Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a383030303a3a2f33382d3338203d3e20323730363834.roa
File:                     323830343a366663383a383030303a3a2f33382d3338203d3e20323730363834.roa (raw, json)
Hash identifier:          jKQPPKLqaNpuyEfalHkGmxFly2z1A5MKVH++CFJ6c9A=
Subject key identifier:   7D:05:CA:69:A3:C5:66:C3:5A:09:14:0F:EC:4A:6D:38:42:61:D4:74
Certificate issuer:       /CN=483787B7037C3DA540ACD3A5B893D65DA468956A
Certificate serial:       333ABBA909CCCE2BA41E3414AF91061F4F2D4230
Authority key identifier: 48:37:87:B7:03:7C:3D:A5:40:AC:D3:A5:B8:93:D6:5D:A4:68:95:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/483787B7037C3DA540ACD3A5B893D65DA468956A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a383030303a3a2f33382d3338203d3e20323730363834.roa
Signing time:             Fri 01 Sep 2023 11:29:54 +0000
ROA not before:           Fri 01 Sep 2023 11:24:54 +0000
ROA not after:            Fri 30 Aug 2024 11:29:54 +0000
asID:                     270684
IP address blocks:        2804:6fc8:8000::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:3a:bb:a9:09:cc:ce:2b:a4:1e:34:14:af:91:06:1f:4f:2d:42:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=483787B7037C3DA540ACD3A5B893D65DA468956A
        Validity
            Not Before: Sep  1 11:24:54 2023 GMT
            Not After : Aug 30 11:29:54 2024 GMT
        Subject: CN=7D05CA69A3C566C35A09140FEC4A6D384261D474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:92:49:c9:2c:dc:9b:88:bf:9f:b8:1c:e7:58:
                    ae:38:0d:38:a0:03:93:cc:4c:14:52:57:04:72:9e:
                    71:b0:cd:0f:16:af:d0:a5:1f:09:e5:0e:5a:a7:12:
                    db:ba:ee:d8:08:c4:68:a5:fe:21:3a:1e:a0:ce:9f:
                    ca:4a:7c:e6:f3:ea:3b:2b:9d:e8:77:47:6d:3f:32:
                    bd:6f:cb:a6:fd:92:54:41:c0:e7:3d:0d:df:a6:aa:
                    67:a9:37:dc:0a:b7:86:cf:0f:4a:07:73:1a:bd:8f:
                    86:2e:6c:72:d0:bf:fc:2b:d0:32:0d:8c:91:11:c3:
                    3f:98:38:7d:95:51:d4:bd:03:e6:89:41:32:07:90:
                    f3:54:b3:2c:08:65:39:6a:b1:15:9d:8c:45:7a:78:
                    2c:79:01:16:51:8f:30:af:ff:da:08:1a:ab:1e:e5:
                    6a:a2:3d:b2:6d:7c:ca:2c:b3:25:8e:cf:2d:c3:94:
                    e2:b9:d3:70:c3:40:7f:10:55:3c:aa:69:f8:12:fe:
                    eb:99:47:31:08:a9:49:94:f9:70:62:29:ac:e1:13:
                    81:83:00:57:c7:59:b8:6f:ea:eb:15:b5:0a:f3:0d:
                    13:0b:9e:38:39:55:1f:79:f1:bf:a4:55:83:25:3c:
                    73:9b:3a:37:bd:ab:84:fd:89:4e:74:3a:33:e6:de:
                    28:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:05:CA:69:A3:C5:66:C3:5A:09:14:0F:EC:4A:6D:38:42:61:D4:74
            X509v3 Authority Key Identifier:
                keyid:48:37:87:B7:03:7C:3D:A5:40:AC:D3:A5:B8:93:D6:5D:A4:68:95:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/483787B7037C3DA540ACD3A5B893D65DA468956A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/483787B7037C3DA540ACD3A5B893D65DA468956A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a383030303a3a2f33382d3338203d3e20323730363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fc8:8000::/38

    Signature Algorithm: sha256WithRSAEncryption
         7f:7c:41:8c:e0:44:8a:11:4a:1d:cd:5e:c7:e1:06:7e:df:c1:
         e6:a4:5f:c6:72:12:e4:64:7a:bf:57:9f:31:6c:8c:af:d4:db:
         71:80:32:c8:a7:c5:3e:ab:46:0d:3d:6c:66:2f:0e:4a:ae:17:
         86:32:8d:63:00:ae:de:80:37:b9:77:36:82:46:14:fb:d6:d9:
         d8:64:28:55:65:52:6f:f4:82:79:cb:a3:60:52:31:45:56:89:
         19:7a:f0:20:a3:41:a7:7d:22:6b:66:61:05:4c:e2:d0:a4:0d:
         eb:cc:d0:fa:f7:70:ae:f8:35:e5:c1:75:e5:8c:64:ad:d4:7f:
         31:3d:c7:85:71:ed:ba:50:ec:9a:41:a2:22:b9:e1:ee:e8:1b:
         a7:be:4d:8f:b6:77:03:8b:8e:fd:b7:3d:3e:a7:1e:79:a0:cf:
         e5:11:d7:7c:fb:98:7c:9b:ae:19:7c:1e:34:9e:ec:f5:44:d8:
         12:6a:0f:31:42:d0:7f:11:d9:9e:b6:67:c6:58:b2:18:69:f0:
         9e:6c:91:5e:1e:dc:8c:5c:45:37:90:9c:1b:63:11:93:ae:7f:
         8a:10:37:c3:45:a6:9c:71:da:7d:45:6f:6b:9f:85:d3:07:e5:
         b6:f8:a7:7e:38:ab:1e:a1:8f:c8:18:1f:64:8c:1b:c0:0e:de:
         de:24:9f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org