Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/0/323830343a316231633a3a2f33322d3438203d3e203631373039.roa
File:                     323830343a316231633a3a2f33322d3438203d3e203631373039.roa (raw, json)
Hash identifier:          M9mmE3B/+dMf9CJzXmKAikv2CqHE0tf5wNcfzPci1jk=
Subject key identifier:   C5:14:AD:40:D6:FB:50:C2:83:CF:BC:EB:28:F6:D7:58:B0:49:8F:B3
Certificate issuer:       /CN=7FAA1BD04E1DF2F06CFFF3D8DB64D27A3F4B6DF2
Certificate serial:       31E34CA1CB4EEEACCF7E7A91CE41162CBB628E71
Authority key identifier: 7F:AA:1B:D0:4E:1D:F2:F0:6C:FF:F3:D8:DB:64:D2:7A:3F:4B:6D:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FAA1BD04E1DF2F06CFFF3D8DB64D27A3F4B6DF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/0/323830343a316231633a3a2f33322d3438203d3e203631373039.roa
Signing time:             Thu 28 Mar 2024 21:04:20 +0000
ROA not before:           Thu 28 Mar 2024 20:59:20 +0000
ROA not after:            Thu 27 Mar 2025 21:04:20 +0000
asID:                     61709
IP address blocks:        2804:1b1c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e3:4c:a1:cb:4e:ee:ac:cf:7e:7a:91:ce:41:16:2c:bb:62:8e:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FAA1BD04E1DF2F06CFFF3D8DB64D27A3F4B6DF2
        Validity
            Not Before: Mar 28 20:59:20 2024 GMT
            Not After : Mar 27 21:04:20 2025 GMT
        Subject: CN=C514AD40D6FB50C283CFBCEB28F6D758B0498FB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cc:3c:c0:85:49:8f:b0:08:bc:38:1f:9f:e8:
                    17:7b:28:15:9c:06:22:a7:2d:c5:4c:77:a8:80:57:
                    82:27:8f:a4:1f:1e:83:5f:3f:ce:c8:bf:bc:64:3c:
                    99:17:e6:cc:e9:91:23:b4:c5:df:bc:9e:ac:67:c1:
                    22:af:83:bf:1e:00:f7:79:c2:a8:95:96:5b:7d:40:
                    fd:7d:d7:f7:fc:4d:93:62:b5:40:be:b1:9a:f0:d0:
                    b7:b3:b8:c0:1b:5d:91:8a:e7:1f:d7:f6:20:e0:66:
                    5d:51:2b:36:a3:eb:14:57:0e:dc:a4:bc:c6:76:b6:
                    33:2a:c2:3c:46:ec:b9:02:f0:0b:9f:1d:e8:4b:94:
                    76:f0:21:ab:6f:fd:7b:93:fa:18:a3:fa:08:46:c9:
                    f7:1a:ad:b4:52:40:33:8c:0b:94:c2:3c:5d:08:b2:
                    c6:cf:f6:2f:20:c3:b3:7c:6a:ba:1c:83:e9:fc:6f:
                    e6:24:08:be:ef:35:bb:e1:1d:f9:e7:45:b7:88:4f:
                    a1:b9:e0:62:5c:6a:6b:cb:f2:72:84:2b:d0:f0:60:
                    b1:2c:0e:50:84:0d:de:f5:9c:b4:f9:63:28:ae:ac:
                    3b:a9:48:1d:8d:14:f2:d4:0b:9c:f8:9c:16:d2:8b:
                    a8:c8:5a:4e:e5:5b:38:85:8a:77:7e:85:ce:8b:c7:
                    b9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:14:AD:40:D6:FB:50:C2:83:CF:BC:EB:28:F6:D7:58:B0:49:8F:B3
            X509v3 Authority Key Identifier:
                keyid:7F:AA:1B:D0:4E:1D:F2:F0:6C:FF:F3:D8:DB:64:D2:7A:3F:4B:6D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/0/7FAA1BD04E1DF2F06CFFF3D8DB64D27A3F4B6DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FAA1BD04E1DF2F06CFFF3D8DB64D27A3F4B6DF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/0/323830343a316231633a3a2f33322d3438203d3e203631373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:3d:4c:11:cc:19:fb:36:89:8d:07:97:e2:f2:18:2c:e0:ac:
         30:a4:4f:a9:5c:d6:0b:1a:b3:ce:94:56:46:1a:75:fb:54:04:
         51:e0:1b:3e:c2:96:0f:58:24:22:75:23:db:a0:34:0d:9d:8d:
         45:37:62:ab:7f:4c:6b:39:8b:13:58:be:37:fe:93:5c:52:4d:
         d1:42:40:ff:b5:47:26:4f:29:90:79:4c:05:7a:0c:e4:ac:29:
         de:9d:96:ea:b5:fe:65:a0:67:1a:a8:60:a7:df:44:9e:52:11:
         0d:d5:bf:34:35:51:60:c0:9b:51:50:a1:04:a5:13:3a:e3:94:
         25:75:ce:7c:f7:1f:68:08:ae:85:0a:c9:82:46:c5:ef:0b:a7:
         68:d1:60:31:f6:a1:e5:a9:fa:8e:f1:c2:81:20:14:4e:5c:b1:
         8c:2a:38:e1:ef:2d:b8:b9:a9:3e:c3:13:c7:1d:b9:0b:7d:31:
         7c:e8:dc:14:51:e3:e0:6e:dd:b7:b8:4b:a0:7e:6b:8e:8f:b7:
         7e:bc:e7:fe:2f:a0:57:97:c4:e8:16:62:fd:4c:e4:ea:3c:14:
         ea:a0:2e:5c:50:bd:39:d8:52:d6:f8:14:ef:fc:e2:65:ea:ca:
         11:72:aa:b4:80:25:de:3d:92:1d:30:f7:c7:8d:f2:a2:bd:12:
         b3:85:1f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org