Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/323830343a363630303a3a2f33322d3332203d3e20323639353237.roa
File:                     323830343a363630303a3a2f33322d3332203d3e20323639353237.roa (raw, json)
Hash identifier:          AIOmkKBzIPLCFshHJ8B7+OB/0PAUIrGdQ6ibbt/VmUA=
Subject key identifier:   35:71:8D:3D:ED:CC:C8:3D:8E:2C:35:D1:87:53:6C:32:97:87:B0:43
Certificate issuer:       /CN=7D24FD2D59F7DC84368B4ED4F153DC3747A76DCE
Certificate serial:       3495EDAE8BD259D76952A24C26CC03F67B39CA6C
Authority key identifier: 7D:24:FD:2D:59:F7:DC:84:36:8B:4E:D4:F1:53:DC:37:47:A7:6D:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D24FD2D59F7DC84368B4ED4F153DC3747A76DCE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/323830343a363630303a3a2f33322d3332203d3e20323639353237.roa
Signing time:             Tue 09 Jan 2024 19:02:39 +0000
ROA not before:           Tue 09 Jan 2024 18:57:39 +0000
ROA not after:            Tue 07 Jan 2025 19:02:39 +0000
asID:                     269527
IP address blocks:        2804:6600::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:95:ed:ae:8b:d2:59:d7:69:52:a2:4c:26:cc:03:f6:7b:39:ca:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D24FD2D59F7DC84368B4ED4F153DC3747A76DCE
        Validity
            Not Before: Jan  9 18:57:39 2024 GMT
            Not After : Jan  7 19:02:39 2025 GMT
        Subject: CN=35718D3DEDCCC83D8E2C35D187536C329787B043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8e:c0:a7:e8:27:75:38:2f:af:ed:f7:92:00:
                    fd:b7:ac:16:79:5b:47:0c:6b:0d:45:b8:40:5b:48:
                    c7:a8:7a:55:d7:d8:86:ca:db:53:7d:b5:3b:1f:46:
                    14:76:09:52:ac:93:00:b4:20:99:7d:6a:9f:62:db:
                    bd:5f:2b:e3:26:31:66:11:5c:8f:77:b1:03:48:4b:
                    2a:74:20:9b:c2:f3:f3:14:a5:d9:0f:87:21:4f:6e:
                    f4:4d:8c:4b:d1:7f:94:3d:36:9d:4c:35:f9:4f:5e:
                    04:da:de:da:96:d0:8d:a4:4b:4c:b2:6f:64:ba:9f:
                    2e:15:74:f8:9a:74:b2:a2:71:76:64:10:95:49:af:
                    e1:dd:06:59:c2:41:20:96:b0:d2:5a:32:f0:5d:1a:
                    c1:6a:97:0f:29:e5:fd:53:84:de:6e:d6:6c:71:c1:
                    04:09:79:84:ec:59:05:06:a2:57:2e:20:b8:e8:90:
                    cf:7f:5d:3b:15:d6:2d:34:4b:0c:8f:e1:6d:3b:80:
                    86:2c:03:e7:33:86:aa:e5:fa:20:7e:2b:3e:0f:6c:
                    68:ee:57:51:a4:53:4e:49:e4:55:d7:48:91:e1:bb:
                    18:d5:67:18:55:d7:4f:16:d0:80:9a:d9:a2:d8:6e:
                    db:d5:77:1b:9d:f7:e0:d5:55:7b:7e:17:03:95:eb:
                    b6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:71:8D:3D:ED:CC:C8:3D:8E:2C:35:D1:87:53:6C:32:97:87:B0:43
            X509v3 Authority Key Identifier:
                keyid:7D:24:FD:2D:59:F7:DC:84:36:8B:4E:D4:F1:53:DC:37:47:A7:6D:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/7D24FD2D59F7DC84368B4ED4F153DC3747A76DCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D24FD2D59F7DC84368B4ED4F153DC3747A76DCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/323830343a363630303a3a2f33322d3332203d3e20323639353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6600::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:c6:81:08:59:f1:a9:2d:e7:76:ff:06:61:36:78:d1:d4:a8:
         fb:01:45:a6:de:d6:22:d5:73:9a:84:0a:e3:8c:7c:ae:4a:22:
         b9:bc:0d:3c:41:16:ec:79:04:bd:a0:47:38:c6:cf:18:db:56:
         09:45:5b:ef:6d:e2:c4:98:81:fe:0e:18:e6:a9:a6:d0:ea:d2:
         67:97:67:0f:64:05:87:a1:87:d8:2c:d2:a9:81:0a:ec:f8:5c:
         24:ee:9a:35:11:06:2c:7e:0c:28:4c:4f:81:5b:c2:9a:a0:3a:
         40:7c:95:12:19:9e:69:b5:71:5f:3e:1d:b8:17:4e:6b:17:36:
         5f:10:cd:f7:bd:7e:55:4a:dd:2b:73:23:1e:32:f1:f2:11:64:
         47:7c:ce:a8:97:94:00:ef:fa:5d:0b:9c:f0:3e:0d:f3:04:8b:
         ff:6d:35:0d:fe:de:1d:97:66:cd:ce:aa:19:31:42:cb:df:4a:
         ee:ea:75:0e:12:6a:25:2d:5f:2a:ca:54:fd:f9:ac:44:1c:64:
         c3:54:cb:27:4c:71:88:32:6f:c4:3e:da:62:39:9d:8c:53:a4:
         c8:08:4c:50:92:97:59:42:49:a5:39:e3:d8:d8:89:e2:44:ee:
         25:86:63:8f:fe:a4:2e:e1:44:23:f1:b4:b2:63:ed:48:3c:e6:
         67:a4:85:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org