Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3363303a3a2f34322d3432203d3e20323635313837.roa
File:                     323830343a326330303a3363303a3a2f34322d3432203d3e20323635313837.roa (raw, json)
Hash identifier:          WnProqkXO620/Wlir0s9RKU6F6xzZ7fE5Dw7GtJF8RI=
Subject key identifier:   BA:15:A6:C0:A9:03:70:E5:2A:CF:0A:F0:F1:FE:F9:6D:04:C8:A3:B2
Certificate issuer:       /CN=81175370221E26181F39FB407E63064DEB20E6EE
Certificate serial:       2A369E6E22A6AA16C9EDCF75349B5D7F499F4B51
Authority key identifier: 81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3363303a3a2f34322d3432203d3e20323635313837.roa
Signing time:             Thu 03 Aug 2023 19:00:00 +0000
ROA not before:           Thu 03 Aug 2023 18:55:00 +0000
ROA not after:            Thu 01 Aug 2024 19:00:00 +0000
asID:                     265187
IP address blocks:        2804:2c00:3c0::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:36:9e:6e:22:a6:aa:16:c9:ed:cf:75:34:9b:5d:7f:49:9f:4b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81175370221E26181F39FB407E63064DEB20E6EE
        Validity
            Not Before: Aug  3 18:55:00 2023 GMT
            Not After : Aug  1 19:00:00 2024 GMT
        Subject: CN=3082010A0282010100BB9D9F705F731AA058FA265A3A72DF71B4E198B83972FB3B9B2508E27DA5D28897FA1C8B75A8907CC793A4C0C47ACA49B9311DA17EBD567384EC1E389D3B188FEDE16D32C30B16E40DF169FA68D537A0B07AC8B73D214D4640F56AD67A52163A41B1F6B2C783E2BA9387B1F9E8DD1A55EAEC3FB8D3CAFC642C95451B332E4550043818825EC6432FBB614FC2582C02803BD6375DBAF2F110BD7A0D7310FB0F4F1A438930C54445C18D01D1F185273D0B2CD64BBF8D03869C26DFEF5564BE457AEBD9B3F0A25AB7A89F265CA71E92C05BCDE2B2CF68EAFB7D256D3DA890F9F0738B42F5D0FEADDC5C0031087836FF51BFA634B1FF583FCC67C12A503913D156FB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9d:9f:70:5f:73:1a:a0:58:fa:26:5a:3a:72:
                    df:71:b4:e1:98:b8:39:72:fb:3b:9b:25:08:e2:7d:
                    a5:d2:88:97:fa:1c:8b:75:a8:90:7c:c7:93:a4:c0:
                    c4:7a:ca:49:b9:31:1d:a1:7e:bd:56:73:84:ec:1e:
                    38:9d:3b:18:8f:ed:e1:6d:32:c3:0b:16:e4:0d:f1:
                    69:fa:68:d5:37:a0:b0:7a:c8:b7:3d:21:4d:46:40:
                    f5:6a:d6:7a:52:16:3a:41:b1:f6:b2:c7:83:e2:ba:
                    93:87:b1:f9:e8:dd:1a:55:ea:ec:3f:b8:d3:ca:fc:
                    64:2c:95:45:1b:33:2e:45:50:04:38:18:82:5e:c6:
                    43:2f:bb:61:4f:c2:58:2c:02:80:3b:d6:37:5d:ba:
                    f2:f1:10:bd:7a:0d:73:10:fb:0f:4f:1a:43:89:30:
                    c5:44:45:c1:8d:01:d1:f1:85:27:3d:0b:2c:d6:4b:
                    bf:8d:03:86:9c:26:df:ef:55:64:be:45:7a:eb:d9:
                    b3:f0:a2:5a:b7:a8:9f:26:5c:a7:1e:92:c0:5b:cd:
                    e2:b2:cf:68:ea:fb:7d:25:6d:3d:a8:90:f9:f0:73:
                    8b:42:f5:d0:fe:ad:dc:5c:00:31:08:78:36:ff:51:
                    bf:a6:34:b1:ff:58:3f:cc:67:c1:2a:50:39:13:d1:
                    56:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:15:A6:C0:A9:03:70:E5:2A:CF:0A:F0:F1:FE:F9:6D:04:C8:A3:B2
            X509v3 Authority Key Identifier:
                keyid:81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/81175370221E26181F39FB407E63064DEB20E6EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3363303a3a2f34322d3432203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c00:3c0::/42

    Signature Algorithm: sha256WithRSAEncryption
         60:ec:da:d5:22:85:b5:c5:eb:cc:79:a2:76:93:06:c0:74:0a:
         a9:73:58:d0:08:d3:eb:33:64:3b:ae:6b:fe:6c:38:4b:0f:fd:
         ee:5f:eb:a6:57:9b:2c:12:96:45:a6:d1:fb:60:40:1c:69:10:
         3e:8a:e8:ec:85:1e:6a:2c:2a:a8:b8:4f:54:53:3e:00:ed:4c:
         1f:b9:58:c7:03:10:0f:a5:e9:9b:ff:f8:1e:66:91:06:07:f6:
         23:6b:66:4a:63:d5:89:39:88:e2:e2:a9:fd:90:a5:3e:03:00:
         e5:1c:f4:60:27:e5:22:52:0a:8b:2b:44:4c:94:a3:45:6b:1c:
         d5:d6:0a:14:54:5a:0f:d3:9f:ad:bc:f6:18:25:45:0c:89:0e:
         a2:b0:b4:a2:b9:f4:9d:2b:a1:36:db:82:ac:77:37:73:e2:eb:
         37:dc:46:61:52:81:f0:2a:82:91:65:74:a6:6e:45:19:a6:b2:
         eb:a2:b8:95:86:28:79:d7:15:5e:fd:7b:91:25:4d:28:13:40:
         e8:ac:40:6b:ca:ae:1b:27:fc:13:60:68:57:66:8d:cc:c4:7e:
         ab:fd:1a:5b:0d:af:ce:54:18:40:5c:1e:dc:da:74:19:63:d4:
         6b:a3:54:79:ef:64:be:28:49:be:6b:02:39:53:2d:c3:67:2b:
         a9:98:92:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:01 2024 by rpki-client on console-fra.rpki-client.org