Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BXy4Asq7odjvWx5kB85Hj5ZZjqsu5y2RPKgeF3rRoP3f/0/323830343a383136343a3a2f33322d3438203d3e20323732343531.roa
File:                     323830343a383136343a3a2f33322d3438203d3e20323732343531.roa (raw, json)
Hash identifier:          pvs/UcujejfhtiXsYPNztdGuYXMfavHBVSaS4//PSVY=
Subject key identifier:   1E:3F:6C:EF:23:B7:8E:8C:C9:E4:01:49:AA:28:A7:5F:25:FA:18:CC
Certificate issuer:       /CN=2407B4B73CD713E1C6AF19C8B58BA12EBF6863F7
Certificate serial:       03C6376F0DCFBC5BBA7036232C440046F790CB4A
Authority key identifier: 24:07:B4:B7:3C:D7:13:E1:C6:AF:19:C8:B5:8B:A1:2E:BF:68:63:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2407B4B73CD713E1C6AF19C8B58BA12EBF6863F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BXy4Asq7odjvWx5kB85Hj5ZZjqsu5y2RPKgeF3rRoP3f/0/323830343a383136343a3a2f33322d3438203d3e20323732343531.roa
Signing time:             Mon 04 Dec 2023 15:01:16 +0000
ROA not before:           Mon 04 Dec 2023 14:56:16 +0000
ROA not after:            Mon 02 Dec 2024 15:01:16 +0000
asID:                     272451
IP address blocks:        2804:8164::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c6:37:6f:0d:cf:bc:5b:ba:70:36:23:2c:44:00:46:f7:90:cb:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2407B4B73CD713E1C6AF19C8B58BA12EBF6863F7
        Validity
            Not Before: Dec  4 14:56:16 2023 GMT
            Not After : Dec  2 15:01:16 2024 GMT
        Subject: CN=1E3F6CEF23B78E8CC9E40149AA28A75F25FA18CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ab:78:6b:8f:fc:db:e8:f1:d0:a8:35:ec:52:
                    17:41:fd:96:b9:73:03:19:39:4d:44:12:4c:73:2c:
                    be:95:ec:4a:62:b4:64:c3:31:a2:77:eb:1c:e7:ae:
                    b6:99:93:ee:b1:d5:6c:f6:29:82:af:1c:38:ab:ff:
                    3f:63:20:58:be:12:97:d5:d0:d1:a4:76:d1:0e:1a:
                    e4:c1:73:a7:09:ec:00:dc:4f:fd:72:5d:81:5d:76:
                    69:9e:18:11:e7:96:da:bd:02:ee:74:f8:22:6c:6b:
                    8f:2b:7c:55:22:80:da:69:8b:08:82:29:a3:d4:e1:
                    67:b1:a8:ee:4b:75:01:24:f9:78:96:2a:69:cd:a6:
                    a0:a4:d2:2e:a2:20:1e:c0:c4:98:f1:54:5e:5c:93:
                    68:78:a2:c0:72:e8:cb:8b:36:a9:49:4e:6e:3a:25:
                    f3:80:bc:04:e6:8e:c1:86:74:12:a8:5d:83:81:e4:
                    79:2b:95:d1:6c:f4:ca:a8:79:3b:5c:75:46:0a:e6:
                    be:48:86:d6:3c:3e:ac:84:ea:8a:67:57:34:e4:0b:
                    72:a3:eb:51:84:5e:d5:a2:9c:fd:11:12:5f:d9:76:
                    a5:7f:e9:63:57:07:e3:33:ef:20:88:2c:a2:13:36:
                    9f:96:91:fc:c6:49:ed:44:9d:b9:2b:b1:f5:8f:c4:
                    28:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3F:6C:EF:23:B7:8E:8C:C9:E4:01:49:AA:28:A7:5F:25:FA:18:CC
            X509v3 Authority Key Identifier:
                keyid:24:07:B4:B7:3C:D7:13:E1:C6:AF:19:C8:B5:8B:A1:2E:BF:68:63:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BXy4Asq7odjvWx5kB85Hj5ZZjqsu5y2RPKgeF3rRoP3f/0/2407B4B73CD713E1C6AF19C8B58BA12EBF6863F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2407B4B73CD713E1C6AF19C8B58BA12EBF6863F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BXy4Asq7odjvWx5kB85Hj5ZZjqsu5y2RPKgeF3rRoP3f/0/323830343a383136343a3a2f33322d3438203d3e20323732343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8164::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:fb:5f:43:33:d4:22:ba:0f:ce:d1:f8:5c:94:de:fb:6d:87:
         00:1e:a5:6c:6a:6f:12:75:2d:05:30:be:ae:b2:ca:a7:45:d1:
         40:0f:ef:4b:47:e9:ca:71:81:ce:f6:60:b3:00:13:4c:51:fa:
         03:20:d1:9d:81:c7:39:8f:1f:05:1a:c4:c6:0d:e2:29:7f:7c:
         ae:26:11:50:8c:b8:79:af:8c:0b:9c:33:21:f2:f2:3d:d6:96:
         cf:ae:ee:97:4e:c8:f8:13:b3:d4:af:b5:47:f9:1b:41:d9:9f:
         52:98:7a:ff:e6:b1:e1:18:1e:00:db:a4:e1:29:36:ea:61:94:
         6f:6b:3f:f2:3f:70:56:84:31:36:b5:ef:16:12:ef:94:b7:a2:
         a7:8e:8b:9f:5a:c8:76:8b:b3:17:0c:94:3a:40:9c:07:cb:b3:
         83:3d:71:3b:8b:2d:12:3d:c3:53:34:8b:79:45:cf:87:53:dc:
         42:26:ab:0d:5d:0b:2a:80:11:89:18:56:08:9f:10:8e:5b:50:
         64:94:45:cf:8c:49:4a:ca:26:23:dc:7a:92:15:47:e4:4e:f0:
         80:70:30:dd:5d:45:5b:94:ec:7e:97:27:bb:0f:6d:18:fa:fc:
         c2:49:00:7d:19:98:3b:dd:59:13:bf:0b:6b:ef:f4:db:e0:90:
         d3:e2:95:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org