Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/0/323830343a383135633a3a2f33322d3332203d3e20323732343439.roa
File:                     323830343a383135633a3a2f33322d3332203d3e20323732343439.roa (raw, json)
Hash identifier:          nodx1Gqv9yCzc32FSRH3hx0BJSvQ4lgZasQZYcw+nG0=
Subject key identifier:   9C:E4:0A:23:DE:B3:CC:FD:D9:DE:2A:6D:B5:93:14:48:44:D9:59:75
Certificate issuer:       /CN=84A2A83BF4A8B6A60A5612FD1A3CE880AD88062B
Certificate serial:       2F5502DBB05D2B3A796EA6DAB878E7687ADDAB77
Authority key identifier: 84:A2:A8:3B:F4:A8:B6:A6:0A:56:12:FD:1A:3C:E8:80:AD:88:06:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/84A2A83BF4A8B6A60A5612FD1A3CE880AD88062B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/0/323830343a383135633a3a2f33322d3332203d3e20323732343439.roa
Signing time:             Wed 20 Mar 2024 19:42:19 +0000
ROA not before:           Wed 20 Mar 2024 19:37:19 +0000
ROA not after:            Wed 19 Mar 2025 19:42:19 +0000
asID:                     272449
IP address blocks:        2804:815c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:55:02:db:b0:5d:2b:3a:79:6e:a6:da:b8:78:e7:68:7a:dd:ab:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84A2A83BF4A8B6A60A5612FD1A3CE880AD88062B
        Validity
            Not Before: Mar 20 19:37:19 2024 GMT
            Not After : Mar 19 19:42:19 2025 GMT
        Subject: CN=9CE40A23DEB3CCFDD9DE2A6DB593144844D95975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:45:59:ee:b7:bc:fc:ef:52:44:4f:27:8f:b0:
                    13:a4:4c:4b:26:e0:2d:83:48:21:03:06:8c:7b:f2:
                    7b:0f:24:b0:e7:7d:3a:15:f3:ce:95:cb:74:a1:94:
                    be:c8:db:00:f3:16:b9:c5:52:e8:87:ce:49:e7:b6:
                    53:c2:75:d4:8e:92:f4:bc:23:5c:e2:07:9f:44:a1:
                    af:2b:9e:77:f7:4d:5d:65:00:96:d1:09:f8:00:44:
                    b9:3f:d7:ae:b2:e6:60:1f:01:70:18:fb:aa:f1:12:
                    f0:e2:da:4b:67:36:6b:ba:ac:6f:43:b5:2a:09:be:
                    39:99:6d:24:97:5b:ca:d8:57:67:70:e8:6a:e2:a4:
                    e4:39:73:2d:98:67:01:a0:28:67:cf:a1:96:a9:59:
                    26:b2:0f:7a:3d:4f:94:10:e0:0a:9f:8f:b3:32:65:
                    19:ba:76:bd:93:b6:d4:f5:eb:02:49:5b:53:71:62:
                    d4:8b:18:99:a6:09:c1:63:d9:f5:1f:93:40:e2:d2:
                    a8:b4:c9:33:35:cb:8c:8a:3d:8f:2d:cc:a4:99:d4:
                    b3:50:e4:b1:71:49:ba:08:cd:67:32:51:2c:b7:66:
                    f5:00:b4:28:13:3c:d4:67:8f:1f:ef:82:67:b4:20:
                    df:f9:11:99:26:41:77:9e:51:5f:50:1b:22:ce:b8:
                    59:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E4:0A:23:DE:B3:CC:FD:D9:DE:2A:6D:B5:93:14:48:44:D9:59:75
            X509v3 Authority Key Identifier:
                keyid:84:A2:A8:3B:F4:A8:B6:A6:0A:56:12:FD:1A:3C:E8:80:AD:88:06:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/0/84A2A83BF4A8B6A60A5612FD1A3CE880AD88062B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/84A2A83BF4A8B6A60A5612FD1A3CE880AD88062B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/0/323830343a383135633a3a2f33322d3332203d3e20323732343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:815c::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:f0:e5:3a:2c:d7:6f:57:7b:0a:1d:04:20:e8:f7:f4:a6:50:
         6e:18:bc:4c:ec:0a:61:52:a1:ad:1b:61:97:96:36:ce:55:14:
         96:26:5c:96:1c:a9:90:1d:16:51:ed:27:16:b8:a7:2b:53:50:
         87:62:3b:f4:70:be:da:97:d4:7a:f4:6e:c2:7a:33:b0:b2:4e:
         c7:93:c9:da:f8:16:a7:17:fe:a2:78:3d:38:6c:3e:2f:a4:49:
         ba:87:5e:be:c9:fb:4a:a1:6f:26:42:3b:1a:56:77:01:15:92:
         95:1d:75:6c:fc:2c:14:ad:65:f6:d0:a7:05:7a:e3:7d:8e:5b:
         9e:d1:11:8f:dd:bc:77:2c:a3:95:07:82:69:28:25:77:c8:6b:
         36:7f:68:3a:18:30:aa:dc:50:45:15:c1:87:56:2d:e5:ec:5e:
         2e:4e:08:64:9c:bd:75:9d:f2:46:55:36:c8:be:06:a0:11:ac:
         f2:37:93:d4:48:fe:23:7b:7e:62:33:64:10:ba:52:a1:b2:dc:
         9d:4a:bc:c9:50:46:c6:54:e0:f3:ef:9d:ca:e8:f9:f7:4b:0a:
         39:17:c3:5b:7b:61:b6:a6:05:9e:52:04:f8:c4:5a:c5:4f:f3:
         69:32:66:8b:ed:a4:7e:e0:7f:41:ab:a0:a2:1d:9b:87:4b:60:
         e0:c0:0c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:08 2024 by rpki-client on console-fra.rpki-client.org