Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/323830343a383336343a3a2f33332d3333203d3e20323732313935.roa
File:                     323830343a383336343a3a2f33332d3333203d3e20323732313935.roa (raw, json)
Hash identifier:          6Ah35dkUa6dl2hyC5qQJQtJMAKDOqDItH+mnAU5i4ZY=
Subject key identifier:   90:7E:0D:2E:39:1A:C2:8C:27:16:89:2F:A2:21:AE:EA:26:63:45:AD
Certificate issuer:       /CN=D4A38721DF06693E4AAB26F859A1713FEF02F478
Certificate serial:       2F796DC5A3B7090375597F73DC6F488B4D2856
Authority key identifier: D4:A3:87:21:DF:06:69:3E:4A:AB:26:F8:59:A1:71:3F:EF:02:F4:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4A38721DF06693E4AAB26F859A1713FEF02F478.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/323830343a383336343a3a2f33332d3333203d3e20323732313935.roa
Signing time:             Fri 08 Dec 2023 02:21:28 +0000
ROA not before:           Fri 08 Dec 2023 02:16:28 +0000
ROA not after:            Fri 06 Dec 2024 02:21:28 +0000
asID:                     272195
IP address blocks:        2804:8364::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:79:6d:c5:a3:b7:09:03:75:59:7f:73:dc:6f:48:8b:4d:28:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4A38721DF06693E4AAB26F859A1713FEF02F478
        Validity
            Not Before: Dec  8 02:16:28 2023 GMT
            Not After : Dec  6 02:21:28 2024 GMT
        Subject: CN=907E0D2E391AC28C2716892FA221AEEA266345AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fa:7c:b8:c4:cf:d5:c1:b6:24:af:e4:6e:7a:
                    15:03:f2:4c:02:60:b2:4c:5f:62:f8:91:06:f4:1d:
                    c2:77:6c:a5:a2:b8:b6:c5:a9:76:e0:03:5e:91:d5:
                    47:3f:ad:45:8b:1b:bd:3b:0a:db:bd:75:71:c2:b9:
                    e6:5d:ba:9e:72:66:0e:0e:6f:34:3e:c1:f7:64:0e:
                    70:f9:10:ce:cb:b8:8c:7d:a3:7c:af:93:83:33:28:
                    fb:f5:bd:a2:26:87:1a:23:67:1f:29:17:63:27:3e:
                    e3:e6:b6:ea:10:3c:55:58:32:64:f0:04:4a:fb:31:
                    32:7c:69:9d:7f:05:b6:07:f2:de:9a:9f:74:ef:73:
                    e9:8d:99:3e:f9:3f:b6:ff:8c:34:38:84:65:1c:4f:
                    c3:bb:7f:05:25:ae:d8:4a:03:85:68:d9:4a:86:79:
                    f2:08:a6:77:74:ab:b4:85:5a:53:11:c0:fd:3a:9c:
                    1e:fa:e6:11:bb:d9:4b:37:af:23:3f:2e:b8:7b:e4:
                    f4:b2:c9:28:73:92:52:64:dd:a7:52:cc:19:c1:38:
                    cb:99:ea:a6:2e:3e:f9:73:d0:99:e6:b8:4d:39:1c:
                    dc:df:30:02:13:dc:ba:5d:b4:c2:18:71:bb:26:79:
                    61:7b:c3:4a:3e:44:cb:87:6e:31:66:92:fd:b2:6b:
                    99:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7E:0D:2E:39:1A:C2:8C:27:16:89:2F:A2:21:AE:EA:26:63:45:AD
            X509v3 Authority Key Identifier:
                keyid:D4:A3:87:21:DF:06:69:3E:4A:AB:26:F8:59:A1:71:3F:EF:02:F4:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D4A38721DF06693E4AAB26F859A1713FEF02F478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4A38721DF06693E4AAB26F859A1713FEF02F478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/323830343a383336343a3a2f33332d3333203d3e20323732313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8364::/33

    Signature Algorithm: sha256WithRSAEncryption
         4c:9b:26:4d:08:9b:7b:f0:18:49:7d:5c:47:7e:b9:45:63:64:
         d9:6a:a1:32:a4:bb:61:b4:a8:54:ab:ec:65:4c:01:2f:5c:43:
         d9:32:d3:fd:40:96:cb:f4:8d:e0:7d:4d:f7:37:cf:c0:7a:f8:
         fb:b6:1b:0d:59:a0:7e:26:e7:5d:0b:67:6a:24:77:09:4a:05:
         56:7f:52:63:07:c0:85:fb:88:f4:87:c6:2c:fe:b0:ca:97:98:
         fe:9b:23:a7:2d:24:41:d8:e1:18:43:9f:35:44:92:d1:8e:e0:
         07:7c:53:51:44:23:a2:b5:6a:98:ee:5e:43:2c:48:48:11:c0:
         33:54:4c:f0:35:ca:47:48:bb:62:27:b4:41:f5:a9:7c:5b:de:
         17:a9:06:11:87:7a:09:59:ee:ce:a6:96:99:ba:4d:2f:db:ea:
         98:43:d9:55:28:30:5b:2c:a4:64:21:7f:87:a2:29:ac:d5:82:
         5b:fa:9c:f5:e0:56:46:7b:60:2b:35:ba:64:8e:bd:93:f9:48:
         19:20:ac:46:a2:c4:5c:42:f7:23:fa:6f:62:73:da:a6:c1:b3:
         7a:53:02:96:6d:3e:c4:07:cb:d0:5d:81:ad:e4:1d:87:dc:3f:
         f0:71:96:33:74:a3:ba:af:57:7b:79:a6:31:56:78:22:c9:6a:
         03:1a:11:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org