Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/323830343a383038303a3a2f33342d3334203d3e20323731373534.roa
File:                     323830343a383038303a3a2f33342d3334203d3e20323731373534.roa (raw, json)
Hash identifier:          1bxPoMknkkoWvrqzTRRCb0akQS5w6JqLKfc7pANFU+w=
Subject key identifier:   CA:EB:A1:C0:62:20:83:1C:B4:0B:39:92:E1:F0:89:EA:2B:9D:5B:6D
Certificate issuer:       /CN=2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B
Certificate serial:       23EA9EBE6CA4847BF69011445CE772B7A471BBCE
Authority key identifier: 27:38:B5:ED:13:21:C8:2B:DE:0D:C3:DF:9C:0D:99:35:F7:B8:C0:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/323830343a383038303a3a2f33342d3334203d3e20323731373534.roa
Signing time:             Tue 21 Nov 2023 13:00:00 +0000
ROA not before:           Tue 21 Nov 2023 12:55:00 +0000
ROA not after:            Tue 19 Nov 2024 13:00:00 +0000
asID:                     271754
IP address blocks:        2804:8080::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ea:9e:be:6c:a4:84:7b:f6:90:11:44:5c:e7:72:b7:a4:71:bb:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B
        Validity
            Not Before: Nov 21 12:55:00 2023 GMT
            Not After : Nov 19 13:00:00 2024 GMT
        Subject: CN=3082010A0282010100D2E21C16E5EC32B7AB0469C85F4152C6F79A806CFC7011418C0B103F03C8A8E806FD21AC24AC40EEDB6B891A0F782D58A24FC4E25907DF37220ABA937DAC88404B3191251B30BD11047402D7957972A4F0CCF3B8D0F71B7CC635D9C8B6C082244729C2E54617A3B327435108A15BA3EFF1AD85AF26E1742050DA83707B19DD7D4EF7E2EB95693CF5566FB4AA09F5A49115F39E061D5280A784FA8974DA75F9C2A1D27F6B9A393539851E8DE0555E81E2F1BED7377C569D79CC76846D8B21DB19FDF8CDA9EAC783FE5CA2C318E2444AFD1F43B81A25FB6B5FF1F473A466F8D1D8991EB89B69DE110A03E51E1DAC68F3A293E8A74BB0C2480750A67D0A30271AAD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e2:1c:16:e5:ec:32:b7:ab:04:69:c8:5f:41:
                    52:c6:f7:9a:80:6c:fc:70:11:41:8c:0b:10:3f:03:
                    c8:a8:e8:06:fd:21:ac:24:ac:40:ee:db:6b:89:1a:
                    0f:78:2d:58:a2:4f:c4:e2:59:07:df:37:22:0a:ba:
                    93:7d:ac:88:40:4b:31:91:25:1b:30:bd:11:04:74:
                    02:d7:95:79:72:a4:f0:cc:f3:b8:d0:f7:1b:7c:c6:
                    35:d9:c8:b6:c0:82:24:47:29:c2:e5:46:17:a3:b3:
                    27:43:51:08:a1:5b:a3:ef:f1:ad:85:af:26:e1:74:
                    20:50:da:83:70:7b:19:dd:7d:4e:f7:e2:eb:95:69:
                    3c:f5:56:6f:b4:aa:09:f5:a4:91:15:f3:9e:06:1d:
                    52:80:a7:84:fa:89:74:da:75:f9:c2:a1:d2:7f:6b:
                    9a:39:35:39:85:1e:8d:e0:55:5e:81:e2:f1:be:d7:
                    37:7c:56:9d:79:cc:76:84:6d:8b:21:db:19:fd:f8:
                    cd:a9:ea:c7:83:fe:5c:a2:c3:18:e2:44:4a:fd:1f:
                    43:b8:1a:25:fb:6b:5f:f1:f4:73:a4:66:f8:d1:d8:
                    99:1e:b8:9b:69:de:11:0a:03:e5:1e:1d:ac:68:f3:
                    a2:93:e8:a7:4b:b0:c2:48:07:50:a6:7d:0a:30:27:
                    1a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EB:A1:C0:62:20:83:1C:B4:0B:39:92:E1:F0:89:EA:2B:9D:5B:6D
            X509v3 Authority Key Identifier:
                keyid:27:38:B5:ED:13:21:C8:2B:DE:0D:C3:DF:9C:0D:99:35:F7:B8:C0:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/323830343a383038303a3a2f33342d3334203d3e20323731373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8080::/34

    Signature Algorithm: sha256WithRSAEncryption
         7a:5f:a7:2b:25:c6:2b:49:b7:ca:e7:0f:d7:4b:cd:15:c8:1c:
         af:b3:c6:d9:e3:1d:3d:e6:06:82:24:f9:d4:8f:df:10:4d:73:
         fb:3c:a5:c6:7d:f2:ca:17:14:4e:34:6e:e3:18:a1:ba:bc:cb:
         43:19:3d:52:1b:23:5e:61:00:fd:ed:45:c4:7e:88:6a:ce:30:
         85:10:41:28:4a:d8:c0:a8:bf:ae:15:e9:2e:df:c6:d0:c7:9d:
         f3:28:8e:a7:e8:42:26:17:96:3d:44:07:d2:be:30:d1:3c:44:
         9e:5b:ee:7d:bc:51:da:f4:e0:10:d6:71:f1:04:b4:26:20:13:
         6e:c2:d5:ff:31:a1:98:5f:96:4d:68:3c:e8:3d:cb:6a:8b:d8:
         e9:6e:79:93:45:0f:a3:19:6f:ea:62:a1:03:c5:75:72:df:6b:
         c2:97:c3:38:66:d4:ef:51:c3:35:b0:c8:af:7c:b5:fe:e4:7d:
         08:ab:00:a8:69:68:9f:f4:6c:04:f0:ca:7f:4d:a2:54:31:60:
         aa:77:78:e6:81:d8:58:40:4f:6f:8b:c3:13:34:c1:45:6e:18:
         73:c6:2b:71:13:bb:06:05:e2:c8:da:15:f4:ab:e0:8e:01:5c:
         46:32:63:2c:73:2c:b8:e9:38:62:9f:26:0a:b0:f0:53:5c:7f:
         cc:33:8f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org