roa
Signing time:             Wed 03 Apr 2024 18:31:48 +0000
ROA not before:           Wed 03 Apr 2024 18:26:48 +0000
ROA not after:            Wed 02 Apr 2025 18:31:48 +0000
asID:                     28663
IP address blocks:        2804:3e8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ca:a1:cd:47:89:93:76:10:bd:0b:ec:91:66:c3:6e:4f:03:35:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E105AB76EC1E159F0B8C636B1B58629153C43F24
        Validity
            Not Before: Apr  3 18:26:48 2024 GMT
            Not After : Apr  2 18:31:48 2025 GMT
        Subject: CN=8F81FA037E5964269418B0ED6CE9DB938C728F03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cc:75:0a:9b:63:ce:36:b3:79:28:c7:a4:17:
                    6a:41:59:3b:42:93:52:bd:64:84:3c:d5:a8:d9:42:
                    a6:da:80:f0:7e:53:85:3d:8b:2e:57:6d:4e:5d:dd:
                    19:bd:5c:e2:a7:00:f0:1e:3f:db:c2:51:27:9d:a7:
                    18:ac:b6:a7:23:6d:13:01:5e:4d:6a:f1:b0:99:66:
                    5e:5c:e3:b7:38:4f:4b:7c:ef:22:92:a3:79:f7:7d:
                    55:ba:0d:07:84:a7:44:cc:d3:ce:67:f7:19:03:43:
                    b8:11:e2:41:fa:20:7b:f9:c6:9b:b9:75:aa:2a:d7:
                    3e:1d:b7:9b:5a:2e:ac:e9:07:2e:85:87:04:01:3a:
                    d9:62:f1:f5:f0:c4:69:40:c9:1e:24:e8:c1:d2:30:
                    e3:35:22:23:07:a3:f6:f7:cd:ba:e4:d7:ec:4c:42:
                    0f:92:7f:34:78:6d:0c:29:11:28:ea:e8:33:07:a0:
                    9a:30:7b:85:15:8e:36:78:0a:cb:64:13:0d:44:1e:
                    86:dc:ab:cc:fd:2d:70:92:99:91:35:c4:88:ed:78:
                    68:3f:f1:39:23:01:5a:09:67:96:9d:14:3c:47:ba:
                    7c:be:a9:2d:69:80:38:b5:a7:d8:75:77:d8:0e:8a:
                    bd:8e:49:84:b2:92:55:5f:c2:6d:7d:ef:b3:79:08:
                    a9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:81:FA:03:7E:59:64:26:94:18:B0:ED:6C:E9:DB:93:8C:72:8F:03
            X509v3 Authority Key Identifier:
                keyid:E1:05:AB:76:EC:1E:15:9F:0B:8C:63:6B:1B:58:62:91:53:C4:3F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/1/E105AB76EC1E159F0B8C636B1B58629153C43F24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E105AB76EC1E159F0B8C636B1B58629153C43F24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/1/323830343a3365383a3a2f33322d3438203d3e203238363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:c3:b1:dc:10:c8:bc:cd:a2:f5:6a:a3:16:b2:8d:d3:f5:3e:
         70:3a:f0:fd:26:e4:c4:2b:b6:6b:44:f8:55:43:08:ad:88:cf:
         5a:d2:bd:d7:3e:91:a4:12:eb:57:98:92:d1:99:53:6a:9a:13:
         67:19:cc:70:8d:e3:e8:c0:5b:20:3b:a8:23:ef:b1:06:32:d0:
         88:68:e9:dc:15:f1:ef:8f:e1:c5:a3:26:e3:1f:61:15:85:77:
         2f:11:59:47:ed:37:e0:e2:df:93:62:b0:6a:8b:88:0e:ae:d6:
         6f:6d:bc:bb:05:1a:89:25:29:8a:e6:59:34:64:cd:c0:54:b2:
         26:fd:78:2e:61:38:cc:33:18:55:e6:fc:3b:c4:76:42:32:48:
         00:64:91:12:35:c2:16:d1:59:52:83:66:5d:47:95:d7:6c:e2:
         46:10:0a:82:83:97:ef:ea:14:63:41:cf:b2:b1:7a:95:a1:73:
         c6:74:fd:e7:54:cb:80:39:83:16:a6:28:f1:dd:f3:c2:ec:8a:
         7c:4b:99:db:90:d5:11:2a:cd:ba:31:d3:b9:94:ea:67:46:76:
         93:99:e6:99:7e:83:db:21:76:9e:1f:09:e3:a1:cb:50:e8:f1:
         19:c9:9b:40:56:ec:9d:0e:31:6e:ba:dd:fd:6f:b5:12:44:3d:
         e8:17:db:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org