Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7BCFrztVKNksnNEZUWcEM8iFoYPhXbAtF3dA43N82wK/0/323830343a363364383a3a2f33322d3334203d3e20323639333837.roa
File:                     323830343a363364383a3a2f33322d3334203d3e20323639333837.roa (raw, json)
Hash identifier:          jy017TWfDyNKvg2ptSsWfIoJyhLNIOfaeojevoskxUs=
Subject key identifier:   89:35:7A:E2:8F:74:22:37:EA:E8:13:A5:9A:26:72:01:F3:89:BB:30
Certificate issuer:       /CN=D2663D15D203916F99C7C03EE3A816EFAD3F6BC3
Certificate serial:       227AB9382D2F38F742F185222EB18B66F79BC285
Authority key identifier: D2:66:3D:15:D2:03:91:6F:99:C7:C0:3E:E3:A8:16:EF:AD:3F:6B:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2663D15D203916F99C7C03EE3A816EFAD3F6BC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7BCFrztVKNksnNEZUWcEM8iFoYPhXbAtF3dA43N82wK/0/323830343a363364383a3a2f33322d3334203d3e20323639333837.roa
Signing time:             Sun 09 Jul 2023 04:00:01 +0000
ROA not before:           Sun 09 Jul 2023 03:55:01 +0000
ROA not after:            Tue 09 Jul 2024 04:00:01 +0000
asID:                     269387
IP address blocks:        2804:63d8::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:7a:b9:38:2d:2f:38:f7:42:f1:85:22:2e:b1:8b:66:f7:9b:c2:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2663D15D203916F99C7C03EE3A816EFAD3F6BC3
        Validity
            Not Before: Jul  9 03:55:01 2023 GMT
            Not After : Jul  9 04:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:34:0f:e8:06:a8:65:b8:17:10:b8:89:7b:ad:
                    49:cd:6b:6f:ae:b6:89:68:76:76:1e:dd:2b:15:35:
                    38:ed:fb:fc:5b:e8:6b:af:47:b7:d9:24:e5:f2:e0:
                    a2:1c:94:a8:a3:52:b3:d9:d1:0c:a1:82:4b:d2:b9:
                    23:76:94:2d:f7:e2:a1:92:07:e5:67:20:c9:9a:bf:
                    93:a6:93:4a:9d:3f:4f:0a:d0:fd:f5:32:f5:c9:9b:
                    48:57:26:33:e9:58:60:3d:65:55:22:df:a8:1d:3e:
                    d8:28:86:47:c5:a6:ae:52:12:c7:29:3d:dc:99:2d:
                    5d:48:76:39:3b:9d:0d:09:e6:f3:aa:c2:3c:9e:9e:
                    3f:8e:cb:df:1a:fe:a3:5a:a6:a5:3d:3a:0d:76:72:
                    b2:8a:40:27:75:b5:7d:b2:a6:73:8f:33:07:dd:c7:
                    a4:66:1c:d9:aa:4a:6f:60:73:b9:ad:0a:03:5d:ba:
                    0a:68:ab:0e:1f:f2:f7:a3:e7:af:19:c5:7a:03:29:
                    06:e3:80:c8:a1:53:90:46:1c:43:31:af:b5:86:16:
                    ab:75:e9:5d:25:85:4c:64:a9:bd:05:74:21:2d:a2:
                    66:fd:02:50:15:b4:e9:d4:eb:36:64:c3:2b:c3:91:
                    7c:fd:12:b8:24:be:16:2f:2c:d3:d3:d9:9c:69:5a:
                    52:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:35:7A:E2:8F:74:22:37:EA:E8:13:A5:9A:26:72:01:F3:89:BB:30
            X509v3 Authority Key Identifier:
                keyid:D2:66:3D:15:D2:03:91:6F:99:C7:C0:3E:E3:A8:16:EF:AD:3F:6B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7BCFrztVKNksnNEZUWcEM8iFoYPhXbAtF3dA43N82wK/0/D2663D15D203916F99C7C03EE3A816EFAD3F6BC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2663D15D203916F99C7C03EE3A816EFAD3F6BC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7BCFrztVKNksnNEZUWcEM8iFoYPhXbAtF3dA43N82wK/0/323830343a363364383a3a2f33322d3334203d3e20323639333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:89:95:6e:f7:b9:a8:b6:09:06:9c:22:cc:5a:25:a5:e1:b0:
         1d:51:cc:60:e6:20:4c:86:bb:75:20:ed:2b:dd:82:68:2e:cf:
         70:5d:1e:8f:e2:ec:c2:ac:27:88:27:30:3b:e5:69:42:85:b0:
         3b:6b:cc:0f:90:86:67:9f:3c:27:c2:c7:88:43:7a:e2:fa:74:
         c0:db:8b:15:f3:6e:14:96:ec:05:b2:86:7a:ba:3d:18:a6:df:
         e5:e3:fb:84:f9:83:1d:de:39:22:a0:4c:6f:fd:0e:e2:e8:70:
         fe:8d:36:b2:7f:59:28:2e:4e:f4:f9:cb:1c:2d:0a:d3:35:e6:
         2e:0c:80:f7:ae:ee:ba:b1:10:91:35:1a:36:9c:a1:ef:8f:6d:
         64:de:ed:5d:6d:44:31:64:cd:ee:2e:c0:5e:68:41:04:1e:e7:
         0e:69:76:af:e3:c9:7f:c9:66:42:33:3f:72:a4:47:e1:4f:de:
         c3:ea:97:ba:d1:d7:c1:7b:69:65:d2:cf:4d:91:b7:ad:30:59:
         31:ee:07:cd:82:f7:60:93:a8:02:55:a7:18:ab:d6:d8:3a:5b:
         dc:76:39:57:5c:b4:95:05:50:22:63:5a:f3:de:93:31:19:64:
         c1:ba:35:de:4d:0a:eb:c0:c3:fc:96:61:28:04:49:95:e9:0c:
         ac:e7:f2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org