Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/1/323830343a323866383a3a2f33322d3332203d3e20323633393930.roa
File:                     323830343a323866383a3a2f33322d3332203d3e20323633393930.roa (raw, json)
Hash identifier:          3bScBLq2FCqK1soN4RcDjiNC7avno88XR623hcHbDKI=
Subject key identifier:   C8:A9:54:EE:4C:0D:D0:88:31:0D:3D:47:B5:15:87:A2:21:7F:62:A4
Certificate issuer:       /CN=75C327CB0D2E472E0CDE43B4A6C08606CB0EB0F5
Certificate serial:       418EA48D0B4345E5F93F372E9C53041651BCDE8D
Authority key identifier: 75:C3:27:CB:0D:2E:47:2E:0C:DE:43:B4:A6:C0:86:06:CB:0E:B0:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75C327CB0D2E472E0CDE43B4A6C08606CB0EB0F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/1/323830343a323866383a3a2f33322d3332203d3e20323633393930.roa
Signing time:             Sat 13 Apr 2024 16:13:21 +0000
ROA not before:           Sat 13 Apr 2024 16:08:21 +0000
ROA not after:            Sat 12 Apr 2025 16:13:21 +0000
asID:                     263990
IP address blocks:        2804:28f8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8e:a4:8d:0b:43:45:e5:f9:3f:37:2e:9c:53:04:16:51:bc:de:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75C327CB0D2E472E0CDE43B4A6C08606CB0EB0F5
        Validity
            Not Before: Apr 13 16:08:21 2024 GMT
            Not After : Apr 12 16:13:21 2025 GMT
        Subject: CN=C8A954EE4C0DD088310D3D47B51587A2217F62A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5d:33:7e:a2:a8:97:53:9c:86:4a:d7:df:14:
                    25:13:f7:c9:b0:8d:c7:0c:1b:0a:6b:c5:d9:9e:70:
                    ed:5f:ee:c7:90:e9:b8:5b:a8:3b:54:b7:1d:60:5f:
                    6f:e3:f4:71:15:a1:d8:42:1c:27:a0:43:cd:d0:c7:
                    db:2f:06:99:b5:08:16:45:97:d4:f0:22:6a:02:37:
                    43:25:11:88:92:0b:8a:f6:a6:b0:f3:b0:d8:d8:3a:
                    b2:fe:8b:88:a3:21:68:58:1c:2f:33:cc:cd:15:ae:
                    fd:03:b6:c9:04:a3:64:5a:d0:88:33:6a:bb:90:b1:
                    27:15:d1:98:29:69:2f:c4:21:30:4f:a0:95:84:51:
                    73:46:fd:e9:83:8d:c0:cb:6d:7e:57:3c:69:3f:e7:
                    1e:1e:7a:6a:ce:26:09:6c:ca:13:b6:4c:da:74:d0:
                    b6:e2:c1:38:72:f6:d2:e8:fa:d4:26:47:98:5a:f8:
                    21:f6:c7:8c:dd:ae:4d:30:83:6e:0f:86:ee:0b:be:
                    96:36:b6:50:f7:79:ef:dc:4b:b2:7b:5a:71:69:04:
                    5c:5f:99:96:a8:e0:a1:1e:7f:52:e6:4d:47:84:0b:
                    22:87:54:1c:29:56:97:81:0c:dc:e8:43:9f:4b:0d:
                    52:6b:f5:ce:fa:d5:a4:7c:93:a2:40:f1:fe:cb:61:
                    e6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A9:54:EE:4C:0D:D0:88:31:0D:3D:47:B5:15:87:A2:21:7F:62:A4
            X509v3 Authority Key Identifier:
                keyid:75:C3:27:CB:0D:2E:47:2E:0C:DE:43:B4:A6:C0:86:06:CB:0E:B0:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/1/75C327CB0D2E472E0CDE43B4A6C08606CB0EB0F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75C327CB0D2E472E0CDE43B4A6C08606CB0EB0F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/1/323830343a323866383a3a2f33322d3332203d3e20323633393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:c5:90:4b:a4:95:a3:8e:f7:e4:92:d5:eb:40:63:1f:15:7f:
         30:f7:25:f5:21:44:b9:64:df:49:ee:07:9b:5d:0a:40:d3:c4:
         e5:9e:98:af:5b:d5:0a:13:a4:ef:1a:b9:4f:64:c5:0e:31:33:
         95:ff:30:ba:3f:36:bb:9a:9a:f1:64:0c:81:91:84:e8:f7:ca:
         f9:f5:7a:25:5b:67:95:48:e6:d5:50:46:df:85:d7:67:1c:21:
         34:16:09:1c:e3:ef:24:f0:4d:75:9c:53:39:43:68:1f:53:20:
         88:ef:24:be:5c:ef:75:2f:e3:0b:ef:13:4d:88:bc:39:2a:39:
         6c:8a:90:51:eb:1c:44:f2:6b:b4:45:9d:cb:dc:07:1a:3f:2e:
         01:f6:a6:09:9a:5d:bc:c8:c0:49:a8:e6:b4:11:b1:71:f4:a3:
         f7:e2:62:9e:0b:f7:40:be:a0:48:7e:c2:bf:ad:ea:b4:4c:98:
         a0:a9:e7:f3:cb:89:eb:bb:b3:c3:d5:2e:bd:88:52:c6:06:47:
         98:06:50:1d:22:10:d7:33:41:d6:07:cb:03:ef:61:52:7f:2e:
         86:79:2c:17:3c:e2:d6:2f:ee:08:fe:9e:00:d8:46:93:33:9d:
         2b:d2:e8:01:bb:b0:c4:f6:8a:cd:09:ba:f1:09:68:5d:37:2f:
         42:c4:cc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org