Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BdRjY3kXjZDcJDLzAuGt7b78CYHbHERS2xcpUwcQUfEQ/0/323830343a383162383a3a2f33332d3333203d3e20323732343732.roa
File:                     323830343a383162383a3a2f33332d3333203d3e20323732343732.roa (raw, json)
Hash identifier:          DPBoPHv4uGYObYlz8Dho53zoQfcQgIF04Ew4A0aKkd4=
Subject key identifier:   34:C3:70:D6:CD:67:7B:89:E4:89:40:5A:96:53:29:4D:1B:DE:6E:4F
Certificate issuer:       /CN=49A7147301C9C400DB308B792C67EB9183231E46
Certificate serial:       366CEA2A2A8F95D91C4E0D89E7AB50004EF1DA95
Authority key identifier: 49:A7:14:73:01:C9:C4:00:DB:30:8B:79:2C:67:EB:91:83:23:1E:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49A7147301C9C400DB308B792C67EB9183231E46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BdRjY3kXjZDcJDLzAuGt7b78CYHbHERS2xcpUwcQUfEQ/0/323830343a383162383a3a2f33332d3333203d3e20323732343732.roa
Signing time:             Fri 21 Apr 2023 23:00:00 +0000
ROA not before:           Fri 21 Apr 2023 22:55:00 +0000
ROA not after:            Fri 19 Apr 2024 23:00:00 +0000
asID:                     272472
IP address blocks:        2804:81b8::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:6c:ea:2a:2a:8f:95:d9:1c:4e:0d:89:e7:ab:50:00:4e:f1:da:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49A7147301C9C400DB308B792C67EB9183231E46
        Validity
            Not Before: Apr 21 22:55:00 2023 GMT
            Not After : Apr 19 23:00:00 2024 GMT
        Subject: CN=3082010A0282010100C06C85CD6054A9E9A292ABB9D0206CFF19ED58CD01A219C9F1AAD6C7E477688E1AAA16C4D0FC53A18C14642C96F2D7CEBC70ED4982D0C0122D81E67EDF1F2FB631D6DCD92211544160030572AB1DB69125BB9F9C549D80856D532B32C5683BE497FB57637F6FFA2374E5803194143850305348950289C4D591ABEFA7C8CF7695C97453471FE3171EE3CA52FD92A997F4783E1A2FDE4B9E963CD1215D553A9005232DA3031477AFCF2D0A9EEA4207BCB11787FD30CBB00937D9A2F8188CF8CA2EDA9EEBD64B95C2D7557E93D1140F799766ECAD614F55986F556E6B603A5098C5B456B310DD6BEFB74B1265A30281B4EA1D8ABAF5D8B26623E165E41B072645530203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6c:85:cd:60:54:a9:e9:a2:92:ab:b9:d0:20:
                    6c:ff:19:ed:58:cd:01:a2:19:c9:f1:aa:d6:c7:e4:
                    77:68:8e:1a:aa:16:c4:d0:fc:53:a1:8c:14:64:2c:
                    96:f2:d7:ce:bc:70:ed:49:82:d0:c0:12:2d:81:e6:
                    7e:df:1f:2f:b6:31:d6:dc:d9:22:11:54:41:60:03:
                    05:72:ab:1d:b6:91:25:bb:9f:9c:54:9d:80:85:6d:
                    53:2b:32:c5:68:3b:e4:97:fb:57:63:7f:6f:fa:23:
                    74:e5:80:31:94:14:38:50:30:53:48:95:02:89:c4:
                    d5:91:ab:ef:a7:c8:cf:76:95:c9:74:53:47:1f:e3:
                    17:1e:e3:ca:52:fd:92:a9:97:f4:78:3e:1a:2f:de:
                    4b:9e:96:3c:d1:21:5d:55:3a:90:05:23:2d:a3:03:
                    14:77:af:cf:2d:0a:9e:ea:42:07:bc:b1:17:87:fd:
                    30:cb:b0:09:37:d9:a2:f8:18:8c:f8:ca:2e:da:9e:
                    eb:d6:4b:95:c2:d7:55:7e:93:d1:14:0f:79:97:66:
                    ec:ad:61:4f:55:98:6f:55:6e:6b:60:3a:50:98:c5:
                    b4:56:b3:10:dd:6b:ef:b7:4b:12:65:a3:02:81:b4:
                    ea:1d:8a:ba:f5:d8:b2:66:23:e1:65:e4:1b:07:26:
                    45:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C3:70:D6:CD:67:7B:89:E4:89:40:5A:96:53:29:4D:1B:DE:6E:4F
            X509v3 Authority Key Identifier:
                keyid:49:A7:14:73:01:C9:C4:00:DB:30:8B:79:2C:67:EB:91:83:23:1E:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BdRjY3kXjZDcJDLzAuGt7b78CYHbHERS2xcpUwcQUfEQ/0/49A7147301C9C400DB308B792C67EB9183231E46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49A7147301C9C400DB308B792C67EB9183231E46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BdRjY3kXjZDcJDLzAuGt7b78CYHbHERS2xcpUwcQUfEQ/0/323830343a383162383a3a2f33332d3333203d3e20323732343732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:81b8::/33

    Signature Algorithm: sha256WithRSAEncryption
         14:dc:75:af:18:fc:a9:ef:34:d2:2a:2a:55:69:19:56:22:60:
         60:15:40:3a:e3:64:ee:0f:1e:06:11:84:24:eb:9c:61:0a:0e:
         7d:06:6c:cd:55:df:24:b2:04:02:a0:6b:18:a7:16:9e:c4:89:
         67:f4:a6:8b:11:75:20:d1:ac:6a:a8:cf:7b:30:c8:0a:23:3b:
         33:18:ad:42:3b:b0:f4:54:31:4c:18:cb:f2:80:6f:52:9b:a6:
         ff:c9:64:7e:ce:ed:e7:d8:2e:a2:4e:e9:99:27:a5:ee:10:77:
         a9:ee:19:bf:86:a5:49:f7:3f:93:05:ad:57:4d:72:5f:58:c2:
         65:75:54:12:c4:23:f6:c8:24:c8:bf:eb:d9:e0:c4:e5:bc:b6:
         27:85:fa:a9:78:1a:f6:1b:ed:75:a4:7e:86:ee:7f:f7:cd:96:
         2c:d1:23:d7:ef:9a:56:98:ec:2e:5c:e1:7c:a6:ea:0e:d5:b6:
         6d:78:b9:18:cb:37:8a:0c:fb:27:3a:0c:de:2f:f0:cb:f1:ec:
         95:f8:a8:72:9e:1d:40:2b:aa:b4:b3:86:0a:4d:9e:be:82:eb:
         d2:fd:38:4a:59:3b:0f:3d:2e:ec:9d:fa:e1:c1:e7:9a:45:64:
         36:77:fd:ae:99:32:5a:f0:56:7f:72:10:d9:44:b8:7b:fd:7a:
         e5:e7:67:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org