Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/323830343a343366633a3a2f33342d3334203d3e20323637363134.roa
File:                     323830343a343366633a3a2f33342d3334203d3e20323637363134.roa (raw, json)
Hash identifier:          PYAlrtRyhY2/mh77nlONUtMNOV6goM8KwPDCc90UB9E=
Subject key identifier:   55:D1:58:63:E1:AB:72:56:EC:D9:8C:FB:7A:7A:C1:10:39:D5:A7:22
Certificate issuer:       /CN=7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC
Certificate serial:       1E3EEEDDCA2B627D7EE72E7020527414D84DDFF7
Authority key identifier: 7A:35:57:CA:7C:23:66:DC:18:DE:EB:B7:43:3B:1A:3D:93:D4:5F:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/323830343a343366633a3a2f33342d3334203d3e20323637363134.roa
Signing time:             Wed 06 Dec 2023 18:21:37 +0000
ROA not before:           Wed 06 Dec 2023 18:16:37 +0000
ROA not after:            Wed 04 Dec 2024 18:21:37 +0000
asID:                     267614
IP address blocks:        2804:43fc::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:3e:ee:dd:ca:2b:62:7d:7e:e7:2e:70:20:52:74:14:d8:4d:df:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC
        Validity
            Not Before: Dec  6 18:16:37 2023 GMT
            Not After : Dec  4 18:21:37 2024 GMT
        Subject: CN=55D15863E1AB7256ECD98CFB7A7AC11039D5A722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f4:09:10:33:62:9f:27:d6:a0:63:39:00:da:
                    f5:d3:54:0c:57:5f:b1:10:f7:6f:94:63:e5:e4:f0:
                    2e:04:44:51:53:d5:e3:5d:e5:e1:1d:cb:77:54:e0:
                    54:1a:29:20:56:d9:37:2c:9e:8b:7a:6a:a3:d0:3c:
                    ae:19:32:70:65:33:bf:9d:7a:8d:41:31:4e:f7:9b:
                    4f:de:92:37:53:22:b3:8f:76:02:df:53:61:5b:c8:
                    cc:c9:2a:89:c6:19:19:7c:07:94:ed:a0:16:6f:63:
                    9f:29:da:84:8b:b8:14:c5:af:65:81:60:11:f3:ce:
                    b1:bf:c5:76:1a:e9:fe:b6:1d:d6:a2:b5:a4:4a:10:
                    68:b5:50:a4:ce:20:2e:84:f1:d9:22:70:df:ad:96:
                    3f:3c:02:1d:86:cc:c7:98:49:44:fd:f0:38:a4:61:
                    79:95:60:47:7f:db:6d:95:eb:4d:db:6f:0d:58:2e:
                    73:95:1c:03:c8:b1:9f:da:b9:40:c2:ff:19:6a:e1:
                    6a:d3:1a:7f:78:8f:c3:22:f0:ce:59:bd:cc:02:e7:
                    e2:b0:05:e2:7e:e0:4f:e6:99:46:1a:c5:88:7c:66:
                    9f:96:41:22:8e:71:40:70:fc:a9:a9:0d:aa:21:ef:
                    07:51:f8:b0:26:ff:0d:01:0e:7d:2c:8a:14:23:c9:
                    8e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D1:58:63:E1:AB:72:56:EC:D9:8C:FB:7A:7A:C1:10:39:D5:A7:22
            X509v3 Authority Key Identifier:
                keyid:7A:35:57:CA:7C:23:66:DC:18:DE:EB:B7:43:3B:1A:3D:93:D4:5F:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/323830343a343366633a3a2f33342d3334203d3e20323637363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43fc::/34

    Signature Algorithm: sha256WithRSAEncryption
         99:7b:6b:81:a5:f1:c5:22:98:46:73:11:86:2e:38:51:b0:16:
         4f:78:8f:74:c8:65:ae:3e:82:10:4c:64:10:ea:15:1a:32:d4:
         70:52:3d:ca:20:18:0d:43:1d:3a:da:91:3d:54:e8:40:70:d4:
         d7:be:39:99:c7:0a:d1:f9:3d:ef:07:52:e9:55:f0:d6:b0:8b:
         e2:66:4c:55:19:d1:e8:40:a9:45:57:d2:c1:7c:c7:bb:a4:6d:
         65:d1:3b:24:0f:77:33:f8:ea:66:55:55:ce:b1:e5:c4:c1:91:
         09:77:8d:f7:e1:fe:27:2f:a9:38:80:5b:4d:02:48:81:d4:bf:
         45:8b:49:37:6d:f5:be:71:23:89:75:0c:d2:2b:4c:77:35:e5:
         ed:15:48:cd:bf:51:f4:e2:aa:73:d7:98:93:1e:be:02:3d:5e:
         ea:8d:a6:48:2b:8c:05:de:42:51:3d:f9:e5:f0:43:67:8e:e2:
         4b:48:b5:5b:69:6a:28:af:17:60:6f:11:a4:e7:71:8d:01:ad:
         d1:8f:c2:18:f6:26:80:a1:18:36:62:1a:cb:df:2d:95:62:e0:
         e2:fa:b2:1d:36:1c:84:bb:b0:e8:e1:83:f4:87:ce:03:49:a0:
         c6:88:13:71:43:f9:a7:8c:e1:38:35:76:3c:87:c6:47:3d:20:
         47:f6:bd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org