Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/323830343a313033383a3a2f33322d313238203d3e20323633363235.roa
File:                     323830343a313033383a3a2f33322d313238203d3e20323633363235.roa (raw, json)
Hash identifier:          cTzfSff7tljJ3In91+a66HR9QQkiO7QZA27bwB4HZbI=
Subject key identifier:   19:DD:E7:02:1B:D5:78:FA:D9:DF:59:6E:69:F5:52:3E:64:4D:AB:5C
Certificate issuer:       /CN=79B23D2F8F4EDF23756584238BDBCE392427B638
Certificate serial:       310793F3B67E988AF494AD3030E8F910088F81ED
Authority key identifier: 79:B2:3D:2F:8F:4E:DF:23:75:65:84:23:8B:DB:CE:39:24:27:B6:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79B23D2F8F4EDF23756584238BDBCE392427B638.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/323830343a313033383a3a2f33322d313238203d3e20323633363235.roa
Signing time:             Tue 03 Oct 2023 04:07:21 +0000
ROA not before:           Tue 03 Oct 2023 04:02:21 +0000
ROA not after:            Tue 01 Oct 2024 04:07:21 +0000
asID:                     263625
IP address blocks:        2804:1038::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:07:93:f3:b6:7e:98:8a:f4:94:ad:30:30:e8:f9:10:08:8f:81:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79B23D2F8F4EDF23756584238BDBCE392427B638
        Validity
            Not Before: Oct  3 04:02:21 2023 GMT
            Not After : Oct  1 04:07:21 2024 GMT
        Subject: CN=19DDE7021BD578FAD9DF596E69F5523E644DAB5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:59:58:8c:f3:3b:17:d8:ed:0f:4b:50:df:09:
                    77:02:d3:09:42:7f:1b:88:86:af:1f:9b:c1:c7:4e:
                    73:97:b4:8f:a4:11:92:25:a4:06:ed:46:1f:7b:3a:
                    91:2e:a7:07:f7:7d:a6:d7:36:ae:8b:b7:94:7f:cf:
                    ac:21:82:d7:1e:f3:83:03:a7:22:a6:39:12:69:d5:
                    9c:68:c8:15:3f:2c:62:81:f9:af:22:56:a6:0f:81:
                    6e:78:80:de:7d:4c:b6:26:1c:d5:65:e3:6a:b1:cb:
                    bb:df:84:ea:ac:18:af:1d:df:1a:4b:99:4e:48:49:
                    39:13:26:07:b0:51:69:b8:99:18:63:6e:1f:6d:0d:
                    96:f6:a7:14:ba:e9:26:03:46:ca:a5:6b:5e:1c:de:
                    1e:0f:36:e1:30:3e:c7:88:68:5b:d6:7f:1f:c1:f3:
                    ca:67:d4:09:96:90:86:63:92:ca:9f:2c:ff:3d:5b:
                    72:c3:4c:ee:e1:99:5c:24:db:59:b9:78:c1:1f:19:
                    a4:b9:c2:37:23:82:ce:0b:42:65:fb:94:0d:1b:21:
                    59:ea:c8:8b:8f:a6:6c:94:10:ce:46:c4:53:9e:85:
                    98:74:f8:d1:46:0a:de:d6:f2:2d:25:d7:18:f6:56:
                    21:77:6d:96:81:ef:4f:67:5f:c0:eb:a3:b3:cf:a1:
                    b6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DD:E7:02:1B:D5:78:FA:D9:DF:59:6E:69:F5:52:3E:64:4D:AB:5C
            X509v3 Authority Key Identifier:
                keyid:79:B2:3D:2F:8F:4E:DF:23:75:65:84:23:8B:DB:CE:39:24:27:B6:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/79B23D2F8F4EDF23756584238BDBCE392427B638.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79B23D2F8F4EDF23756584238BDBCE392427B638.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/323830343a313033383a3a2f33322d313238203d3e20323633363235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1038::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:57:a0:35:be:52:cc:bb:3a:da:fd:be:ec:87:3f:a0:ed:28:
         b9:9e:49:e5:1c:a0:77:f4:b8:07:72:88:65:78:eb:f5:e1:6a:
         56:c6:9e:2a:a5:fa:25:8f:32:d6:aa:6c:cf:39:3c:00:a8:b0:
         fa:e9:ae:7a:ee:04:d9:e3:94:fc:13:b7:ac:25:37:22:7f:3b:
         bf:af:b2:82:4f:32:2a:7b:ee:c9:98:3c:9f:85:d2:57:11:03:
         cd:4d:28:dd:b8:3e:8f:70:cb:07:29:5e:5b:e4:8f:0e:67:ff:
         39:eb:0e:a7:2d:93:7e:d4:aa:d7:7e:d1:a3:58:e2:99:0b:71:
         04:d2:cc:6e:cb:11:b4:5d:d0:a6:11:cd:aa:c0:3c:60:84:74:
         02:36:0a:72:47:86:29:3d:60:02:55:82:d0:7e:2c:1f:4a:95:
         7e:70:83:67:c3:f4:9a:42:0a:d1:46:c5:9c:a4:ff:44:01:08:
         5c:d9:3e:66:4f:06:d6:ad:1c:be:ac:4a:4b:a1:16:71:bb:c1:
         09:09:36:27:8d:22:79:9f:4c:25:9a:0e:a2:cd:58:45:90:d6:
         2b:7c:b5:35:e5:08:f4:00:74:01:48:b6:72:99:9e:75:92:e6:
         fd:0a:71:7f:16:a9:6b:fc:1b:34:fb:eb:b3:ad:6d:f1:37:c1:
         f3:c2:3b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org