Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/323830343a383038303a343030303a3a2f33342d3334203d3e20323731373534.roa
File:                     323830343a383038303a343030303a3a2f33342d3334203d3e20323731373534.roa (raw, json)
Hash identifier:          Dw8rl0MxtFId+YpgpYBcOIjP80iaWfmQBX3FsVh2+WI=
Subject key identifier:   2D:42:D6:AB:BD:69:71:1B:AF:78:E0:E7:7E:5F:D9:76:26:B1:9E:8A
Certificate issuer:       /CN=2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B
Certificate serial:       4E759E260BD3E7D1CEFC70568812A5B9D10BB7A0
Authority key identifier: 27:38:B5:ED:13:21:C8:2B:DE:0D:C3:DF:9C:0D:99:35:F7:B8:C0:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/323830343a383038303a343030303a3a2f33342d3334203d3e20323731373534.roa
Signing time:             Tue 21 Nov 2023 13:00:00 +0000
ROA not before:           Tue 21 Nov 2023 12:55:00 +0000
ROA not after:            Tue 19 Nov 2024 13:00:00 +0000
asID:                     271754
IP address blocks:        2804:8080:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:75:9e:26:0b:d3:e7:d1:ce:fc:70:56:88:12:a5:b9:d1:0b:b7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B
        Validity
            Not Before: Nov 21 12:55:00 2023 GMT
            Not After : Nov 19 13:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e5:62:59:88:62:ea:7d:1b:05:10:99:6a:71:
                    8d:45:d7:97:25:da:5e:ab:17:d5:f5:93:09:1a:d9:
                    b8:36:79:d0:11:37:64:eb:4a:3b:83:78:e4:eb:09:
                    6e:2b:27:79:12:c7:7a:53:5e:22:09:ac:eb:05:5c:
                    9a:26:8a:e8:ee:5a:09:a4:25:ea:54:a7:a2:0b:75:
                    4e:16:1b:7d:04:d3:8e:8a:29:c1:9c:d7:f0:cd:df:
                    fc:5d:c3:4c:f6:6e:88:ed:25:5b:91:9a:5f:b5:8e:
                    bf:95:7f:99:41:ce:c8:e1:79:92:bf:77:ea:6b:23:
                    66:f1:d7:de:a4:61:2f:a7:7a:a9:d5:d1:db:6c:e8:
                    5a:67:20:9c:27:90:76:78:6f:06:dd:4f:0e:d2:81:
                    b8:6d:0e:c7:43:1c:2d:c3:70:d7:0d:b4:c4:c6:e5:
                    fe:83:e9:b7:49:af:8a:ae:91:46:ec:97:26:f6:fb:
                    f4:0d:c8:13:13:b9:4a:5c:38:bd:44:37:c4:89:8d:
                    9f:87:cb:be:b3:29:75:88:2c:d5:f3:4a:3f:c2:b2:
                    01:fd:e2:14:79:2a:56:e2:eb:be:23:92:48:12:28:
                    2c:b1:a8:15:9a:f2:ea:44:63:d1:07:98:72:0b:98:
                    28:5f:bf:f4:db:d5:4e:ab:d1:6e:56:c7:d0:1f:55:
                    45:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:42:D6:AB:BD:69:71:1B:AF:78:E0:E7:7E:5F:D9:76:26:B1:9E:8A
            X509v3 Authority Key Identifier:
                keyid:27:38:B5:ED:13:21:C8:2B:DE:0D:C3:DF:9C:0D:99:35:F7:B8:C0:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/323830343a383038303a343030303a3a2f33342d3334203d3e20323731373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8080:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         84:93:7c:a2:2d:52:57:89:55:80:cd:17:f3:b9:c3:f9:b5:10:
         9d:3a:7b:34:d9:02:4d:e2:d2:e8:7d:5b:f8:53:b4:a7:79:51:
         48:7d:ef:91:34:37:22:c3:8f:8b:84:e6:4b:8f:b9:83:85:cc:
         e5:8e:44:92:7c:12:af:b8:a0:09:11:37:df:47:fd:68:5e:af:
         85:fa:18:aa:39:66:fc:f7:6b:c0:fe:ef:49:bd:af:f6:35:78:
         bd:2c:97:ee:1e:bd:66:cd:4a:fe:c0:3f:ac:a6:d1:6d:c3:8e:
         35:32:04:91:1e:db:e7:41:79:04:08:ac:a9:48:21:42:d2:b9:
         b3:4a:47:6a:89:83:00:c6:c1:76:ab:67:3a:92:2f:40:7e:26:
         c8:17:33:e3:3f:22:97:12:cb:f2:17:4b:87:1c:f4:2a:0d:33:
         1d:2a:47:7c:42:e2:ec:92:12:2f:68:3b:31:13:38:7e:9f:0f:
         be:7e:2a:92:3e:67:52:18:03:a5:ab:3b:20:2f:3a:e6:67:2a:
         38:40:a3:c6:fb:32:b6:c6:bb:ff:27:57:b8:f3:9d:f8:b9:c2:
         7f:16:42:05:1c:ab:34:ae:93:64:40:0b:29:c6:c7:14:2a:0b:
         ce:a2:57:f9:a1:eb:7f:cf:76:0d:63:f9:f1:7f:07:3d:c6:87:
         6e:ed:b5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org