Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/323830343a323935633a3a2f33322d313238203d3e203533323039.roa
File:                     323830343a323935633a3a2f33322d313238203d3e203533323039.roa (raw, json)
Hash identifier:          MgTLDQAUO+YJxGD2LhdLvkscssT0fjMDjogpvgiqQMI=
Subject key identifier:   87:10:FC:19:BF:D5:64:FD:D5:39:5D:8E:67:17:E2:94:71:40:69:D4
Certificate issuer:       /CN=4174471032BF86AA31A24302BF994269A134800A
Certificate serial:       3ADCC16E710DE1A8DBAEE65B232D6AAAB95AAB7F
Authority key identifier: 41:74:47:10:32:BF:86:AA:31:A2:43:02:BF:99:42:69:A1:34:80:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4174471032BF86AA31A24302BF994269A134800A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/323830343a323935633a3a2f33322d313238203d3e203533323039.roa
Signing time:             Tue 18 Jul 2023 14:58:16 +0000
ROA not before:           Tue 18 Jul 2023 14:53:16 +0000
ROA not after:            Tue 16 Jul 2024 14:58:16 +0000
asID:                     53209
IP address blocks:        2804:295c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:dc:c1:6e:71:0d:e1:a8:db:ae:e6:5b:23:2d:6a:aa:b9:5a:ab:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4174471032BF86AA31A24302BF994269A134800A
        Validity
            Not Before: Jul 18 14:53:16 2023 GMT
            Not After : Jul 16 14:58:16 2024 GMT
        Subject: CN=8710FC19BFD564FDD5395D8E6717E294714069D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:04:40:1a:7f:23:c5:d4:ac:a7:7c:d4:23:4d:
                    12:5e:bb:df:9d:22:70:28:b3:43:06:52:05:6b:80:
                    45:ce:a4:81:42:38:1b:bc:2b:48:94:8c:d8:49:a8:
                    92:2e:1e:c3:fe:cf:16:16:33:49:d5:a7:c4:f8:19:
                    5a:38:25:82:d4:25:8f:fa:ab:26:ea:ca:02:66:51:
                    ea:82:b2:6a:a3:9d:69:8b:f9:f1:38:e7:70:be:8d:
                    15:41:1f:fa:35:27:d1:04:2e:3a:8a:3c:fc:d3:1b:
                    de:be:55:98:1b:22:77:28:64:be:18:70:da:a3:90:
                    22:84:01:a6:cc:82:57:81:ca:27:e8:5c:52:78:85:
                    e4:be:c8:e1:b3:bc:86:f0:e8:5b:f5:ce:16:7e:57:
                    cf:cd:1a:32:19:7a:43:54:4a:79:d5:20:cc:ea:c0:
                    bc:3f:73:07:aa:e5:3f:14:61:c6:13:24:cf:0a:15:
                    77:1c:b4:05:dd:41:aa:37:d4:0d:c9:d5:7d:df:ce:
                    21:49:fa:d6:68:8c:bb:ec:f4:d9:d8:68:99:65:1f:
                    6a:57:b6:56:21:5c:ec:f2:aa:08:91:92:68:ad:08:
                    a0:a3:ae:54:bb:a0:d2:79:c6:0e:6a:84:3b:64:fe:
                    b7:f0:a9:60:e6:e8:b5:77:79:b7:2a:b4:26:73:53:
                    c9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:10:FC:19:BF:D5:64:FD:D5:39:5D:8E:67:17:E2:94:71:40:69:D4
            X509v3 Authority Key Identifier:
                keyid:41:74:47:10:32:BF:86:AA:31:A2:43:02:BF:99:42:69:A1:34:80:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/4174471032BF86AA31A24302BF994269A134800A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4174471032BF86AA31A24302BF994269A134800A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/323830343a323935633a3a2f33322d313238203d3e203533323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:295c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:7a:49:e4:50:77:70:3d:32:73:e6:7b:0c:1e:69:2a:4b:74:
         03:a6:1d:ad:13:c2:00:a1:de:1a:13:ba:df:b4:08:55:63:34:
         68:76:4a:04:95:6f:24:93:4c:25:cb:cc:03:1f:6e:50:90:60:
         de:e0:b4:c5:fc:d5:40:92:c3:82:08:57:47:10:92:77:9d:29:
         14:33:50:5e:ba:f3:de:09:d1:10:af:5b:6b:80:be:a4:f7:a8:
         6b:c4:49:8a:f7:2c:71:f8:88:d4:e7:40:b3:03:52:41:f6:d2:
         81:8e:ff:a6:11:e8:60:41:e2:c2:2f:f7:1a:f4:7e:7f:71:ef:
         50:7f:3f:bd:aa:87:da:d5:20:7c:9a:30:8e:1a:8d:d1:24:9d:
         79:14:1d:d1:d5:90:c3:2e:52:ff:39:f8:63:73:52:f3:24:a4:
         ae:ee:91:0c:88:66:18:aa:60:7f:03:c2:f5:af:ba:d9:e8:99:
         9f:ae:65:34:57:e1:0f:3b:be:36:f4:a1:76:63:3a:9b:f1:dd:
         08:fd:fd:2c:d0:2b:4f:be:35:90:0f:20:5a:b8:74:da:b8:34:
         d7:6b:e3:ec:ff:08:85:2e:0c:95:56:6c:ec:e2:74:3e:ec:06:
         3a:0f:7b:0a:e3:c4:c7:dd:93:c5:19:f3:5b:da:57:40:7c:84:
         ce:b4:9b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 17:51:10 2024 by rpki-client on console-fra.rpki-client.org