Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/323830343a373865383a633030303a3a2f33342d3334203d3e20323731323733.roa
File:                     323830343a373865383a633030303a3a2f33342d3334203d3e20323731323733.roa (raw, json)
Hash identifier:          w2kZtiPs512DLfafCldNq9cpt4dXPD4J5rrfFF+9k3g=
Subject key identifier:   03:DF:34:6D:63:8A:3C:4F:76:F8:05:DB:08:E5:5D:0E:79:2E:6A:9B
Certificate issuer:       /CN=C882C008D311AF28DC5EF81CA1783297EFE34DEE
Certificate serial:       456C7BE98EAF8DADAA6E8F7BFB6F2700C983DEF5
Authority key identifier: C8:82:C0:08:D3:11:AF:28:DC:5E:F8:1C:A1:78:32:97:EF:E3:4D:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C882C008D311AF28DC5EF81CA1783297EFE34DEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/323830343a373865383a633030303a3a2f33342d3334203d3e20323731323733.roa
Signing time:             Wed 26 Jul 2023 14:09:28 +0000
ROA not before:           Wed 26 Jul 2023 14:04:28 +0000
ROA not after:            Wed 24 Jul 2024 14:09:28 +0000
asID:                     271273
IP address blocks:        2804:78e8:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:6c:7b:e9:8e:af:8d:ad:aa:6e:8f:7b:fb:6f:27:00:c9:83:de:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C882C008D311AF28DC5EF81CA1783297EFE34DEE
        Validity
            Not Before: Jul 26 14:04:28 2023 GMT
            Not After : Jul 24 14:09:28 2024 GMT
        Subject: CN=03DF346D638A3C4F76F805DB08E55D0E792E6A9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:58:7c:7a:69:71:05:d2:3d:fa:13:8e:3e:16:
                    89:b1:fc:d2:6c:9d:cb:f9:86:ed:18:63:88:4f:15:
                    d4:b3:0e:3d:e5:5f:12:e1:96:7a:db:ae:00:1d:fb:
                    d6:72:db:3a:1b:2c:4b:f9:2f:b9:9d:ff:b7:2f:05:
                    59:2f:5c:6d:ac:8e:d3:8b:8e:a9:ef:d8:48:cf:a4:
                    68:28:1a:46:d5:54:ab:c2:75:3e:47:46:cc:8f:48:
                    7e:f4:1e:5b:4a:6c:f2:55:a8:8c:7e:68:ca:6b:a7:
                    8b:79:1d:e8:87:fa:55:ae:7e:99:d9:35:25:0c:94:
                    c8:61:a5:a3:b0:df:8a:51:fb:9e:57:e5:15:1c:3d:
                    e6:ed:a5:57:82:02:22:73:62:d9:8c:c0:a6:db:8c:
                    fa:17:2a:e7:1e:dc:17:ca:4c:18:18:6c:90:77:5d:
                    76:c3:e2:cc:f9:6d:a4:da:92:47:56:af:b9:82:16:
                    e9:8d:53:38:29:c7:58:c3:e1:17:dc:92:0d:85:e4:
                    7d:4d:79:72:9f:b6:59:13:7e:45:3a:2f:a8:a9:d9:
                    a5:1b:43:96:2d:72:47:66:45:63:ec:82:34:87:19:
                    30:96:08:b9:c5:af:a2:0f:88:d8:b9:ed:9b:db:ca:
                    e9:a0:51:78:84:8f:ad:da:4c:87:51:b6:35:29:20:
                    19:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DF:34:6D:63:8A:3C:4F:76:F8:05:DB:08:E5:5D:0E:79:2E:6A:9B
            X509v3 Authority Key Identifier:
                keyid:C8:82:C0:08:D3:11:AF:28:DC:5E:F8:1C:A1:78:32:97:EF:E3:4D:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/C882C008D311AF28DC5EF81CA1783297EFE34DEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C882C008D311AF28DC5EF81CA1783297EFE34DEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/323830343a373865383a633030303a3a2f33342d3334203d3e20323731323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:78e8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6c:84:e4:93:9a:97:5c:7d:82:95:cf:68:e3:47:07:af:4b:96:
         d4:e5:36:e9:27:6c:4a:a8:eb:97:d9:4e:0d:c4:c3:fd:12:0e:
         bb:e4:37:10:85:4b:c4:cd:4b:11:cb:7d:19:10:85:6f:53:77:
         35:45:5e:9c:23:7e:0c:26:97:8e:31:3e:f7:20:cc:84:33:d1:
         96:1e:c1:d2:dc:25:42:ff:23:6d:46:43:c2:79:70:b1:35:32:
         af:f7:6d:40:ab:41:bb:75:27:0b:6a:12:d9:0c:e3:36:38:13:
         7e:cd:a6:f9:58:6f:d3:10:da:b8:f7:11:ee:d7:e8:76:40:73:
         73:8a:b8:4d:9f:42:9e:d6:4e:72:82:c8:a0:8b:1b:84:f6:6f:
         ab:9e:4f:ed:36:78:69:be:d9:05:f4:d0:44:c2:0d:a5:95:37:
         f7:da:42:9a:58:78:f0:e4:77:7e:db:f0:23:bc:aa:3a:89:07:
         bc:c8:fa:be:e3:46:d7:00:87:f3:8f:60:7c:f3:89:3f:2a:d6:
         b0:86:2d:05:ee:98:bc:89:8c:10:fb:d9:c1:6e:30:46:5f:10:
         96:52:0e:58:ff:96:2c:d5:e4:b8:f3:3e:ae:56:39:dd:7d:5b:
         c1:90:ff:a4:c7:97:5c:8a:47:31:f2:d7:ff:4a:a4:05:92:64:
         6c:59:0f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org