Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3a2f33332d3333203d3e20323635313837.roa
File:                     323830343a326330303a3a2f33332d3333203d3e20323635313837.roa (raw, json)
Hash identifier:          veUgLtxKk4IHnN7ea0cN97ryxrZfjv94mp6i4rQJKW4=
Subject key identifier:   8B:94:54:BC:FF:23:E4:7B:40:01:37:B2:2B:0C:59:32:44:A9:79:5E
Certificate issuer:       /CN=81175370221E26181F39FB407E63064DEB20E6EE
Certificate serial:       3ED8BA9ADB080211EFE6D9805063DDA8FBA26A88
Authority key identifier: 81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3a2f33332d3333203d3e20323635313837.roa
Signing time:             Fri 28 Jul 2023 01:00:00 +0000
ROA not before:           Fri 28 Jul 2023 00:55:00 +0000
ROA not after:            Fri 26 Jul 2024 01:00:00 +0000
asID:                     265187
IP address blocks:        2804:2c00::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d8:ba:9a:db:08:02:11:ef:e6:d9:80:50:63:dd:a8:fb:a2:6a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81175370221E26181F39FB407E63064DEB20E6EE
        Validity
            Not Before: Jul 28 00:55:00 2023 GMT
            Not After : Jul 26 01:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7d:dc:0a:10:72:1e:d2:90:2e:9f:b2:8c:d5:
                    d5:93:de:99:8c:31:9d:cd:f7:27:3f:04:cc:98:95:
                    82:a9:83:53:00:5a:97:a1:48:82:98:7b:43:a3:1b:
                    ae:cd:36:46:15:bb:35:b3:46:a0:fd:1d:33:de:77:
                    b6:1f:24:71:fb:87:c8:14:12:05:55:58:07:08:48:
                    4b:42:aa:2c:1d:81:b3:6c:a0:fa:94:17:1f:cd:d1:
                    a4:bd:a3:1b:ff:33:84:52:4c:a7:59:b3:38:f8:01:
                    9e:55:60:e6:9d:4f:b4:bc:9e:76:1e:43:ee:2a:76:
                    75:f3:15:9a:7a:20:d6:4f:96:6c:df:3f:fe:62:2a:
                    00:ce:11:da:39:ab:81:52:61:bf:da:91:5f:c8:27:
                    ca:6c:d9:64:51:1f:66:95:90:7d:c3:7b:c4:27:e1:
                    13:8f:dd:40:8e:7a:d9:0e:4d:a4:b7:fe:19:36:6c:
                    85:dd:01:67:88:f2:09:35:c3:4b:11:92:58:80:59:
                    e0:5a:b1:65:a7:1e:d9:80:de:f7:27:49:98:9d:10:
                    c9:0c:3d:3d:d9:37:20:0a:78:8b:42:f0:63:7e:12:
                    9e:3e:09:08:68:33:da:aa:24:b0:4b:03:ec:7b:7c:
                    a0:52:e0:17:ea:35:44:08:b8:ec:c2:b0:79:71:07:
                    17:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:94:54:BC:FF:23:E4:7B:40:01:37:B2:2B:0C:59:32:44:A9:79:5E
            X509v3 Authority Key Identifier:
                keyid:81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/81175370221E26181F39FB407E63064DEB20E6EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3a2f33332d3333203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c00::/33

    Signature Algorithm: sha256WithRSAEncryption
         b1:f4:91:2d:8a:0f:f3:07:a5:33:7f:c0:23:7d:24:91:d2:c2:
         88:98:d7:69:86:d6:4d:4e:41:79:55:d4:70:15:f1:35:c2:ae:
         42:35:42:2b:b8:1e:87:0c:53:ba:83:08:ee:fc:70:e2:b7:2c:
         47:e6:bb:08:6e:35:0b:d2:77:af:4a:b6:b4:a9:56:2f:7c:de:
         16:0d:4b:89:aa:4b:a4:fa:3c:4c:41:5f:62:d0:8d:2b:2b:d7:
         a1:e7:66:bf:19:ad:92:f4:a2:ea:8a:3c:58:05:25:f1:7c:c2:
         f1:31:81:45:e6:d2:dd:cc:a3:12:05:55:5e:62:ea:3e:1e:77:
         8f:a4:4a:c2:87:f4:3e:c8:51:38:ea:c0:ed:70:e0:80:8d:bd:
         01:10:2d:a9:2d:e9:07:0a:3b:27:d3:bb:8a:76:d0:59:1a:8c:
         bc:39:19:3c:69:40:f2:f2:21:97:b8:f8:95:af:85:e6:cc:76:
         05:05:ad:01:fd:60:84:d6:dd:98:40:75:c3:74:0d:53:77:ec:
         be:f6:5d:f7:85:dd:3b:cc:58:fe:e2:57:fa:d1:4d:1e:6c:53:
         f0:68:dc:dc:c7:e6:46:f5:80:0d:e9:9f:ca:67:32:cc:49:ef:
         03:8e:f0:48:99:98:ca:99:a6:ef:2c:16:99:cc:35:89:5b:28:
         8f:6f:7e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:01 2024 by rpki-client on console-fra.rpki-client.org