Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3a2f33322d3332203d3e20323635313837.roa
File:                     323830343a326330303a3a2f33322d3332203d3e20323635313837.roa (raw, json)
Hash identifier:          hAZCvHaGxE/W8iUubeWR7GrlQFm4IVK47W/6cwNL0Zc=
Subject key identifier:   0C:F9:18:43:43:2E:69:05:EF:C4:65:84:6D:7C:5F:43:C0:06:9F:1F
Certificate issuer:       /CN=81175370221E26181F39FB407E63064DEB20E6EE
Certificate serial:       2FC816C72B086ED2B2EF192528100A322350045B
Authority key identifier: 81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3a2f33322d3332203d3e20323635313837.roa
Signing time:             Fri 28 Jul 2023 01:00:00 +0000
ROA not before:           Fri 28 Jul 2023 00:55:00 +0000
ROA not after:            Fri 26 Jul 2024 01:00:00 +0000
asID:                     265187
IP address blocks:        2804:2c00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c8:16:c7:2b:08:6e:d2:b2:ef:19:25:28:10:0a:32:23:50:04:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81175370221E26181F39FB407E63064DEB20E6EE
        Validity
            Not Before: Jul 28 00:55:00 2023 GMT
            Not After : Jul 26 01:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f5:d2:c5:cc:87:79:49:c0:5c:d5:81:c0:47:
                    23:5c:36:80:1b:e9:65:40:37:1b:39:6c:60:5d:bf:
                    9e:28:d2:07:d4:4e:2c:18:f3:0c:56:34:ff:e1:55:
                    76:d8:0e:c2:bd:30:52:80:a8:10:dd:cf:14:8f:08:
                    cf:96:27:83:ca:03:d9:72:15:7b:c0:f0:eb:ae:7f:
                    ad:c1:89:6d:2b:37:e9:fc:83:08:f5:3c:16:b4:66:
                    d5:67:39:5e:5e:ca:ea:e9:f1:fc:ab:92:33:5c:f2:
                    60:b1:d6:16:9d:99:59:a7:88:09:2c:02:b5:76:53:
                    65:2e:a8:dc:be:6d:87:16:8b:15:95:d6:64:1d:72:
                    07:1a:65:0f:34:52:db:fb:bf:25:40:17:2e:cd:57:
                    fd:1a:0a:c5:a8:75:eb:98:d0:f6:ff:23:32:85:51:
                    62:dc:a5:84:98:dd:94:47:30:37:44:83:51:fd:f0:
                    7d:4c:6f:c8:13:5c:e5:af:d7:4a:37:04:8b:76:d4:
                    a7:dd:c1:90:e1:32:02:cc:9a:5b:50:b8:01:a7:14:
                    32:15:5b:e2:48:da:f2:7d:25:67:8b:d8:d9:35:e7:
                    71:40:0a:57:c0:5e:4b:96:a5:a0:9d:4b:8f:b4:f8:
                    e1:52:e7:33:59:f3:13:c0:cc:f7:87:4a:7d:ac:27:
                    32:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F9:18:43:43:2E:69:05:EF:C4:65:84:6D:7C:5F:43:C0:06:9F:1F
            X509v3 Authority Key Identifier:
                keyid:81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/81175370221E26181F39FB407E63064DEB20E6EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3a2f33322d3332203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c00::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:12:95:16:44:aa:0b:d4:95:05:02:1b:f3:11:cc:b9:5f:35:
         43:ac:7c:d5:24:a6:3d:23:42:48:90:e8:d6:a0:c5:63:ca:a8:
         53:79:b0:e9:dd:99:21:bf:c0:7f:14:00:62:ac:a2:27:45:b3:
         94:44:18:fc:f8:f7:ca:45:a2:21:55:e2:13:32:db:e2:05:bc:
         08:cc:23:e1:bf:ba:d2:07:8c:5f:99:50:c6:64:4f:80:af:32:
         e8:2b:f9:5c:62:8f:39:bd:9d:99:37:f6:4d:2f:68:f1:36:77:
         5a:bf:ac:45:95:62:29:6f:b3:7d:92:3e:cd:1f:f3:7b:4a:6e:
         dd:a1:50:ed:9f:84:8a:f6:b3:f7:09:b6:6c:b0:99:f6:e2:1d:
         42:c2:89:c5:76:39:ed:06:59:1e:bb:ec:4d:50:87:09:ed:58:
         5c:8b:7b:9b:24:dd:75:95:fc:38:c2:27:04:92:8f:46:2a:50:
         97:69:a2:cb:a2:0d:60:10:7b:dc:b1:f0:8f:e5:df:a0:c9:bd:
         f2:a1:f5:bf:04:9f:c8:06:3f:38:74:32:ee:f8:9e:3e:b8:45:
         07:67:49:a0:ba:69:e4:d0:9d:05:59:51:80:38:c1:f6:03:a5:
         70:0d:dd:1a:d9:76:3a:f5:26:a7:69:2e:e1:7f:92:d3:d3:5f:
         23:f3:03:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:01 2024 by rpki-client on console-fra.rpki-client.org