Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a3430303a3a2f34302d3430203d3e20323632363137.roa
File:                     323830343a336437343a3430303a3a2f34302d3430203d3e20323632363137.roa (raw, json)
Hash identifier:          pxDFcWEXKZDS78oDLiErOKhvh4sB8XOzFVcwaXuhHis=
Subject key identifier:   68:8D:65:65:7C:71:85:AD:64:A5:D2:74:D2:B3:D3:88:E5:A6:D7:05
Certificate issuer:       /CN=0305A54375BDB3F5E631FB8274B561AB2511B90A
Certificate serial:       18601311BE84B824D5448A88AC1E195A0DC06DAE
Authority key identifier: 03:05:A5:43:75:BD:B3:F5:E6:31:FB:82:74:B5:61:AB:25:11:B9:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0305A54375BDB3F5E631FB8274B561AB2511B90A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a3430303a3a2f34302d3430203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:12:26 +0000
ROA not before:           Thu 03 Aug 2023 13:07:26 +0000
ROA not after:            Thu 01 Aug 2024 13:12:26 +0000
asID:                     262617
IP address blocks:        2804:3d74:400::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:60:13:11:be:84:b8:24:d5:44:8a:88:ac:1e:19:5a:0d:c0:6d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0305A54375BDB3F5E631FB8274B561AB2511B90A
        Validity
            Not Before: Aug  3 13:07:26 2023 GMT
            Not After : Aug  1 13:12:26 2024 GMT
        Subject: CN=688D65657C7185AD64A5D274D2B3D388E5A6D705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:22:0b:3e:43:00:70:64:36:72:20:c5:1e:cc:
                    9e:bf:4f:6d:3c:17:af:f0:23:74:07:a2:50:91:a7:
                    81:7d:98:7b:0e:16:fe:1d:f9:92:0f:ad:6b:49:4d:
                    a8:24:60:98:9f:a5:9b:74:d9:09:2d:04:72:98:7d:
                    9b:e9:28:bc:d6:9e:0d:38:46:62:12:11:c8:57:23:
                    c5:ea:cb:6d:11:c0:d5:41:fa:8f:8a:36:13:54:7f:
                    d5:e8:d2:c7:73:df:f1:bc:26:c9:9e:85:8b:b8:ba:
                    c3:73:a5:27:2a:b5:7a:48:a4:d8:6a:ad:9c:36:0d:
                    ee:63:7c:d5:dd:1f:08:1a:fe:b7:ba:22:f3:9f:75:
                    b2:ce:c3:f7:9d:8c:6f:15:4e:75:e7:8a:a5:07:69:
                    3c:04:a0:3a:36:40:70:2b:cd:a3:10:c0:f0:82:83:
                    4c:51:45:96:00:d4:2d:35:9f:d2:a2:46:bc:81:ca:
                    eb:3e:45:f0:30:9d:aa:6b:96:20:72:79:90:2e:d9:
                    d2:63:a9:b3:83:22:c8:5a:f3:db:91:d4:37:ed:2e:
                    7d:e0:d8:59:df:97:c5:9f:03:2c:35:27:71:f6:8f:
                    d0:5b:b8:b7:77:04:c9:44:1d:59:a4:56:15:f0:e9:
                    7a:94:09:2e:f6:47:70:02:39:69:9f:c6:fb:9e:2c:
                    af:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8D:65:65:7C:71:85:AD:64:A5:D2:74:D2:B3:D3:88:E5:A6:D7:05
            X509v3 Authority Key Identifier:
                keyid:03:05:A5:43:75:BD:B3:F5:E6:31:FB:82:74:B5:61:AB:25:11:B9:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/0305A54375BDB3F5E631FB8274B561AB2511B90A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0305A54375BDB3F5E631FB8274B561AB2511B90A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a3430303a3a2f34302d3430203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d74:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         00:a6:43:77:0f:9c:89:0b:fc:48:02:87:94:06:08:12:ab:42:
         a6:c8:cc:52:5f:c9:41:96:f5:98:cf:1d:ff:aa:6f:1e:9e:f8:
         4b:86:6a:42:b5:3a:75:c8:79:87:e3:c2:c8:5e:10:7d:03:6a:
         b8:14:e5:34:28:5a:c4:83:b3:0d:b8:df:56:ad:d5:21:d4:bd:
         6b:87:3f:d4:b1:36:bf:53:5b:2c:e3:24:96:5b:db:6b:01:08:
         e7:f5:77:8a:1f:d3:ab:18:2b:1d:71:94:9d:63:f9:38:47:8a:
         6a:a3:87:1a:6b:dd:8b:a3:64:8d:ae:ed:6f:2f:0c:62:69:da:
         54:f6:b5:a0:55:1c:38:12:96:88:07:15:11:ff:a7:52:3c:80:
         2c:b9:fe:52:be:8f:6c:4f:5a:7c:75:94:de:70:68:72:f5:07:
         b9:1d:ee:f8:f2:1c:d4:3d:5c:b3:ec:8d:df:69:d2:b2:43:ba:
         b8:c4:dc:ca:e0:40:32:6c:08:63:e3:4f:32:db:3f:77:dd:72:
         60:ad:82:00:ea:c3:71:7c:76:4c:a8:79:c1:99:f3:e1:5b:de:
         f8:7a:79:86:e4:87:ee:c0:e9:41:67:d4:14:90:f1:ca:d7:42:
         fd:d8:b5:39:4a:99:83:c6:36:d1:c1:88:bd:d8:bc:79:48:7f:
         6f:b9:3a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:52 2024 by rpki-client on console-fra.rpki-client.org