Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/323830343a333762633a3a2f33322d3332203d3e20323636343333.roa
File:                     323830343a333762633a3a2f33322d3332203d3e20323636343333.roa (raw, json)
Hash identifier:          X9/m4OEdClO+GTZilfI//cErxphHghn0y3k/cHnR07s=
Subject key identifier:   AA:C2:1F:07:C8:D2:F7:F7:D0:46:47:49:95:F9:F9:60:CE:96:DE:60
Certificate issuer:       /CN=78C362024931EABCD22430437714D086537F64FD
Certificate serial:       43D6E57D222A17DD2EA110E24E929C7D7C05E0D3
Authority key identifier: 78:C3:62:02:49:31:EA:BC:D2:24:30:43:77:14:D0:86:53:7F:64:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78C362024931EABCD22430437714D086537F64FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/323830343a333762633a3a2f33322d3332203d3e20323636343333.roa
Signing time:             Thu 02 Nov 2023 13:00:40 +0000
ROA not before:           Thu 02 Nov 2023 12:55:40 +0000
ROA not after:            Thu 31 Oct 2024 13:00:40 +0000
asID:                     266433
IP address blocks:        2804:37bc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d6:e5:7d:22:2a:17:dd:2e:a1:10:e2:4e:92:9c:7d:7c:05:e0:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C362024931EABCD22430437714D086537F64FD
        Validity
            Not Before: Nov  2 12:55:40 2023 GMT
            Not After : Oct 31 13:00:40 2024 GMT
        Subject: CN=AAC21F07C8D2F7F7D046474995F9F960CE96DE60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ef:93:a7:2d:31:dc:bf:ed:aa:c4:88:e4:70:
                    cf:c7:ec:c0:08:af:c3:bd:51:9c:72:b4:f3:fb:d6:
                    85:39:c2:2c:4f:e3:ba:dd:3a:0d:e5:e7:e6:2c:71:
                    a1:28:30:e8:94:81:a2:6d:e3:43:82:a9:3e:9f:22:
                    06:02:99:dc:03:3a:ca:9f:e4:f5:a7:8c:0c:ce:ec:
                    02:3f:5a:78:eb:2e:30:35:49:ac:a3:eb:15:94:d8:
                    74:3b:5b:ff:30:91:a8:b6:ee:bb:68:54:5a:60:33:
                    d5:7f:cd:32:77:d4:79:6d:2f:1c:16:4f:f8:cd:5b:
                    91:6b:bd:48:1e:e7:ae:85:cc:13:3f:e0:e5:06:db:
                    52:ea:6c:69:61:f5:37:5f:d3:2d:5f:16:46:90:1c:
                    5b:e8:4f:fe:e7:c9:42:9a:9b:e4:7f:1b:9f:ce:66:
                    cb:20:97:32:72:df:17:2a:8d:7b:82:5b:dd:68:2a:
                    0a:28:ea:79:eb:5b:42:bb:49:47:f1:aa:73:8a:d3:
                    3b:c0:a8:15:7e:f4:ce:79:e8:85:48:f2:62:34:ad:
                    48:74:73:d4:54:a9:7b:14:71:f3:c1:35:f8:09:f1:
                    c3:48:63:bc:ba:18:d4:10:40:d3:da:b1:29:4c:f1:
                    cb:67:b5:4f:05:c2:4f:b3:d8:4d:51:e9:e5:00:f4:
                    f1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C2:1F:07:C8:D2:F7:F7:D0:46:47:49:95:F9:F9:60:CE:96:DE:60
            X509v3 Authority Key Identifier:
                keyid:78:C3:62:02:49:31:EA:BC:D2:24:30:43:77:14:D0:86:53:7F:64:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/78C362024931EABCD22430437714D086537F64FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78C362024931EABCD22430437714D086537F64FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/323830343a333762633a3a2f33322d3332203d3e20323636343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:32:aa:30:af:dc:7e:83:30:15:c9:f3:6f:ba:e1:b6:27:67:
         b5:fa:98:92:5b:49:c3:67:b0:e4:ee:28:1a:a3:ea:9b:70:d4:
         98:92:6d:a3:15:07:e1:01:bd:a2:58:13:2e:c0:4d:60:1c:aa:
         f7:e9:b1:a0:5b:3c:20:cb:65:0c:54:fb:cb:89:6c:eb:47:8f:
         46:2e:d2:a4:53:34:2c:bd:e9:d9:54:14:65:b3:f8:38:34:c8:
         31:fd:c7:ce:24:3c:8d:94:e8:04:93:26:90:0a:ee:9a:07:bb:
         24:5b:07:0b:db:9b:9a:4a:97:24:b5:99:a7:d2:a7:fb:07:17:
         f0:56:e7:37:99:0d:05:58:5c:64:47:fd:6d:a9:8d:1e:0a:2b:
         ed:a1:6f:2e:7b:ab:93:8e:43:83:d0:6d:40:3b:61:06:08:38:
         bf:96:07:1b:b9:67:b7:e5:ee:38:e5:60:29:3d:ae:6b:58:a9:
         9d:c8:ff:91:c3:de:93:1e:59:49:b4:26:73:91:70:db:db:3a:
         c2:cc:6c:5c:19:b7:c8:62:99:15:92:15:d2:50:6d:69:29:5c:
         27:a5:31:0a:1c:3b:11:eb:53:4f:b1:56:0c:74:01:99:99:fc:
         ed:06:a6:99:9a:f6:92:dc:08:04:9b:6e:c2:a6:3c:29:ac:5a:
         81:b2:27:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org