Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/0/323830343a386563303a3a2f33322d3332203d3e203532353837.roa
File:                     323830343a386563303a3a2f33322d3332203d3e203532353837.roa (raw, json)
Hash identifier:          97Yrei6ED7mPftqtH5Ujp+F+YcrnvtI/CrVslfahiGQ=
Subject key identifier:   52:7C:61:90:67:3F:24:57:B7:E6:BE:F1:2E:88:BF:F1:FE:80:43:79
Certificate issuer:       /CN=78588D531B2F637866CA4E230867722DEA2BE617
Certificate serial:       7E177FD232B3E82BE50466C1B8477A81C605AE41
Authority key identifier: 78:58:8D:53:1B:2F:63:78:66:CA:4E:23:08:67:72:2D:EA:2B:E6:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78588D531B2F637866CA4E230867722DEA2BE617.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/0/323830343a386563303a3a2f33322d3332203d3e203532353837.roa
Signing time:             Sat 17 Feb 2024 03:15:19 +0000
ROA not before:           Sat 17 Feb 2024 03:10:19 +0000
ROA not after:            Sat 15 Feb 2025 03:15:19 +0000
asID:                     52587
IP address blocks:        2804:8ec0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:17:7f:d2:32:b3:e8:2b:e5:04:66:c1:b8:47:7a:81:c6:05:ae:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78588D531B2F637866CA4E230867722DEA2BE617
        Validity
            Not Before: Feb 17 03:10:19 2024 GMT
            Not After : Feb 15 03:15:19 2025 GMT
        Subject: CN=527C6190673F2457B7E6BEF12E88BFF1FE804379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cb:0b:21:3a:57:51:2e:94:3c:d4:70:60:cd:
                    40:12:06:ae:b5:3c:06:c9:f2:f7:e2:72:5c:9b:ba:
                    6c:12:a7:95:98:53:70:7b:38:85:4c:64:19:20:4c:
                    ea:77:37:77:28:01:d3:e4:ce:b7:14:26:9e:86:d9:
                    39:1c:94:90:6d:de:47:c7:3f:70:f9:4b:90:49:13:
                    dc:a1:32:c3:02:85:f3:98:2f:8a:6b:ba:49:f4:b4:
                    62:d4:60:27:ad:50:93:34:03:95:36:4f:c0:df:22:
                    4c:38:86:fe:3c:fb:8b:e6:89:24:8f:f0:5d:5b:52:
                    ab:ba:36:e1:6b:41:0c:6b:b5:b9:78:67:4f:f1:bf:
                    c5:a5:9a:37:85:33:f9:16:ce:19:98:4f:fe:e4:31:
                    8a:e9:a0:f5:15:3f:3b:6e:e4:90:db:cf:e3:66:ad:
                    7c:65:52:9f:ae:af:6f:49:e9:5b:d5:dd:fb:3c:11:
                    0b:72:c2:8e:6b:80:3d:1f:1f:67:c6:c7:84:80:0f:
                    b7:f0:14:dd:45:61:fc:67:ce:99:49:35:30:f3:53:
                    0d:38:59:44:f9:40:f1:e5:05:16:66:4e:fc:3e:41:
                    9d:1a:0e:b7:de:2f:c0:83:be:57:8b:8a:7c:5c:d3:
                    d8:b8:17:11:e7:98:5b:f8:28:85:fa:77:28:96:88:
                    bc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7C:61:90:67:3F:24:57:B7:E6:BE:F1:2E:88:BF:F1:FE:80:43:79
            X509v3 Authority Key Identifier:
                keyid:78:58:8D:53:1B:2F:63:78:66:CA:4E:23:08:67:72:2D:EA:2B:E6:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/0/78588D531B2F637866CA4E230867722DEA2BE617.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78588D531B2F637866CA4E230867722DEA2BE617.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/0/323830343a386563303a3a2f33322d3332203d3e203532353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:d4:6e:65:4b:df:99:9d:d6:6d:5b:9d:58:ad:34:29:24:7d:
         54:89:3b:32:f8:e5:f4:44:94:2d:09:59:c6:2e:23:e0:dd:0b:
         15:b4:89:db:cc:79:57:7b:8c:d7:60:a2:97:99:33:19:e3:85:
         ab:a9:9a:0d:43:a9:b1:af:d0:95:c6:23:12:5d:3f:5b:be:54:
         4d:fb:22:18:eb:b5:1f:8f:d8:8a:81:9c:15:8c:09:0d:8e:77:
         39:ff:b8:e8:a6:82:7a:3d:70:f7:04:37:74:f0:d9:d7:2c:1c:
         43:15:1e:1d:35:95:44:f7:b2:af:e8:f5:7c:ad:4a:80:34:9e:
         97:65:8c:fb:98:98:12:a0:d2:6f:69:16:82:77:a3:57:32:2e:
         72:0b:37:d5:49:5f:0e:8a:df:96:be:19:0e:ab:6b:8c:e4:44:
         bb:14:58:0a:ff:49:54:c1:3d:47:46:cf:be:43:a2:db:52:78:
         66:fd:3c:97:fb:3a:10:b0:1f:07:3d:16:8a:d8:cc:42:1a:6e:
         0c:fb:e1:3b:4e:e8:da:0b:cd:63:58:ae:40:99:c6:a1:95:ac:
         1b:bd:1c:d8:f0:e8:f5:bd:e8:32:30:89:68:51:eb:5c:14:c7:
         42:10:08:36:33:e3:7c:64:0b:b9:59:94:f5:ff:7a:17:cb:69:
         8e:0d:4a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:08 2024 by rpki-client on console-fra.rpki-client.org