Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/323830343a383832343a3a2f33322d3332203d3e20323732373533.roa
File:                     323830343a383832343a3a2f33322d3332203d3e20323732373533.roa (raw, json)
Hash identifier:          lnUH5YJO9Hc0GxMsuV2CBTCXYCnUZVpDPHt6Pw/nAyk=
Subject key identifier:   BB:7A:7A:2B:B0:8B:4A:E9:AC:B1:3E:B7:B7:BA:BB:00:49:99:A4:74
Certificate issuer:       /CN=CA298D59E7C66D747401ACF553288EF82DA95796
Certificate serial:       7FFAC6E0794B59D52A4021ED9A15A57B83FEEB5C
Authority key identifier: CA:29:8D:59:E7:C6:6D:74:74:01:AC:F5:53:28:8E:F8:2D:A9:57:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA298D59E7C66D747401ACF553288EF82DA95796.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/323830343a383832343a3a2f33322d3332203d3e20323732373533.roa
Signing time:             Thu 07 Mar 2024 13:48:50 +0000
ROA not before:           Thu 07 Mar 2024 13:43:50 +0000
ROA not after:            Thu 06 Mar 2025 13:48:50 +0000
asID:                     272753
IP address blocks:        2804:8824::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:fa:c6:e0:79:4b:59:d5:2a:40:21:ed:9a:15:a5:7b:83:fe:eb:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA298D59E7C66D747401ACF553288EF82DA95796
        Validity
            Not Before: Mar  7 13:43:50 2024 GMT
            Not After : Mar  6 13:48:50 2025 GMT
        Subject: CN=BB7A7A2BB08B4AE9ACB13EB7B7BABB004999A474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:70:21:f4:e2:85:89:a9:23:59:fb:ad:24:3b:
                    76:ff:3f:02:bf:40:af:31:18:4e:88:f4:4d:a4:10:
                    c0:a6:53:ab:57:92:96:b9:44:df:34:6c:86:cb:33:
                    9a:44:bf:7d:6a:73:d7:5e:d0:cb:16:e9:d9:7b:a6:
                    19:5d:52:94:c2:b2:5c:88:95:aa:7e:3f:5b:15:aa:
                    25:52:73:58:4a:c7:47:10:13:ac:a8:57:6b:e1:45:
                    65:ad:55:c2:b7:43:46:7c:d7:9b:8e:98:a2:f1:45:
                    0e:de:01:8d:52:c2:a8:1c:ab:f3:8d:48:8a:fa:fe:
                    27:cf:f9:af:ea:ce:e1:2f:34:8b:d9:99:28:7a:af:
                    2f:c0:64:86:ee:2b:59:93:05:a1:7f:41:e4:b4:ae:
                    6e:3f:0f:45:8c:84:45:79:16:12:50:ea:f1:62:a7:
                    37:b8:a2:cf:e8:3c:03:8f:15:1c:1f:43:6a:80:b3:
                    59:d0:3b:c4:49:ec:14:27:e2:1c:03:58:73:c9:17:
                    f2:56:86:8e:1e:17:0e:f0:fa:31:d1:91:2e:fa:0c:
                    8e:90:04:91:b0:ca:01:00:64:ff:00:79:8e:43:f1:
                    94:61:85:29:45:00:2f:2c:f1:1c:88:b3:ca:3f:f3:
                    a2:95:37:e1:4d:7f:87:c5:c1:e4:1d:66:14:22:0d:
                    19:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7A:7A:2B:B0:8B:4A:E9:AC:B1:3E:B7:B7:BA:BB:00:49:99:A4:74
            X509v3 Authority Key Identifier:
                keyid:CA:29:8D:59:E7:C6:6D:74:74:01:AC:F5:53:28:8E:F8:2D:A9:57:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/CA298D59E7C66D747401ACF553288EF82DA95796.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA298D59E7C66D747401ACF553288EF82DA95796.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/323830343a383832343a3a2f33322d3332203d3e20323732373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8824::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:8d:93:4a:7d:25:47:a9:40:7d:92:c5:b4:44:ba:46:da:d9:
         e8:8d:6f:e3:28:73:98:a0:36:b8:68:1e:49:f6:ce:e5:cf:0b:
         28:05:13:f4:fb:2c:f6:04:9e:b0:93:69:07:6e:42:a7:4c:41:
         0f:a7:cc:ee:c6:2f:7b:f8:b2:ab:8e:e1:5e:06:ca:74:32:89:
         fc:df:6e:4d:94:10:90:32:5c:47:b2:19:56:a7:3e:0a:8e:b5:
         5f:6c:17:ae:37:8b:18:b4:e6:cf:d1:25:0b:02:51:2b:63:31:
         4f:98:17:26:82:28:6f:b7:ea:a6:a3:b4:e6:5a:06:1e:1b:52:
         5b:ca:d8:5e:a0:9d:a8:a3:c9:89:f3:c4:25:88:de:ec:3f:8c:
         bc:c7:b0:d2:19:42:cc:5f:67:f8:bc:d8:95:ec:42:eb:01:4f:
         56:0b:07:ba:92:3c:19:01:2b:fb:53:dd:ec:18:c9:4d:2a:bc:
         1c:a3:2f:ec:25:17:ec:fe:89:8b:2a:1a:19:f1:46:5b:56:35:
         a2:19:3e:f6:39:06:49:05:3e:dd:34:60:f4:a4:55:c2:ec:27:
         57:a3:29:c2:97:06:7e:e5:2b:61:e8:38:37:a3:3c:00:d0:92:
         c7:e2:ea:f3:2e:d9:56:9f:71:fb:da:ed:a2:68:ef:80:84:90:
         b1:13:72:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org