Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/323830343a383038303a633030303a3a2f33342d3334203d3e20323731373534.roa
File:                     323830343a383038303a633030303a3a2f33342d3334203d3e20323731373534.roa (raw, json)
Hash identifier:          cpMJ65bzZ6hgbv4BR5ttnIFkYQzlp2K0xP2Bsekcw3Y=
Subject key identifier:   50:BF:FA:4A:9D:44:78:98:25:17:A8:23:96:8E:0C:71:26:3F:0F:7E
Certificate issuer:       /CN=2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B
Certificate serial:       45CD3464017F356945FE8AB2E5908875FD99C676
Authority key identifier: 27:38:B5:ED:13:21:C8:2B:DE:0D:C3:DF:9C:0D:99:35:F7:B8:C0:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/323830343a383038303a633030303a3a2f33342d3334203d3e20323731373534.roa
Signing time:             Tue 21 Nov 2023 13:00:00 +0000
ROA not before:           Tue 21 Nov 2023 12:55:00 +0000
ROA not after:            Tue 19 Nov 2024 13:00:00 +0000
asID:                     271754
IP address blocks:        2804:8080:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:cd:34:64:01:7f:35:69:45:fe:8a:b2:e5:90:88:75:fd:99:c6:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B
        Validity
            Not Before: Nov 21 12:55:00 2023 GMT
            Not After : Nov 19 13:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a8:ad:20:3c:93:36:b2:38:3d:5f:b5:f9:39:
                    16:cc:44:52:29:74:7e:88:19:62:63:52:5a:64:4f:
                    5d:ef:fe:98:d8:ad:eb:18:04:59:70:16:4f:47:ce:
                    7c:23:8e:39:7f:5a:2d:ea:40:8a:90:c7:1e:55:c3:
                    c5:f4:92:12:85:75:25:a3:6e:69:45:fd:89:b8:31:
                    9c:d9:3d:5f:ca:cc:35:7e:ed:58:9e:cf:ef:ef:6a:
                    e7:2b:e9:dc:00:d7:7d:ed:4b:6e:24:d4:8b:d6:53:
                    f9:26:20:9c:c4:64:e8:32:a2:99:6e:e2:de:d4:25:
                    8b:1f:5d:a9:47:8c:0d:60:a0:72:a9:36:bd:31:cb:
                    12:ca:aa:e9:07:85:9d:10:81:04:8d:49:72:24:4e:
                    be:8d:8d:47:28:7c:dc:1f:5c:73:c2:f5:b0:59:62:
                    54:a7:59:ce:6a:80:93:10:e4:57:f5:26:ed:86:83:
                    9c:ec:e4:57:6c:be:91:e1:e7:2c:71:88:3e:0b:b1:
                    0b:2a:37:e8:bd:84:d3:72:0c:4d:03:8e:5a:76:14:
                    0a:45:75:de:9d:88:14:f4:8a:14:26:40:3b:ff:20:
                    5b:fc:e2:78:34:2c:c0:6e:91:0c:c8:d2:4a:2d:64:
                    94:67:8b:0c:33:5e:1d:1e:e6:c8:6e:83:f4:30:41:
                    ba:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BF:FA:4A:9D:44:78:98:25:17:A8:23:96:8E:0C:71:26:3F:0F:7E
            X509v3 Authority Key Identifier:
                keyid:27:38:B5:ED:13:21:C8:2B:DE:0D:C3:DF:9C:0D:99:35:F7:B8:C0:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/323830343a383038303a633030303a3a2f33342d3334203d3e20323731373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8080:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         26:cd:dc:e2:56:94:72:da:1c:8b:70:0f:69:da:d5:3d:38:d9:
         bb:5d:e9:e8:00:c9:28:cd:18:b9:45:c3:8c:f4:60:52:b6:d3:
         79:f4:c8:0c:be:a6:e8:d5:03:02:b3:f1:ef:c4:d9:48:42:bf:
         24:c0:ef:e2:75:ae:f2:2f:04:9f:5c:91:13:4d:77:dd:f4:c2:
         98:9e:fd:4a:7e:65:68:f1:0d:8d:ec:25:0f:19:28:4d:3f:f0:
         f1:fc:30:21:03:de:00:2e:eb:0a:5e:6f:a4:76:d9:9c:61:4e:
         d4:52:af:d0:5d:dd:7f:03:a3:03:48:77:dd:91:84:5f:fd:49:
         9d:2d:c0:ef:5f:4d:23:c0:69:0f:30:24:92:01:7c:3f:46:b0:
         c2:95:25:95:42:30:98:79:75:8f:a9:3a:84:2e:f8:e6:a3:2a:
         ae:70:b2:53:5a:78:78:e1:13:6f:09:7f:58:ed:65:cf:1f:bc:
         8c:f5:ce:44:38:07:b0:e9:0d:e0:12:d2:3d:38:9a:2a:47:db:
         16:4f:0c:62:de:34:0d:35:9d:fe:bd:d0:c4:e0:49:39:83:c9:
         10:8a:c0:87:ef:62:2f:34:48:4d:5d:fa:98:4a:a9:c2:ee:a5:
         cf:42:95:8a:8c:81:cb:51:2f:c5:77:8f:69:31:59:1b:59:a0:
         f5:67:a6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org