Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/323830343a383336343a383030303a3a2f33332d3333203d3e20323732313935.roa
File:                     323830343a383336343a383030303a3a2f33332d3333203d3e20323732313935.roa (raw, json)
Hash identifier:          LF3VmO30lTy+5ZXCo9c6ZXDmkPACK5aAATJrmgfuSf4=
Subject key identifier:   15:E1:B0:70:13:07:F5:0F:BC:F2:C7:85:33:81:EA:48:4E:92:5E:78
Certificate issuer:       /CN=D4A38721DF06693E4AAB26F859A1713FEF02F478
Certificate serial:       45A345F1762A8FD1D07CD6561D48CD3728B5458B
Authority key identifier: D4:A3:87:21:DF:06:69:3E:4A:AB:26:F8:59:A1:71:3F:EF:02:F4:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4A38721DF06693E4AAB26F859A1713FEF02F478.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/323830343a383336343a383030303a3a2f33332d3333203d3e20323732313935.roa
Signing time:             Fri 08 Dec 2023 02:21:29 +0000
ROA not before:           Fri 08 Dec 2023 02:16:29 +0000
ROA not after:            Fri 06 Dec 2024 02:21:29 +0000
asID:                     272195
IP address blocks:        2804:8364:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a3:45:f1:76:2a:8f:d1:d0:7c:d6:56:1d:48:cd:37:28:b5:45:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4A38721DF06693E4AAB26F859A1713FEF02F478
        Validity
            Not Before: Dec  8 02:16:29 2023 GMT
            Not After : Dec  6 02:21:29 2024 GMT
        Subject: CN=15E1B0701307F50FBCF2C7853381EA484E925E78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c2:2c:3e:e8:28:3a:4a:d3:c9:80:c4:65:50:
                    4e:a3:45:ff:2b:a8:bb:38:f7:4b:d9:aa:08:f3:5f:
                    cf:68:54:66:0a:43:8d:ca:a6:2a:73:ab:a0:f3:b6:
                    f2:15:04:7f:4a:c5:f4:c3:6b:d7:b9:44:69:9d:d7:
                    d7:23:d9:d4:28:80:d1:2b:77:72:9b:9a:44:7c:b8:
                    9b:c3:ac:6b:bb:7c:ed:53:3b:52:b3:8b:5b:ed:cb:
                    d5:0b:af:9a:a5:4c:52:de:cc:b4:06:f9:dd:3f:e2:
                    a3:be:80:75:8d:e4:0b:39:d0:9e:10:d6:04:c4:a2:
                    af:70:31:c9:57:c4:6a:18:3b:09:d2:d7:f4:e5:e2:
                    db:ee:77:5f:c5:ff:cc:6a:e3:f4:d7:d9:17:ff:a5:
                    b2:8e:bd:79:5d:18:ba:3e:58:cd:cf:a8:ad:5f:11:
                    ed:8d:36:5a:6e:f9:0d:27:23:d4:7c:35:38:56:cd:
                    b9:5b:d7:36:61:c5:dc:b7:7f:92:0c:9a:6e:b0:71:
                    b3:97:f4:71:68:d8:9e:5d:db:80:0f:09:35:fc:6f:
                    aa:38:56:5d:c3:95:26:46:03:59:fd:50:0e:dd:c6:
                    8f:ca:4f:4d:41:74:52:d5:e7:0e:be:f1:01:80:38:
                    84:57:d3:31:52:6c:0d:cf:3c:aa:b6:16:00:39:2c:
                    9e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E1:B0:70:13:07:F5:0F:BC:F2:C7:85:33:81:EA:48:4E:92:5E:78
            X509v3 Authority Key Identifier:
                keyid:D4:A3:87:21:DF:06:69:3E:4A:AB:26:F8:59:A1:71:3F:EF:02:F4:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D4A38721DF06693E4AAB26F859A1713FEF02F478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4A38721DF06693E4AAB26F859A1713FEF02F478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/323830343a383336343a383030303a3a2f33332d3333203d3e20323732313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8364:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a8:bf:4a:de:fa:78:76:0c:cb:ae:fc:ac:37:b8:c8:a8:ea:9e:
         04:24:d2:78:97:27:78:87:6f:25:b9:90:e6:35:a2:0f:9a:12:
         8b:bc:a4:dc:86:72:0e:17:fd:78:ea:d4:ce:ac:2f:ec:e3:b0:
         80:97:3c:1e:d8:e3:59:8e:cd:03:e3:a2:97:96:83:0a:44:b2:
         48:b9:93:6c:9b:e8:9d:93:e1:59:b5:a9:ce:7a:3b:d0:f2:f7:
         07:d8:43:99:1e:09:e1:95:07:8d:a3:a9:af:16:95:02:07:51:
         a7:b5:0c:05:4f:04:3d:c4:9c:20:a2:f3:2d:41:4d:8c:07:24:
         35:bf:81:56:6a:2e:a7:6f:81:36:4a:18:7b:dd:22:ff:ed:24:
         b9:bb:60:0e:d9:4c:8e:6a:31:06:8c:54:1d:a2:1a:4f:90:42:
         bd:ed:22:4c:83:6a:1a:cf:7b:46:e7:3e:29:01:0c:3f:46:c6:
         8d:e4:7b:9b:44:a1:79:16:ff:ed:be:c4:f3:64:fb:99:38:b7:
         5f:5f:eb:0f:dc:c4:a8:66:14:4a:f2:50:8b:9d:e2:16:b7:94:
         80:8d:ad:fc:58:be:46:d6:26:a7:93:3a:af:be:7e:1c:de:da:
         df:d7:db:b5:6e:0e:88:77:4d:7b:19:84:e1:44:16:6a:f6:ef:
         da:09:79:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org