Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a34303a3a2f34322d3432203d3e20323635313837.roa
File:                     323830343a326330303a34303a3a2f34322d3432203d3e20323635313837.roa (raw, json)
Hash identifier:          F+EqNS78b5XmYDV2hx/Jfgde8yfh2UM1Vxk9Akm3Src=
Subject key identifier:   DB:F4:EE:C0:4A:FF:0A:66:F5:E4:50:D4:0A:80:58:FE:6A:53:6B:CC
Certificate issuer:       /CN=81175370221E26181F39FB407E63064DEB20E6EE
Certificate serial:       14826C059F94E28E2E7FD741FB5F5A01690291C9
Authority key identifier: 81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a34303a3a2f34322d3432203d3e20323635313837.roa
Signing time:             Thu 03 Aug 2023 19:00:00 +0000
ROA not before:           Thu 03 Aug 2023 18:55:00 +0000
ROA not after:            Thu 01 Aug 2024 19:00:00 +0000
asID:                     265187
IP address blocks:        2804:2c00:40::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:82:6c:05:9f:94:e2:8e:2e:7f:d7:41:fb:5f:5a:01:69:02:91:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81175370221E26181F39FB407E63064DEB20E6EE
        Validity
            Not Before: Aug  3 18:55:00 2023 GMT
            Not After : Aug  1 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:66:06:cc:53:1b:83:bb:9a:14:ff:b0:2f:1c:
                    56:23:4b:b4:42:d9:65:21:88:1e:f8:b9:13:a5:13:
                    71:db:19:be:ff:f3:03:22:52:86:b3:6b:1d:06:e0:
                    3f:35:d3:8a:8a:27:ea:8a:af:fd:20:44:9d:43:d9:
                    01:21:c1:a2:e7:12:4c:79:12:e7:7a:08:20:15:11:
                    b3:52:02:4f:df:53:87:d4:ed:c5:ea:7f:94:83:f1:
                    de:ce:53:a4:c1:27:2a:d3:db:d0:b7:e3:f3:f0:35:
                    3e:5c:3b:49:ab:42:c1:2d:62:bb:3c:b0:a3:9f:64:
                    b9:66:e5:82:d0:a3:e8:f2:67:c1:84:08:74:0a:a9:
                    af:50:38:4f:1b:c3:b1:42:76:19:bc:14:aa:88:d0:
                    12:15:27:e2:f3:88:af:3c:9c:f7:13:eb:c9:cd:8f:
                    66:af:c9:83:08:8c:bb:06:83:69:a0:d8:5d:3f:73:
                    b7:86:1c:9a:8e:00:be:36:f0:df:9e:c6:f6:83:f5:
                    99:29:d0:74:8d:96:df:11:a0:d3:40:f0:24:62:cf:
                    07:0b:eb:47:6c:f9:89:af:62:48:80:bc:e8:b6:a9:
                    74:73:8b:9c:21:ee:73:1a:f4:90:18:2b:17:8f:ea:
                    17:0b:a0:00:19:68:7c:0c:dc:cd:13:8b:0f:4a:83:
                    26:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F4:EE:C0:4A:FF:0A:66:F5:E4:50:D4:0A:80:58:FE:6A:53:6B:CC
            X509v3 Authority Key Identifier:
                keyid:81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/81175370221E26181F39FB407E63064DEB20E6EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a34303a3a2f34322d3432203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c00:40::/42

    Signature Algorithm: sha256WithRSAEncryption
         cc:ea:5a:b4:2d:8b:a0:50:ff:4f:92:17:7a:5e:69:d8:d9:2e:
         8e:cb:bd:0f:e5:d8:b7:64:8c:49:cd:ab:eb:b7:e9:d5:d2:32:
         63:25:ce:43:ec:bd:3a:3d:fe:01:f6:0f:15:53:82:9e:12:cf:
         8a:3a:38:32:44:a0:9e:24:d5:19:63:8c:8f:1f:0e:b7:22:d3:
         0e:13:0c:7c:84:8f:60:a2:d0:14:5c:fc:a0:c5:cd:38:1a:d4:
         5e:6b:2e:8a:70:76:19:aa:ec:5e:cb:f5:96:fa:3d:04:b0:34:
         e3:0b:58:19:a8:27:57:a2:cd:a2:9d:a1:02:ec:35:da:fa:5d:
         8d:b9:ec:ca:96:65:d1:0e:23:d8:15:c2:ee:92:fc:84:d0:f3:
         9c:76:29:e4:a0:74:a5:01:b2:52:e2:82:e9:f6:e1:49:c7:d8:
         e1:d8:68:1d:2e:30:56:0e:30:96:e0:2e:dd:1e:a1:8c:62:8f:
         1a:78:b7:05:dc:3a:8f:15:bc:29:84:e4:a6:cf:76:93:dd:3c:
         63:1a:d0:13:ad:a6:90:aa:25:32:78:b9:28:cb:73:4c:df:c5:
         a8:1d:37:42:7c:87:b9:e6:8b:e5:a3:16:f7:f6:a2:19:2e:2b:
         3d:bf:5e:5c:a5:4a:b7:a9:ed:87:92:46:3e:39:c5:80:90:48:
         65:ee:26:84
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:01 2024 by rpki-client on console-fra.rpki-client.org