Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/323830343a383038303a3a2f33332d3333203d3e20323731373534.roa
File:                     323830343a383038303a3a2f33332d3333203d3e20323731373534.roa (raw, json)
Hash identifier:          lLxtRpsvuKeE1Vbv0wGo1EhEZ6iqlNOPEjog91mSjaM=
Subject key identifier:   2D:03:7A:3D:28:63:6D:88:7E:A1:20:E4:67:37:8D:CA:F6:92:68:BC
Certificate issuer:       /CN=2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B
Certificate serial:       128CD925E2E2201C7D22DAA9224EDBBA75B2EC93
Authority key identifier: 27:38:B5:ED:13:21:C8:2B:DE:0D:C3:DF:9C:0D:99:35:F7:B8:C0:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/323830343a383038303a3a2f33332d3333203d3e20323731373534.roa
Signing time:             Tue 20 Feb 2024 14:00:00 +0000
ROA not before:           Tue 20 Feb 2024 13:55:00 +0000
ROA not after:            Tue 18 Feb 2025 14:00:00 +0000
asID:                     271754
IP address blocks:        2804:8080::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:8c:d9:25:e2:e2:20:1c:7d:22:da:a9:22:4e:db:ba:75:b2:ec:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B
        Validity
            Not Before: Feb 20 13:55:00 2024 GMT
            Not After : Feb 18 14:00:00 2025 GMT
        Subject: CN=3082010A0282010100C25391580F29ACBF67BE55B58D68DA25CF77C75BABF1D5CF5A6C993E32AF400ECE42669FAC5124F9DA49F79A886403A22770A38217DEFE67745BF6474585AFC650A2027A058F7CF999F638A82CD87AE30BC7E533A819AA260C705BB53623B771561A43D9503C06E50BF3A2E66385D8C7FC43A412829DE3A1BDCD528CA2262876B2709C0C46125B389BFB6455331E79C3CFC59BCBA08820CD356E8D2A4FD52B8487CE95E772AC3B023BEC3B998DDC981CE5532799124E0250BED3C7E84DC4168352421CC8E7C1EB545B51CAFCC2DE38A9473AA6AFF16700368A4D6807BDE06175E11395F209ECAE6F4E586C18E68B872B7AE1854D89A4F22CE798AE081B32A7550203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:53:91:58:0f:29:ac:bf:67:be:55:b5:8d:68:
                    da:25:cf:77:c7:5b:ab:f1:d5:cf:5a:6c:99:3e:32:
                    af:40:0e:ce:42:66:9f:ac:51:24:f9:da:49:f7:9a:
                    88:64:03:a2:27:70:a3:82:17:de:fe:67:74:5b:f6:
                    47:45:85:af:c6:50:a2:02:7a:05:8f:7c:f9:99:f6:
                    38:a8:2c:d8:7a:e3:0b:c7:e5:33:a8:19:aa:26:0c:
                    70:5b:b5:36:23:b7:71:56:1a:43:d9:50:3c:06:e5:
                    0b:f3:a2:e6:63:85:d8:c7:fc:43:a4:12:82:9d:e3:
                    a1:bd:cd:52:8c:a2:26:28:76:b2:70:9c:0c:46:12:
                    5b:38:9b:fb:64:55:33:1e:79:c3:cf:c5:9b:cb:a0:
                    88:20:cd:35:6e:8d:2a:4f:d5:2b:84:87:ce:95:e7:
                    72:ac:3b:02:3b:ec:3b:99:8d:dc:98:1c:e5:53:27:
                    99:12:4e:02:50:be:d3:c7:e8:4d:c4:16:83:52:42:
                    1c:c8:e7:c1:eb:54:5b:51:ca:fc:c2:de:38:a9:47:
                    3a:a6:af:f1:67:00:36:8a:4d:68:07:bd:e0:61:75:
                    e1:13:95:f2:09:ec:ae:6f:4e:58:6c:18:e6:8b:87:
                    2b:7a:e1:85:4d:89:a4:f2:2c:e7:98:ae:08:1b:32:
                    a7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:03:7A:3D:28:63:6D:88:7E:A1:20:E4:67:37:8D:CA:F6:92:68:BC
            X509v3 Authority Key Identifier:
                keyid:27:38:B5:ED:13:21:C8:2B:DE:0D:C3:DF:9C:0D:99:35:F7:B8:C0:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/323830343a383038303a3a2f33332d3333203d3e20323731373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8080::/33

    Signature Algorithm: sha256WithRSAEncryption
         17:bb:e8:d5:7d:27:62:0f:f8:e8:6a:b0:6c:5f:52:77:29:c1:
         48:88:60:44:31:b3:ef:5c:e1:6c:22:71:8a:86:af:36:79:d0:
         56:2b:92:1a:c0:ef:3a:19:3a:cd:73:11:4b:11:1d:a9:7a:32:
         b3:fd:fc:5c:0b:14:53:84:ae:d6:a4:c1:96:46:48:dd:9d:29:
         a5:69:49:1c:b2:64:45:1c:ee:b3:f2:9a:d0:e9:e1:9a:fa:ef:
         15:a9:0d:4a:4e:d7:90:12:6e:6f:63:ec:61:92:cc:ff:41:43:
         3a:b6:fe:b6:e9:18:1c:84:df:cd:e0:bb:4f:fe:1e:75:7d:f4:
         66:bc:e5:5b:d6:86:2a:e5:30:88:93:7a:48:07:e2:13:04:37:
         52:1c:7a:0c:0b:1f:11:ac:f7:c9:52:41:e6:73:79:ca:3e:fb:
         d9:69:e4:57:4b:3d:ee:fe:41:02:cf:9a:82:b7:3c:31:7a:37:
         44:f6:a1:bb:b2:95:08:64:2e:a0:18:20:cc:2c:08:a6:d5:f7:
         11:e1:8b:33:e7:d2:04:9a:94:2a:32:c4:e7:dc:4f:27:fb:4c:
         a6:7c:15:cc:b3:6e:fd:51:48:75:2a:49:da:57:bd:bd:35:15:
         9a:d1:ad:c3:db:06:91:43:ac:57:0d:28:4d:0c:5b:42:32:ad:
         43:a8:ee:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org