Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/323830343a326462633a613830303a3a2f33382d3338203d3e20323635333030.roa
File:                     323830343a326462633a613830303a3a2f33382d3338203d3e20323635333030.roa (raw, json)
Hash identifier:          nxm3rA+GRhpxC/4biO945OxK1xfL2B7aLPlKkK9chuQ=
Subject key identifier:   01:D2:C3:F4:C8:D8:98:95:6B:34:B6:6C:8C:51:79:DB:D0:B5:5C:6C
Certificate issuer:       /CN=A537C256EA0CE31BF05A91887303244145ACE8AD
Certificate serial:       17E506A6CC5A796CA839FFA3F9CEAE84AB1A76C2
Authority key identifier: A5:37:C2:56:EA:0C:E3:1B:F0:5A:91:88:73:03:24:41:45:AC:E8:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A537C256EA0CE31BF05A91887303244145ACE8AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/323830343a326462633a613830303a3a2f33382d3338203d3e20323635333030.roa
Signing time:             Sat 27 Apr 2024 14:57:50 +0000
ROA not before:           Sat 27 Apr 2024 14:52:50 +0000
ROA not after:            Sat 26 Apr 2025 14:57:50 +0000
asID:                     265300
IP address blocks:        2804:2dbc:a800::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e5:06:a6:cc:5a:79:6c:a8:39:ff:a3:f9:ce:ae:84:ab:1a:76:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A537C256EA0CE31BF05A91887303244145ACE8AD
        Validity
            Not Before: Apr 27 14:52:50 2024 GMT
            Not After : Apr 26 14:57:50 2025 GMT
        Subject: CN=01D2C3F4C8D898956B34B66C8C5179DBD0B55C6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:07:0a:b3:3a:01:a8:4c:ce:2e:d9:e3:a0:b2:
                    81:82:f0:e1:a0:35:b0:bb:24:54:48:3e:45:bd:e9:
                    e2:1a:44:15:1e:e1:96:14:e3:14:f0:d0:e9:cc:4b:
                    9f:23:11:56:aa:c5:e3:27:cc:18:1c:45:c2:84:54:
                    80:9e:47:ce:18:04:a1:ca:6c:3a:01:c3:32:b7:0c:
                    76:d6:e9:1f:ac:56:bb:3f:23:4f:70:8e:b1:d1:fe:
                    f7:a5:ca:65:5e:73:55:be:e2:2c:17:4c:4a:32:25:
                    c3:62:85:94:ca:77:bf:2b:b2:c2:df:a1:b0:77:cc:
                    de:c4:d7:73:66:8d:00:be:f3:90:73:aa:c8:c8:88:
                    36:5b:95:15:61:8f:98:d3:a7:8b:e0:66:92:5a:98:
                    5b:51:fa:ae:71:32:40:7b:98:df:b1:53:4b:1e:85:
                    58:7c:d0:f4:49:15:d3:f2:f6:80:62:3e:91:9c:92:
                    d1:05:98:2a:3a:0a:b0:ce:e3:26:03:6f:48:16:c3:
                    15:cb:95:a4:f1:59:fe:fd:ac:60:a5:76:bb:52:75:
                    ee:41:5c:12:49:2e:2a:78:5c:8b:b2:22:ec:4b:da:
                    27:7a:d5:1d:99:68:be:66:d8:25:00:c5:0d:0f:f0:
                    68:39:aa:95:0d:51:73:b3:79:da:53:bc:0d:44:49:
                    3c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D2:C3:F4:C8:D8:98:95:6B:34:B6:6C:8C:51:79:DB:D0:B5:5C:6C
            X509v3 Authority Key Identifier:
                keyid:A5:37:C2:56:EA:0C:E3:1B:F0:5A:91:88:73:03:24:41:45:AC:E8:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/A537C256EA0CE31BF05A91887303244145ACE8AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A537C256EA0CE31BF05A91887303244145ACE8AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/323830343a326462633a613830303a3a2f33382d3338203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2dbc:a800::/38

    Signature Algorithm: sha256WithRSAEncryption
         2a:94:0c:d8:e6:4a:43:59:61:f9:19:c7:95:bd:6d:d6:3a:41:
         ce:9a:52:4d:1b:72:9f:60:66:56:99:56:c4:00:ff:ef:07:c8:
         0e:f0:28:d6:70:7c:bf:b1:c9:a3:8e:f4:44:6d:22:6b:5c:90:
         cd:a7:18:56:ef:60:d4:56:c0:e1:85:59:84:c2:d0:09:38:8d:
         af:cb:73:bc:ba:df:8e:48:4c:fc:8c:9d:9e:69:7e:bf:2e:0a:
         07:f4:8e:97:c4:04:28:10:a4:d7:cf:66:06:79:c1:61:e9:2c:
         20:a7:8f:61:b0:46:53:18:0e:4c:c5:3b:78:b0:fe:e3:1a:0a:
         25:35:46:47:ef:8c:58:fa:ed:51:9f:a1:9d:0e:04:95:df:f5:
         69:73:76:5f:0c:a2:d2:fa:d8:3f:c9:54:de:9b:07:49:c3:75:
         a9:4c:58:5e:6a:76:4d:e3:3d:54:a5:cd:8a:f2:ac:aa:38:b4:
         be:0b:e4:af:03:5b:33:d4:7f:5b:39:01:b0:b3:17:51:db:63:
         d6:b8:f0:9c:87:ac:2b:a2:2b:62:a8:e5:9c:41:ea:c5:bd:f0:
         44:ca:24:d0:66:6a:44:d2:90:78:a3:96:a1:ec:53:51:33:0b:
         ae:96:5c:05:14:41:16:05:7f:d9:97:6d:a6:73:eb:87:f6:1e:
         91:c6:81:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org