Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/323830343a323663343a383030303a3a2f33332d3333203d3e20323633383535.roa
File:                     323830343a323663343a383030303a3a2f33332d3333203d3e20323633383535.roa (raw, json)
Hash identifier:          LSzOZ6iZuhwNijVw2yyuAcLMWSZcODXP8WrkWQKYL2o=
Subject key identifier:   7B:FC:EB:EC:19:08:94:AB:C5:68:94:E5:95:B6:05:C1:B4:DD:C9:BC
Certificate issuer:       /CN=CB79DFC1DF1822D301F97D5B20B19091DB3700ED
Certificate serial:       0876D7EF90D010E4C89C3B205780A321607018CB
Authority key identifier: CB:79:DF:C1:DF:18:22:D3:01:F9:7D:5B:20:B1:90:91:DB:37:00:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB79DFC1DF1822D301F97D5B20B19091DB3700ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/323830343a323663343a383030303a3a2f33332d3333203d3e20323633383535.roa
Signing time:             Fri 20 Jan 2023 15:32:27 +0000
ROA not before:           Fri 20 Jan 2023 15:27:27 +0000
ROA not after:            Fri 19 Jan 2024 15:32:27 +0000
asID:                     263855
IP address blocks:        2804:26c4:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:76:d7:ef:90:d0:10:e4:c8:9c:3b:20:57:80:a3:21:60:70:18:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB79DFC1DF1822D301F97D5B20B19091DB3700ED
        Validity
            Not Before: Jan 20 15:27:27 2023 GMT
            Not After : Jan 19 15:32:27 2024 GMT
        Subject: CN=7BFCEBEC190894ABC56894E595B605C1B4DDC9BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6a:5c:0d:71:68:0a:d5:00:bb:8a:0d:e2:06:
                    01:8d:ee:4e:ab:4c:1b:cb:dc:c4:12:2c:1c:1f:34:
                    eb:d3:14:77:1b:9d:2b:d1:29:a6:de:5f:9f:c0:21:
                    a8:95:f4:fc:42:9e:b1:a8:c1:78:ff:a9:7f:e4:c3:
                    bc:45:87:b2:02:92:82:cc:3f:63:de:b1:89:9b:0c:
                    11:df:9e:56:4f:11:55:bf:73:f7:28:22:52:54:02:
                    9f:b6:fd:cf:a5:ea:1c:71:d4:3a:3d:9a:19:36:54:
                    61:d7:b3:6b:b0:54:51:fd:4f:e0:37:71:2b:96:e5:
                    a6:b9:13:3c:34:61:f9:30:ef:68:b5:cc:23:e6:82:
                    a1:38:7d:f7:90:bb:4c:6f:cc:24:4e:21:ad:1b:2f:
                    18:bf:51:34:cc:75:d0:b6:c0:e0:5f:bc:c7:af:88:
                    31:e3:ba:29:f1:2c:81:27:97:6a:00:6b:9a:dd:b5:
                    fc:db:1b:38:af:79:53:aa:a5:28:92:70:47:2b:e0:
                    5f:f9:55:7c:68:ab:cb:16:f9:77:c3:37:a9:17:e1:
                    4d:df:b1:d8:30:52:9a:0d:81:c4:f6:ce:2c:fb:a4:
                    d7:0b:0a:33:2b:ba:5e:df:82:f7:16:f1:aa:c4:72:
                    a2:69:cd:3d:b8:7d:dc:3b:f6:9e:44:72:f4:e2:a1:
                    b1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FC:EB:EC:19:08:94:AB:C5:68:94:E5:95:B6:05:C1:B4:DD:C9:BC
            X509v3 Authority Key Identifier:
                keyid:CB:79:DF:C1:DF:18:22:D3:01:F9:7D:5B:20:B1:90:91:DB:37:00:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/CB79DFC1DF1822D301F97D5B20B19091DB3700ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB79DFC1DF1822D301F97D5B20B19091DB3700ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/323830343a323663343a383030303a3a2f33332d3333203d3e20323633383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26c4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         7c:25:cd:c2:c5:23:6c:c9:1e:3a:ed:0b:97:6b:f5:0c:10:03:
         d6:22:19:1a:af:7b:00:b2:44:f3:4a:06:eb:98:47:61:b5:31:
         e2:2d:8d:a1:48:6a:91:08:d6:74:6f:1e:5b:fe:1d:45:e0:48:
         8a:45:3b:95:0a:67:40:10:63:b5:94:e2:af:78:67:6c:e8:47:
         b8:df:6d:fc:d2:47:a2:e8:24:e1:3a:f4:2f:02:80:26:9e:63:
         ca:a8:67:9b:b4:d7:9a:23:51:e4:9f:a0:9a:38:00:fd:8e:da:
         fb:b6:82:42:bc:f6:5d:45:72:54:47:a4:a8:2b:12:6d:cd:a3:
         42:00:67:16:ef:0d:ee:f9:09:86:04:65:5a:95:3c:04:07:03:
         6f:51:b9:01:9c:c4:58:b5:01:fd:8d:8b:be:c3:9d:fa:6f:0b:
         94:30:1e:c7:46:e6:6b:83:c1:ef:ea:dc:2e:d4:f9:fb:6c:46:
         d2:bc:89:bc:56:87:65:5c:02:b4:5b:f2:0f:60:c4:a7:07:04:
         3f:68:92:83:58:e6:70:25:b7:a0:ec:c9:82:2e:2a:36:96:4e:
         65:f5:9d:e3:94:7f:84:8e:12:8f:b7:98:03:bf:0c:3a:81:d9:
         52:ed:c4:80:4f:24:9b:8e:df:d1:bd:6d:7b:d9:18:15:21:b1:
         b6:ed:04:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org