Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/323830343a383038303a383030303a3a2f33332d3333203d3e20323731373534.roa
File:                     323830343a383038303a383030303a3a2f33332d3333203d3e20323731373534.roa (raw, json)
Hash identifier:          Ov7cj/DP1f0qRQCSN9EFXorIhm6duLQKPWJ8TXpO0Zw=
Subject key identifier:   82:33:9F:AE:0F:D8:F1:15:A5:4D:C5:BE:F9:2E:BE:77:89:56:6E:9F
Certificate issuer:       /CN=2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B
Certificate serial:       1E31904C48D79FF7546D7E25EC6B454C83EC49FE
Authority key identifier: 27:38:B5:ED:13:21:C8:2B:DE:0D:C3:DF:9C:0D:99:35:F7:B8:C0:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/323830343a383038303a383030303a3a2f33332d3333203d3e20323731373534.roa
Signing time:             Tue 20 Feb 2024 14:00:00 +0000
ROA not before:           Tue 20 Feb 2024 13:55:00 +0000
ROA not after:            Tue 18 Feb 2025 14:00:00 +0000
asID:                     271754
IP address blocks:        2804:8080:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:31:90:4c:48:d7:9f:f7:54:6d:7e:25:ec:6b:45:4c:83:ec:49:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B
        Validity
            Not Before: Feb 20 13:55:00 2024 GMT
            Not After : Feb 18 14:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:77:95:7f:d7:9d:34:84:1c:02:8a:dc:a3:49:
                    36:f8:5e:4b:f8:7a:9e:b4:a8:36:7d:68:60:c0:0a:
                    c2:9a:1f:21:8c:ec:22:3e:98:e6:8e:db:75:cf:fd:
                    94:95:d9:4b:8a:36:99:c1:00:15:da:a4:c1:f9:a2:
                    2a:22:f7:6a:02:fa:f1:eb:c0:ba:cc:46:2a:19:0d:
                    bd:c5:8d:92:89:dc:56:74:77:7d:63:0b:f2:fa:84:
                    f7:81:dc:b9:d7:2d:da:e9:69:25:c0:38:73:b9:f4:
                    0a:a4:f4:17:c5:64:76:43:63:6a:d1:12:18:ee:d0:
                    37:39:70:db:ef:ed:17:1e:23:20:47:d4:7a:ba:9d:
                    aa:63:c7:e0:5f:4e:70:80:d3:c0:78:4b:3e:45:0c:
                    b3:8a:5f:50:cc:d2:da:fc:7c:43:55:79:3e:0d:8d:
                    d7:4b:7b:4f:87:7d:b1:f9:f2:0f:40:f2:1b:a2:3d:
                    91:74:c6:5f:79:f3:b6:8c:84:fe:74:a0:cb:2a:8c:
                    40:9d:62:ad:55:cb:21:ca:97:e3:be:37:c6:ce:e9:
                    f1:0f:ad:a5:77:52:0b:5a:bb:f5:d4:00:6c:0f:51:
                    17:d6:1f:c2:82:ca:89:65:cf:ff:c2:a4:2d:e7:d2:
                    a0:0a:eb:5a:7b:6a:32:dc:42:2a:52:3e:29:43:6c:
                    52:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:33:9F:AE:0F:D8:F1:15:A5:4D:C5:BE:F9:2E:BE:77:89:56:6E:9F
            X509v3 Authority Key Identifier:
                keyid:27:38:B5:ED:13:21:C8:2B:DE:0D:C3:DF:9C:0D:99:35:F7:B8:C0:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/323830343a383038303a383030303a3a2f33332d3333203d3e20323731373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8080:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         c5:a1:0c:93:0c:74:20:40:6b:e4:05:87:99:66:13:eb:99:b2:
         6e:75:1a:54:64:47:81:bc:dc:3c:ec:f5:80:5c:4a:3c:79:3f:
         18:5c:4a:d0:be:0f:5b:1c:58:64:a6:cb:fa:ba:1c:aa:f7:94:
         e8:37:48:3e:89:d6:a9:e1:60:c8:76:d4:18:14:d8:aa:53:c0:
         19:99:27:5b:d1:07:a9:7e:ae:b7:c7:14:96:53:10:a6:44:72:
         a5:e4:1b:c3:71:33:0e:ad:ea:fd:c6:6d:69:a6:75:a6:18:4e:
         f0:21:fa:98:38:e5:27:f5:ff:e6:92:c8:66:dd:57:ff:27:bf:
         16:1d:fd:03:b0:be:46:6d:37:ef:9d:bd:cb:02:f1:ae:e7:f8:
         1c:a0:62:ba:11:a6:22:3b:e2:b7:65:5b:81:cf:5e:52:27:61:
         bf:18:7b:a1:7c:88:b2:a2:2d:b4:48:e3:07:b9:a1:a3:8d:84:
         f3:da:74:3a:c7:06:91:a0:5d:c5:e7:e5:96:ab:93:ef:d1:d1:
         e5:d0:ce:e0:33:06:2a:18:29:43:49:49:5c:43:eb:4f:3a:d1:
         8a:ca:f7:6b:31:5c:2d:80:c1:bb:22:e6:8d:59:23:0f:d9:68:
         82:ce:5c:87:74:a1:e3:7f:e8:1c:5a:80:e9:a6:e1:80:ca:b7:
         76:aa:8e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org