Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/0/323830343a373736633a3a2f33322d3438203d3e20323731313737.roa
File:                     323830343a373736633a3a2f33322d3438203d3e20323731313737.roa (raw, json)
Hash identifier:          Gp9Lf5Qy1AMKufCP8gxs188fDha23CMwdR9DToU9Zqo=
Subject key identifier:   3C:73:5C:A2:D1:6D:7F:A5:18:F6:6F:EF:F6:47:C0:67:AD:91:1F:D9
Certificate issuer:       /CN=951AE056EA191708C1417B7F9956EA6704D459D0
Certificate serial:       7AD5F9E1E31CD135C54815BD5202B395A78E7887
Authority key identifier: 95:1A:E0:56:EA:19:17:08:C1:41:7B:7F:99:56:EA:67:04:D4:59:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/951AE056EA191708C1417B7F9956EA6704D459D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/0/323830343a373736633a3a2f33322d3438203d3e20323731313737.roa
Signing time:             Tue 12 Mar 2024 22:00:50 +0000
ROA not before:           Tue 12 Mar 2024 21:55:50 +0000
ROA not after:            Tue 11 Mar 2025 22:00:50 +0000
asID:                     271177
IP address blocks:        2804:776c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d5:f9:e1:e3:1c:d1:35:c5:48:15:bd:52:02:b3:95:a7:8e:78:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=951AE056EA191708C1417B7F9956EA6704D459D0
        Validity
            Not Before: Mar 12 21:55:50 2024 GMT
            Not After : Mar 11 22:00:50 2025 GMT
        Subject: CN=3C735CA2D16D7FA518F66FEFF647C067AD911FD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c5:19:e1:6b:2c:fe:ba:44:a1:5a:e0:60:34:
                    bb:ee:f7:0a:fd:61:0b:a0:eb:be:b7:c9:7d:72:33:
                    0d:ef:3f:4a:6d:f6:29:57:10:77:e8:77:b7:0e:ab:
                    cf:52:90:15:48:98:a9:f7:7f:63:63:14:41:11:3a:
                    c4:ca:1a:d0:6c:db:d3:85:7e:ac:7d:5e:5f:9b:4b:
                    9f:22:46:c9:37:92:99:d2:28:4d:9d:9b:c4:e4:4d:
                    80:05:46:d8:f8:c6:9d:16:85:44:07:10:e1:d8:7c:
                    6a:9a:26:5d:76:72:55:d7:42:ef:cd:54:a5:c0:4e:
                    37:58:3d:ae:dc:91:f6:ba:dd:54:22:ae:6f:1f:10:
                    ea:88:76:79:8b:5e:df:c2:52:65:39:38:31:dd:2e:
                    40:90:16:56:82:e4:67:41:0d:76:2c:3a:f1:ff:08:
                    d9:79:94:0b:d1:ef:be:e3:83:99:10:8a:27:cc:41:
                    38:27:3d:7d:61:60:47:bc:3d:ec:64:eb:f6:d9:b7:
                    db:7a:0e:ea:61:46:92:a3:ca:68:52:56:7e:a5:4d:
                    4c:51:e9:e6:3c:95:77:41:ed:4c:c1:ca:d5:5c:ae:
                    78:99:ab:57:a4:46:82:0f:aa:da:82:a3:16:ef:2b:
                    fe:3b:7f:bd:3e:4f:9c:ef:a5:29:95:07:e9:80:18:
                    1c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:73:5C:A2:D1:6D:7F:A5:18:F6:6F:EF:F6:47:C0:67:AD:91:1F:D9
            X509v3 Authority Key Identifier:
                keyid:95:1A:E0:56:EA:19:17:08:C1:41:7B:7F:99:56:EA:67:04:D4:59:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/0/951AE056EA191708C1417B7F9956EA6704D459D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/951AE056EA191708C1417B7F9956EA6704D459D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/0/323830343a373736633a3a2f33322d3438203d3e20323731313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:776c::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:49:7c:77:6c:a3:d4:d5:ba:fb:52:6d:26:76:ad:e8:09:27:
         f4:9f:42:5a:2e:e6:35:a1:c5:fe:d9:cc:61:93:f1:59:47:64:
         9c:10:d7:39:fb:82:a9:16:ff:1e:d2:34:17:5e:ec:5c:3f:a8:
         f4:bb:8b:59:bb:d4:00:c3:9e:4b:08:4d:89:71:ca:b4:e7:b0:
         4b:52:03:87:bb:04:2f:8d:13:b9:ad:cf:81:fb:5e:b9:21:73:
         a7:34:b5:d7:7d:df:d7:9b:01:9b:ad:fa:02:f3:af:b2:87:b0:
         41:c3:c0:df:b5:a4:99:6f:b5:83:16:ae:f3:2c:54:e5:b3:03:
         34:98:96:2f:fd:9f:63:49:57:0a:1f:3f:75:ba:e5:c1:55:4b:
         49:4c:d2:ec:d6:62:6a:f9:fd:0c:c0:54:63:9d:f2:a3:18:f8:
         c6:bb:a3:b7:87:4b:89:e5:24:83:28:a6:aa:9e:6c:e5:fc:5f:
         16:b9:73:16:12:44:08:4b:1e:12:6c:97:33:e6:9d:05:23:da:
         91:ec:43:f3:5e:06:25:8a:b6:23:d2:34:80:27:53:f6:f8:0f:
         75:28:1a:ae:ff:cf:59:0f:f5:d9:1a:ee:4c:f1:24:17:41:1e:
         23:13:14:80:a7:df:81:18:c3:e7:cf:bb:ab:81:e6:52:0f:b5:
         5b:52:00:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org