Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/323830343a383038303a383030303a3a2f33342d3334203d3e20323731373534.roa
File:                     323830343a383038303a383030303a3a2f33342d3334203d3e20323731373534.roa (raw, json)
Hash identifier:          MxR64hztKnodWzo3UtRMesmpIHo1OoiEENDDQR447Hs=
Subject key identifier:   1E:8C:1F:77:37:6F:80:EA:47:DA:E6:9D:39:96:B6:99:26:0A:96:2C
Certificate issuer:       /CN=2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B
Certificate serial:       74B18C37C787ADAD72493DDA1CF30AE9422D90F8
Authority key identifier: 27:38:B5:ED:13:21:C8:2B:DE:0D:C3:DF:9C:0D:99:35:F7:B8:C0:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/323830343a383038303a383030303a3a2f33342d3334203d3e20323731373534.roa
Signing time:             Tue 21 Nov 2023 13:00:00 +0000
ROA not before:           Tue 21 Nov 2023 12:55:00 +0000
ROA not after:            Tue 19 Nov 2024 13:00:00 +0000
asID:                     271754
IP address blocks:        2804:8080:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b1:8c:37:c7:87:ad:ad:72:49:3d:da:1c:f3:0a:e9:42:2d:90:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B
        Validity
            Not Before: Nov 21 12:55:00 2023 GMT
            Not After : Nov 19 13:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1c:81:b6:77:ad:f4:43:ef:78:24:ac:ba:23:
                    c6:e7:17:ff:82:8b:29:b5:26:41:6c:b1:32:31:9c:
                    ef:22:6a:fa:ac:b1:25:59:30:93:e1:2b:f3:14:39:
                    2e:d6:61:d7:1f:70:15:23:87:b3:5d:07:cd:36:35:
                    ef:0e:ff:12:35:e5:7d:e4:4b:93:bf:9b:40:45:08:
                    2e:0d:b5:2f:b9:ce:6b:df:38:0b:d8:88:8e:5a:c4:
                    4b:16:52:38:03:84:1b:61:be:cb:49:24:fe:fa:e1:
                    48:48:9b:79:1d:d9:b3:39:16:92:bc:c5:a2:5e:fa:
                    bb:ef:9b:d8:76:d7:96:77:d2:6c:d5:ff:0c:e8:66:
                    f2:cb:9b:97:e7:e5:da:7f:3c:a3:80:72:82:04:24:
                    88:46:66:32:e4:07:40:40:8b:b7:d4:e4:82:85:86:
                    1a:b4:45:8b:6e:de:de:29:a1:cb:d9:de:8c:c2:54:
                    02:7a:49:22:df:ae:28:83:64:f6:cf:5e:55:ce:8c:
                    f9:92:bd:34:38:3c:00:c6:26:df:90:c6:b2:d1:4d:
                    0e:4b:a0:cb:48:f2:8b:82:51:b0:2f:a6:0a:7d:ca:
                    e0:51:03:85:4c:25:6c:f9:72:71:f0:d9:18:94:6b:
                    0e:9a:58:59:4e:1b:35:08:c3:e6:d6:15:99:e1:10:
                    17:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:8C:1F:77:37:6F:80:EA:47:DA:E6:9D:39:96:B6:99:26:0A:96:2C
            X509v3 Authority Key Identifier:
                keyid:27:38:B5:ED:13:21:C8:2B:DE:0D:C3:DF:9C:0D:99:35:F7:B8:C0:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/323830343a383038303a383030303a3a2f33342d3334203d3e20323731373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8080:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         46:22:b3:80:03:3d:1e:15:e6:2f:91:8e:f0:94:84:fc:14:57:
         1a:08:c9:0c:c7:cb:a1:92:7e:bc:8c:7b:a9:27:7d:8f:16:2d:
         c8:83:ee:ea:6c:5a:89:7a:b8:99:ba:96:f9:10:94:9d:8b:30:
         ce:bf:18:43:a0:92:d6:99:92:de:0a:68:aa:ed:8e:c2:ab:56:
         74:f3:c9:99:cd:5b:b6:54:6f:4c:c2:4f:8e:50:62:cd:f3:45:
         89:99:eb:c4:48:53:23:e6:06:92:78:19:63:04:ea:ea:c9:b2:
         aa:dd:ef:6e:9c:32:5b:27:b9:90:31:bc:f4:c8:bc:50:d8:f2:
         b6:78:40:ba:11:6e:63:d2:f4:fa:b0:e7:b3:4d:9e:70:5f:63:
         87:88:2a:ff:c6:34:71:58:47:1b:c2:34:3e:09:92:2f:bf:a7:
         e2:bb:e4:52:20:ab:fe:15:c2:34:92:f1:2f:39:49:ff:54:0b:
         b1:53:d7:d1:01:fd:ee:83:25:fc:5b:6e:a1:e7:37:a2:18:f4:
         06:70:d4:19:77:eb:4a:fd:f4:6b:fb:9d:eb:4f:a1:11:63:c3:
         6b:51:50:ba:04:f6:a6:ed:ef:8a:71:21:7b:d7:b0:50:7a:bd:
         2a:a5:88:3c:78:9e:f3:de:b3:42:c2:05:87:79:68:ad:f0:a4:
         ef:51:07:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org