Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/323830343a3363383a3a2f33322d3438203d3e20323632393038.roa
File:                     323830343a3363383a3a2f33322d3438203d3e20323632393038.roa (raw, json)
Hash identifier:          xA+xQTqykj8jA1feAvggNxJOC+LIDr1NM2NAuURwZR0=
Subject key identifier:   A0:1A:C2:3D:8F:00:04:CE:A1:37:07:E4:97:3A:FF:C6:7F:8D:E9:B0
Certificate issuer:       /CN=380AE62845C4468F9462327C41A0D22DA68054FD
Certificate serial:       1B7DCCE744B12F497DAE595A25FEE4529157E512
Authority key identifier: 38:0A:E6:28:45:C4:46:8F:94:62:32:7C:41:A0:D2:2D:A6:80:54:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/380AE62845C4468F9462327C41A0D22DA68054FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/323830343a3363383a3a2f33322d3438203d3e20323632393038.roa
Signing time:             Tue 23 Jan 2024 13:04:48 +0000
ROA not before:           Tue 23 Jan 2024 12:59:48 +0000
ROA not after:            Tue 21 Jan 2025 13:04:48 +0000
asID:                     262908
IP address blocks:        2804:3c8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:7d:cc:e7:44:b1:2f:49:7d:ae:59:5a:25:fe:e4:52:91:57:e5:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380AE62845C4468F9462327C41A0D22DA68054FD
        Validity
            Not Before: Jan 23 12:59:48 2024 GMT
            Not After : Jan 21 13:04:48 2025 GMT
        Subject: CN=A01AC23D8F0004CEA13707E4973AFFC67F8DE9B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:06:67:97:ff:b8:ef:f2:f8:e3:30:67:e2:ac:
                    08:6e:24:72:17:c4:b7:60:ae:8a:52:9e:a3:0b:e1:
                    2d:17:5c:f4:ab:3d:93:a0:41:f7:dd:b2:a9:0a:2c:
                    bb:d7:c5:61:c1:bf:45:f6:23:cb:7f:76:24:ee:30:
                    c5:f6:9e:3c:4f:5b:41:d9:54:44:79:e0:69:0a:58:
                    1f:fb:e9:bd:0a:36:0e:28:05:c1:8b:03:25:c7:61:
                    50:57:16:67:a1:52:82:39:c7:91:b1:4f:27:ad:8f:
                    3d:20:ee:2f:70:ae:f2:10:9c:7b:be:5b:4e:9d:cd:
                    24:ac:af:13:15:c3:d2:43:05:d8:60:2e:d0:ad:bb:
                    23:96:20:9c:37:3c:a9:18:47:84:5d:bc:c4:4c:6f:
                    e4:ad:0e:ab:1d:e8:91:01:dd:d6:6f:33:29:2f:48:
                    85:e3:75:01:fa:8f:f2:3d:a1:7b:9e:1b:b2:f1:0b:
                    29:d8:c8:b5:eb:ed:b1:b1:72:82:a7:dc:d0:78:db:
                    d9:06:c5:47:fe:1d:b8:44:32:e1:6c:25:41:e1:21:
                    4e:f2:4a:bd:ee:3d:e3:64:ed:d4:06:ee:ea:40:b8:
                    b6:27:b0:44:b2:11:22:c4:15:1a:e3:ea:8e:d0:8c:
                    9c:ff:51:f4:83:69:f3:02:1b:c1:1f:d6:83:f0:36:
                    02:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1A:C2:3D:8F:00:04:CE:A1:37:07:E4:97:3A:FF:C6:7F:8D:E9:B0
            X509v3 Authority Key Identifier:
                keyid:38:0A:E6:28:45:C4:46:8F:94:62:32:7C:41:A0:D2:2D:A6:80:54:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/380AE62845C4468F9462327C41A0D22DA68054FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/380AE62845C4468F9462327C41A0D22DA68054FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/323830343a3363383a3a2f33322d3438203d3e20323632393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:ca:51:43:8d:f2:dd:69:a1:3e:91:63:ee:43:27:25:71:bb:
         98:13:fe:6e:68:65:0c:8e:29:cc:dd:00:7d:5d:c8:c4:02:3e:
         72:a6:1f:64:d8:52:59:e8:e5:cc:2a:4f:62:c6:f0:3c:13:72:
         9a:67:6c:92:2b:b9:71:aa:e3:4f:b9:fe:87:b4:a1:34:75:0c:
         3c:35:f0:5a:b8:6e:1b:2e:ac:7d:96:f4:ba:0c:72:f2:30:99:
         26:16:e7:62:19:7a:f1:0b:d6:39:a3:8f:9a:47:43:82:59:92:
         06:a8:f2:4c:54:b3:de:b2:79:58:f4:bd:e7:d2:e8:8e:32:19:
         c8:ae:c4:f7:bc:c6:38:63:f4:46:f0:e4:fa:89:8e:97:ca:74:
         3d:75:56:c2:77:98:fc:dc:f4:05:e1:15:6b:96:a6:af:a1:76:
         ae:f7:76:86:1e:7f:1b:5b:b3:f6:bb:cd:0f:e2:09:69:09:f7:
         39:94:8b:02:5a:1f:4d:4d:e3:8f:e7:68:ac:2d:b4:44:ba:04:
         9c:a2:56:cb:f4:b2:56:92:1f:5a:ca:13:b1:7d:8f:bb:a6:71:
         d1:db:9e:4c:40:7a:5c:32:ba:e1:db:77:01:3a:b3:2d:01:e7:
         e4:38:4a:77:e2:ff:25:c4:b9:a7:93:dc:ec:92:6f:4c:c1:93:
         ba:de:dd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:08 2024 by rpki-client on console-fra.rpki-client.org