Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/323830343a3330633a3a2f33322d3438203d3e203238333433.roa
File:                     323830343a3330633a3a2f33322d3438203d3e203238333433.roa (raw, json)
Hash identifier:          enjwpdvip7t1PtgNK90pwj4is4ME2iIXMKZ7RTbgC0s=
Subject key identifier:   80:7B:A8:F2:EF:07:20:54:1C:C1:D3:99:EF:C8:4A:BE:32:59:29:19
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       687186707F31F233B8A16BFE09006BF20ECF90B3
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/323830343a3330633a3a2f33322d3438203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:22 +0000
ROA not before:           Thu 28 Apr 2022 13:24:22 +0000
ROA not after:            Thu 27 Apr 2023 13:29:22 +0000
asID:                     28343
IP address blocks:        2804:30c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:71:86:70:7f:31:f2:33:b8:a1:6b:fe:09:00:6b:f2:0e:cf:90:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:22 2022 GMT
            Not After : Apr 27 13:29:22 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:73:f4:41:08:d2:2f:37:c9:55:c8:03:6e:2f:
                    a8:0d:c1:a8:80:33:88:8c:0e:b7:e5:21:43:5d:07:
                    12:bc:2a:7d:35:dd:69:83:03:d3:e6:40:78:f1:7c:
                    23:31:b0:7b:57:63:71:a2:d9:93:05:65:e1:e3:71:
                    03:f2:2c:49:87:d8:4a:9f:a1:59:1c:f1:a1:bd:f3:
                    15:4c:d8:6f:21:0a:a2:30:9e:f7:23:a5:0d:c6:3d:
                    a8:4a:28:0b:9c:bc:11:79:25:a3:59:2d:82:40:ee:
                    95:40:99:60:7f:44:e8:a0:e7:0e:e7:d9:bd:21:a3:
                    d6:4a:84:ed:7b:38:14:8f:68:64:98:35:f9:0d:90:
                    97:23:87:12:00:a4:7f:70:04:44:54:18:c1:03:6c:
                    89:29:b1:8e:5e:03:2d:ef:da:53:7b:cd:74:1b:92:
                    da:60:75:18:c8:0a:d7:c8:74:b3:1e:94:a3:44:d1:
                    b4:98:3d:2d:6b:9c:32:fe:d1:fa:3a:93:66:21:87:
                    b9:11:90:5f:d2:46:c4:70:f5:23:e8:e4:31:e5:07:
                    0f:d5:49:3a:f8:9a:7f:e2:9e:a0:42:bf:ad:6f:1e:
                    4b:99:cd:f5:58:4b:7c:a3:0c:0c:2f:e6:3d:c5:19:
                    87:42:4f:fc:58:14:de:70:a7:a6:53:e3:3b:f9:e7:
                    c5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7B:A8:F2:EF:07:20:54:1C:C1:D3:99:EF:C8:4A:BE:32:59:29:19
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/323830343a3330633a3a2f33322d3438203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30c::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:25:84:09:0b:f7:32:cb:9c:9e:b6:63:f1:0e:aa:fa:3a:2a:
         30:ea:79:a8:43:16:e4:cf:0a:03:8d:b1:d5:3d:7b:4b:f6:45:
         c8:26:c9:4f:bc:e7:5e:42:cc:f4:d5:df:70:e5:88:da:6f:e2:
         a5:d1:f1:8e:7e:52:b6:47:bd:38:c6:d6:ce:e3:80:44:c6:d7:
         86:fc:bd:24:ef:77:bf:48:92:72:b5:38:5b:88:d5:99:7a:b3:
         3b:0b:04:71:ac:4d:6b:1e:26:2a:3b:99:98:37:a4:cc:a6:c2:
         1d:cc:b5:7a:60:ce:49:d8:15:05:5c:84:50:9a:04:cc:b0:d3:
         3c:fc:64:d1:88:0f:c0:6d:d5:53:a4:fd:74:ab:69:c7:5c:ae:
         85:fe:d6:af:6c:5f:ab:38:43:10:4f:e6:76:08:a6:94:76:7c:
         f8:05:19:2e:56:e6:60:3f:b8:63:20:7c:b9:b4:2b:78:1c:db:
         f7:39:b4:ca:b2:7c:52:e9:a8:2d:52:e2:cd:0a:c1:e0:f9:24:
         07:ba:4a:1f:b3:f5:95:50:9b:0a:a3:c7:24:fc:f7:c8:46:3c:
         9f:fa:f3:b1:b3:74:ec:7e:f6:64:b4:2c:42:f8:76:49:8d:60:
         a9:90:a0:13:66:ab:61:8a:01:c4:dc:5c:96:41:f8:3b:2e:7a:
         2e:fe:7e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org