Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/0/323830343a316164383a3a2f33322d3438203d3e203532353839.roa
File:                     323830343a316164383a3a2f33322d3438203d3e203532353839.roa (raw, json)
Hash identifier:          SdLCL4+ZqtxOZzJrUMb+ZispGg04FfuazCF0jE+55TU=
Subject key identifier:   2F:EA:F3:49:19:98:55:58:01:1F:20:9A:D8:8D:52:77:13:1C:08:87
Certificate issuer:       /CN=7D6D4B0ED16D14A94AC98715751FA685F25D5E15
Certificate serial:       7F63BF349AAFC756E58B38E974421F915432E38E
Authority key identifier: 7D:6D:4B:0E:D1:6D:14:A9:4A:C9:87:15:75:1F:A6:85:F2:5D:5E:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D6D4B0ED16D14A94AC98715751FA685F25D5E15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/0/323830343a316164383a3a2f33322d3438203d3e203532353839.roa
Signing time:             Fri 17 Nov 2023 18:15:00 +0000
ROA not before:           Fri 17 Nov 2023 18:10:00 +0000
ROA not after:            Fri 15 Nov 2024 18:15:00 +0000
asID:                     52589
IP address blocks:        2804:1ad8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:63:bf:34:9a:af:c7:56:e5:8b:38:e9:74:42:1f:91:54:32:e3:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D6D4B0ED16D14A94AC98715751FA685F25D5E15
        Validity
            Not Before: Nov 17 18:10:00 2023 GMT
            Not After : Nov 15 18:15:00 2024 GMT
        Subject: CN=2FEAF34919985558011F209AD88D5277131C0887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:03:3e:3a:58:4c:04:06:2a:88:ea:51:dd:82:
                    ef:ca:b6:b7:0e:45:d0:9f:f9:a8:fe:03:e5:e9:da:
                    01:e6:c7:81:03:c5:70:fb:94:5f:f3:9a:91:72:92:
                    30:4b:56:6d:8f:32:72:0e:55:c8:71:27:ce:69:0f:
                    ca:5c:df:60:20:20:15:8b:00:27:6c:ee:41:55:42:
                    e7:ed:30:95:fd:46:44:10:fb:e4:5d:7a:88:c5:80:
                    0d:1b:85:e5:fe:bf:15:1e:73:94:ef:d7:07:4e:61:
                    bb:25:46:a8:eb:b0:de:28:d3:6f:49:ae:7c:ea:c8:
                    d0:56:06:83:91:74:d8:0f:70:e9:f3:00:8f:a6:7a:
                    3e:09:89:ff:53:a2:d1:41:c2:78:ab:cf:0d:d4:6a:
                    e8:b2:1c:9f:dd:a2:6d:25:cf:cb:d3:6f:b9:f1:18:
                    9e:5a:48:d5:69:37:dc:42:6d:d1:4b:48:8d:67:0b:
                    25:58:2a:54:0b:67:40:97:90:c8:57:4f:f1:c9:eb:
                    e5:12:9a:d8:91:cd:48:53:69:2a:af:d6:66:51:e5:
                    38:8a:ad:64:72:0a:d3:31:a8:b5:f9:e0:11:f6:0e:
                    22:d4:aa:4a:40:b5:18:f8:c3:c7:85:50:9d:4e:12:
                    59:02:32:ad:1d:9a:4c:0d:96:44:0c:04:fc:43:bf:
                    93:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EA:F3:49:19:98:55:58:01:1F:20:9A:D8:8D:52:77:13:1C:08:87
            X509v3 Authority Key Identifier:
                keyid:7D:6D:4B:0E:D1:6D:14:A9:4A:C9:87:15:75:1F:A6:85:F2:5D:5E:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/0/7D6D4B0ED16D14A94AC98715751FA685F25D5E15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D6D4B0ED16D14A94AC98715751FA685F25D5E15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/0/323830343a316164383a3a2f33322d3438203d3e203532353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ad8::/32

    Signature Algorithm: sha256WithRSAEncryption
         e9:0f:0f:dc:a3:a1:f2:75:26:c7:f0:47:c2:79:14:61:83:c6:
         50:4a:c7:94:e5:44:35:fc:e8:7e:90:2f:1b:06:5e:9c:a3:16:
         a8:f7:23:73:db:78:cf:12:8c:41:68:99:3f:bb:07:63:24:73:
         ab:a9:d0:8b:4e:63:7a:eb:18:c8:87:26:5a:0f:e6:c5:ac:27:
         83:02:18:50:20:5e:9f:17:ab:03:e9:3d:1e:db:8b:01:7f:f3:
         95:21:e2:9b:78:74:08:e6:f8:40:63:99:ab:34:10:9a:8e:b2:
         0a:82:bb:6d:6d:50:91:e0:84:24:23:58:50:50:6c:4d:87:7e:
         e7:a0:a4:55:cd:d9:8f:75:22:f5:07:56:66:dd:e5:1d:54:4c:
         43:e7:af:84:c4:46:5e:e5:e0:9e:17:57:9d:99:5c:0d:60:30:
         5f:3f:46:1b:79:b7:ed:74:c5:27:7d:2d:e8:fa:85:f2:60:6a:
         0c:c1:da:61:e0:a2:49:27:59:6e:3a:e7:6e:82:82:65:83:af:
         3c:07:fd:5c:55:9f:09:f3:7f:09:20:d1:3c:63:6f:6a:29:f6:
         b2:b4:ce:bf:c6:87:79:8d:2e:9f:75:5e:fa:10:69:79:3c:69:
         55:44:4e:95:b7:23:ea:b3:e7:15:79:d5:63:77:72:1a:3a:b0:
         8b:18:08:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org