Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/323830343a383832343a3a2f33322d3438203d3e20323732373533.roa
File:                     323830343a383832343a3a2f33322d3438203d3e20323732373533.roa (raw, json)
Hash identifier:          jpzDnTOYV8C8W8LuFxlCM2xsH8AIAq4Jo5C7UeU4bX8=
Subject key identifier:   DC:AC:97:C7:16:2A:F8:46:24:53:F5:CB:8D:C6:D3:4F:1A:16:B9:23
Certificate issuer:       /CN=CA298D59E7C66D747401ACF553288EF82DA95796
Certificate serial:       1A07EBE774895407B1FAD9035010DF4747057B86
Authority key identifier: CA:29:8D:59:E7:C6:6D:74:74:01:AC:F5:53:28:8E:F8:2D:A9:57:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA298D59E7C66D747401ACF553288EF82DA95796.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/323830343a383832343a3a2f33322d3438203d3e20323732373533.roa
Signing time:             Tue 12 Mar 2024 18:19:31 +0000
ROA not before:           Tue 12 Mar 2024 18:14:31 +0000
ROA not after:            Tue 11 Mar 2025 18:19:31 +0000
asID:                     272753
IP address blocks:        2804:8824::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:07:eb:e7:74:89:54:07:b1:fa:d9:03:50:10:df:47:47:05:7b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA298D59E7C66D747401ACF553288EF82DA95796
        Validity
            Not Before: Mar 12 18:14:31 2024 GMT
            Not After : Mar 11 18:19:31 2025 GMT
        Subject: CN=DCAC97C7162AF8462453F5CB8DC6D34F1A16B923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1a:94:a5:65:17:b1:8b:cc:6a:53:cc:8c:95:
                    53:1d:af:f7:4f:b4:21:38:f0:7c:5e:0d:e7:b3:c4:
                    4b:b9:1b:88:16:09:af:18:ae:8e:07:ba:e1:7a:7e:
                    79:95:4c:10:5c:c5:2f:cf:c3:d0:3d:d4:7b:67:2f:
                    a2:e9:a4:0f:be:32:98:6e:b2:91:09:f0:1f:29:f7:
                    a7:c2:ee:d8:fc:44:2c:31:e5:6a:99:03:fa:82:d8:
                    42:9e:3d:f6:c3:bb:97:23:00:a2:d5:0f:6c:c3:32:
                    0b:a7:11:ea:67:2e:44:33:c3:d9:a0:4d:cf:c5:67:
                    ab:72:1c:3d:54:9f:8f:3e:6a:f0:3a:65:2f:ee:82:
                    0e:62:e6:ec:3d:c0:2d:05:33:e2:0c:98:f1:f5:9a:
                    cf:bb:9a:f2:6d:9d:5c:38:5d:c7:28:ce:6f:06:77:
                    79:88:d6:51:7a:a0:dc:e8:50:34:e6:c6:b4:58:45:
                    62:4b:58:34:b2:7d:21:55:5d:72:fd:35:d9:3d:06:
                    00:9d:b2:a7:3e:70:f3:ce:23:c8:91:88:23:38:5d:
                    40:df:3b:04:c4:36:d6:b0:f1:1f:9f:61:d4:bb:4a:
                    49:5c:11:92:2d:de:10:4e:be:8d:15:76:dd:6a:90:
                    ac:f2:f3:56:e7:ab:6f:65:ac:9c:53:47:16:40:bd:
                    a4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AC:97:C7:16:2A:F8:46:24:53:F5:CB:8D:C6:D3:4F:1A:16:B9:23
            X509v3 Authority Key Identifier:
                keyid:CA:29:8D:59:E7:C6:6D:74:74:01:AC:F5:53:28:8E:F8:2D:A9:57:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/CA298D59E7C66D747401ACF553288EF82DA95796.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA298D59E7C66D747401ACF553288EF82DA95796.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/323830343a383832343a3a2f33322d3438203d3e20323732373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8824::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:47:a2:36:f1:91:9f:87:9c:1a:a4:ba:db:83:c5:86:dc:8a:
         34:e9:e2:9f:d2:39:63:61:f7:3a:d2:e4:f1:d3:f2:2a:e8:9c:
         92:75:9e:63:8f:d3:c3:47:af:4e:3d:2e:2c:f1:2b:45:ad:56:
         b3:03:8d:42:0a:ea:75:01:74:a6:b4:b6:2f:48:18:9e:fe:4f:
         d9:3e:22:f5:45:77:51:b7:8b:94:2e:56:46:91:8e:9c:72:6f:
         6f:cb:7c:13:94:ea:1a:2c:d7:d8:8b:aa:7f:38:38:7b:b7:e6:
         48:55:fd:42:10:96:1e:4a:b8:33:62:df:25:29:97:09:ef:87:
         5f:30:4f:b7:90:57:ae:37:ae:84:ef:87:74:bf:b9:82:22:21:
         d8:ff:9b:d9:ec:98:c5:1b:ce:2d:c7:c3:ef:e9:ab:d9:6a:e1:
         de:ec:0f:19:83:8f:28:28:a9:34:09:c5:93:6c:b3:57:94:b5:
         5b:b1:e3:56:6d:3c:57:16:d9:31:80:6b:3c:a1:f5:a3:2f:44:
         7a:94:f2:0a:3c:b0:c7:c5:13:4c:22:e7:a7:16:c9:2e:65:55:
         ea:a9:82:0d:16:01:6a:1b:74:24:35:e9:71:52:49:da:b5:13:
         e4:96:45:56:51:63:33:49:02:5c:bc:87:f3:da:12:b6:29:70:
         e4:13:77:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org