Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Brv3fshLN9xi4v8TYPcMD1fCh9NMkU8kCk3ZUQqbe2qk/0/323830343a376263383a3a2f33322d3438203d3e20323731343534.roa
File:                     323830343a376263383a3a2f33322d3438203d3e20323731343534.roa (raw, json)
Hash identifier:          ouBLLvuP7IkNWNHDpOhme67fLR9ixXTrI7vegj1GOJo=
Subject key identifier:   7A:06:B8:D1:2B:B2:CA:83:F9:85:0E:A4:24:4C:6D:62:41:3E:E2:9D
Certificate issuer:       /CN=284BBBBB37224FB295DA80B26E93B007A1E377E7
Certificate serial:       70BA409864408B0034F0F524B7C8C737FCC51ADF
Authority key identifier: 28:4B:BB:BB:37:22:4F:B2:95:DA:80:B2:6E:93:B0:07:A1:E3:77:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/284BBBBB37224FB295DA80B26E93B007A1E377E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Brv3fshLN9xi4v8TYPcMD1fCh9NMkU8kCk3ZUQqbe2qk/0/323830343a376263383a3a2f33322d3438203d3e20323731343534.roa
Signing time:             Fri 22 Sep 2023 02:52:41 +0000
ROA not before:           Fri 22 Sep 2023 02:47:41 +0000
ROA not after:            Fri 20 Sep 2024 02:52:41 +0000
asID:                     271454
IP address blocks:        2804:7bc8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ba:40:98:64:40:8b:00:34:f0:f5:24:b7:c8:c7:37:fc:c5:1a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=284BBBBB37224FB295DA80B26E93B007A1E377E7
        Validity
            Not Before: Sep 22 02:47:41 2023 GMT
            Not After : Sep 20 02:52:41 2024 GMT
        Subject: CN=7A06B8D12BB2CA83F9850EA4244C6D62413EE29D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:c1:5e:b5:70:82:df:4b:93:18:e6:0a:2f:9c:
                    99:a7:08:6c:6a:49:93:83:7b:c9:24:a5:f4:21:fc:
                    17:23:9e:24:df:94:f3:aa:50:2b:63:36:47:a4:a9:
                    0f:bc:fb:df:01:c7:6b:c8:83:e2:62:23:49:0a:90:
                    c9:33:f4:bb:85:6d:16:80:53:02:4d:46:ca:75:72:
                    08:08:c4:84:1d:b2:66:44:19:12:26:2b:fd:4a:de:
                    18:81:4f:ef:7d:09:b4:f4:00:00:60:58:e7:ac:81:
                    a0:53:e2:7f:34:ab:bc:56:4d:06:b7:4a:c4:3f:d5:
                    7b:dd:13:d0:e5:48:da:29:8c:ed:05:a3:04:50:07:
                    e4:78:d6:35:bb:8a:bb:37:f5:d8:9d:5a:2a:62:6d:
                    10:1f:ed:3d:59:28:32:ad:75:5c:2d:c9:ba:79:5a:
                    59:e3:72:6e:89:d9:d9:7c:cb:31:b4:94:0b:65:52:
                    b6:c4:a5:8e:18:68:30:97:7d:93:13:f9:23:22:13:
                    ae:6c:a4:6a:16:ca:28:d0:5d:7d:e0:40:28:35:65:
                    f3:fd:ac:e3:dd:0c:4f:34:92:d0:3d:3c:e1:b5:01:
                    1e:ed:46:16:37:ac:49:98:60:c1:a1:c1:7c:ab:56:
                    7c:82:b7:68:e8:ca:66:44:8c:81:b6:39:a8:53:46:
                    79:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:06:B8:D1:2B:B2:CA:83:F9:85:0E:A4:24:4C:6D:62:41:3E:E2:9D
            X509v3 Authority Key Identifier:
                keyid:28:4B:BB:BB:37:22:4F:B2:95:DA:80:B2:6E:93:B0:07:A1:E3:77:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Brv3fshLN9xi4v8TYPcMD1fCh9NMkU8kCk3ZUQqbe2qk/0/284BBBBB37224FB295DA80B26E93B007A1E377E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/284BBBBB37224FB295DA80B26E93B007A1E377E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Brv3fshLN9xi4v8TYPcMD1fCh9NMkU8kCk3ZUQqbe2qk/0/323830343a376263383a3a2f33322d3438203d3e20323731343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:8b:2c:c9:1f:72:ce:45:97:79:7c:3e:6c:5b:fb:eb:ef:84:
         6e:76:15:c9:c5:6d:6d:20:d6:e4:56:b8:70:80:92:bc:a8:b3:
         4e:d5:61:9d:34:10:e6:d1:38:47:c9:6b:6a:6b:8c:72:03:aa:
         8f:af:88:17:ad:f2:9f:a6:f0:6c:d2:24:ba:ea:3a:ea:34:8e:
         df:e5:ff:d9:5a:b9:e7:0c:a5:de:eb:34:69:4e:5f:5b:c1:0e:
         92:bf:ee:13:19:d0:cc:81:78:86:14:02:d1:46:78:08:7c:f7:
         0c:9b:ee:65:af:c2:da:6d:12:f0:1d:7d:fd:97:56:39:7c:d4:
         81:52:90:a8:9d:e5:38:63:0e:f1:f1:ce:ae:81:69:b1:ab:ef:
         d3:c5:89:60:e2:46:d8:d7:13:76:0b:92:00:b7:11:20:c2:48:
         1e:d9:20:ed:d8:85:8c:ce:d2:b9:ee:28:f2:e9:71:32:71:85:
         ad:69:d5:6d:72:5a:52:c4:98:0b:d7:0e:94:d6:57:0b:08:34:
         e4:25:80:b7:04:9f:c2:d6:d0:ac:40:9a:c2:27:53:ca:59:44:
         5f:60:87:ac:e1:06:25:71:35:e1:04:aa:60:dd:19:07:f4:ed:
         e3:4b:da:76:39:4b:39:01:b5:a0:e7:c8:e9:94:b0:1b:a2:a0:
         8c:d7:ce:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org