Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/0/323830343a343739303a3a2f33322d3334203d3e20323637303632.roa
File:                     323830343a343739303a3a2f33322d3334203d3e20323637303632.roa (raw, json)
Hash identifier:          oWrrEZjG2T+CT6+7zYxh5lhlfCY4gEkBZVgsMyzYWPg=
Subject key identifier:   9E:A5:5F:C1:16:26:42:B4:8B:8C:F7:34:DF:3E:8E:E6:2B:B3:34:39
Certificate issuer:       /CN=70392AC965030959311AF7FE238B273C8513237D
Certificate serial:       5608A019515D2B55DC8F3D88D4CCB2A3BDDD27FF
Authority key identifier: 70:39:2A:C9:65:03:09:59:31:1A:F7:FE:23:8B:27:3C:85:13:23:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70392AC965030959311AF7FE238B273C8513237D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/0/323830343a343739303a3a2f33322d3334203d3e20323637303632.roa
Signing time:             Tue 04 Apr 2023 20:00:00 +0000
ROA not before:           Tue 04 Apr 2023 19:55:00 +0000
ROA not after:            Tue 02 Apr 2024 20:00:00 +0000
asID:                     267062
IP address blocks:        2804:4790::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:08:a0:19:51:5d:2b:55:dc:8f:3d:88:d4:cc:b2:a3:bd:dd:27:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70392AC965030959311AF7FE238B273C8513237D
        Validity
            Not Before: Apr  4 19:55:00 2023 GMT
            Not After : Apr  2 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:60:bd:d0:cc:cf:77:3f:f0:cf:07:da:91:5b:
                    e3:fe:4c:a2:03:78:57:c9:0b:3c:d5:ad:b1:e1:f0:
                    c3:0a:1f:fc:af:8a:01:ac:70:48:2f:b0:64:e5:e5:
                    6f:2b:81:46:2d:5a:46:b6:3e:d5:e9:a8:44:c7:38:
                    60:cb:1e:e3:14:9f:ce:71:54:a2:35:03:e0:ad:59:
                    8c:f5:b7:f4:96:5e:5b:1a:ea:13:62:02:c5:78:92:
                    59:5c:54:cd:e0:f7:9a:ba:be:23:6f:34:82:d8:b0:
                    00:c4:0d:0a:53:94:d0:e5:57:82:3c:18:b7:43:c2:
                    0c:30:4d:eb:0b:96:e2:28:ab:32:e8:dd:b9:f1:67:
                    9e:05:64:2b:31:64:4c:85:e1:1b:ac:27:e6:5b:e3:
                    2c:1e:40:8a:64:a3:35:01:4b:10:d3:93:5a:b3:08:
                    53:58:ec:ee:41:87:79:6c:03:3a:09:f2:0b:b0:f9:
                    d1:0c:57:aa:44:2a:51:24:b3:fe:9f:35:01:10:86:
                    1b:42:97:8c:ee:7f:80:99:99:ec:7f:a1:d9:26:0a:
                    8f:9d:cf:45:54:be:0e:a9:6b:6f:e8:35:6e:ed:7f:
                    85:b1:18:7b:db:1c:7b:9f:98:38:84:bc:09:53:0d:
                    c5:eb:78:16:9f:3d:6d:62:db:91:4a:bc:52:a5:43:
                    bb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A5:5F:C1:16:26:42:B4:8B:8C:F7:34:DF:3E:8E:E6:2B:B3:34:39
            X509v3 Authority Key Identifier:
                keyid:70:39:2A:C9:65:03:09:59:31:1A:F7:FE:23:8B:27:3C:85:13:23:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/0/70392AC965030959311AF7FE238B273C8513237D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70392AC965030959311AF7FE238B273C8513237D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/0/323830343a343739303a3a2f33322d3334203d3e20323637303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4790::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:b0:d6:8b:fb:91:2b:42:77:9f:9d:a7:e5:0f:d3:f0:8b:3d:
         16:14:f8:49:d9:69:33:2d:b2:29:87:4d:8a:ca:0a:b1:d0:3a:
         b1:be:9f:f9:37:56:d9:e8:6d:73:1b:fb:73:fc:f9:4c:26:f8:
         7a:25:e3:93:09:b9:a8:a9:be:b3:05:9f:ef:f0:7b:fd:e7:82:
         a2:ea:19:32:35:74:e7:85:00:07:d2:57:15:2b:cf:22:45:83:
         73:a7:95:5f:94:92:c6:fa:57:63:45:b0:c4:1f:5e:6e:ff:12:
         85:66:54:4c:6e:68:3b:fc:df:a8:36:02:1b:f1:fb:8e:cd:ee:
         f3:e1:92:e8:d3:3a:f7:00:a3:d0:02:20:19:b9:ea:93:e7:b8:
         bb:4d:25:8e:e5:f6:72:ca:16:1e:1e:78:8b:38:88:de:11:87:
         ca:7b:25:89:95:ac:90:e3:cc:28:c1:e1:f9:0a:cd:e8:fb:00:
         0f:b1:a4:e2:a7:6b:98:b0:aa:c4:2f:1a:79:fa:1a:7f:05:25:
         f2:79:18:07:f8:89:13:3d:82:40:40:2b:98:61:06:90:58:2b:
         5d:de:fa:63:89:a9:54:0a:9d:b4:7b:0e:ec:4a:89:35:af:44:
         f4:d4:f4:dd:d4:9b:25:3b:38:94:d6:42:25:75:20:51:21:5e:
         fe:18:56:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org