Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQNWaGBLkLHnCh65yNU3J4T13qDV1RJJhqxHjHC8TB25/0/323830343a376138343a3a2f33322d3336203d3e20323731333736.roa
File:                     323830343a376138343a3a2f33322d3336203d3e20323731333736.roa (raw, json)
Hash identifier:          lfVa6mvVnaydIKkWdtcV3wbosjOjIffyNIlVAKYpG/M=
Subject key identifier:   14:71:93:70:EC:59:79:60:12:CB:EE:DD:A0:56:03:0E:9D:54:17:F1
Certificate issuer:       /CN=A3EF7086C3F6DD56ACE7C8596F89BC53DA075EA5
Certificate serial:       128D149FEF8381CCE44F23A53A4599E73E147AF7
Authority key identifier: A3:EF:70:86:C3:F6:DD:56:AC:E7:C8:59:6F:89:BC:53:DA:07:5E:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3EF7086C3F6DD56ACE7C8596F89BC53DA075EA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQNWaGBLkLHnCh65yNU3J4T13qDV1RJJhqxHjHC8TB25/0/323830343a376138343a3a2f33322d3336203d3e20323731333736.roa
Signing time:             Tue 03 Oct 2023 12:38:43 +0000
ROA not before:           Tue 03 Oct 2023 12:33:43 +0000
ROA not after:            Tue 01 Oct 2024 12:38:43 +0000
asID:                     271376
IP address blocks:        2804:7a84::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:8d:14:9f:ef:83:81:cc:e4:4f:23:a5:3a:45:99:e7:3e:14:7a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3EF7086C3F6DD56ACE7C8596F89BC53DA075EA5
        Validity
            Not Before: Oct  3 12:33:43 2023 GMT
            Not After : Oct  1 12:38:43 2024 GMT
        Subject: CN=14719370EC59796012CBEEDDA056030E9D5417F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:51:d5:1e:c8:d6:c4:44:f8:c1:9e:0f:6f:12:
                    19:9d:7b:d9:16:88:e3:f6:51:c2:cb:9b:5f:84:ae:
                    39:b5:61:44:58:01:b8:2d:c2:22:c9:a9:56:3b:7c:
                    b3:4a:57:23:07:96:73:7d:6a:ed:34:12:08:0c:a3:
                    c6:a6:26:07:5b:50:70:0a:77:be:3a:97:41:2a:7b:
                    cb:94:29:a2:75:96:31:51:b5:b2:dd:a7:1c:f3:f9:
                    78:90:a6:a0:dc:d2:0c:30:6d:37:ea:c5:e5:cf:b5:
                    23:c4:d3:a1:a1:22:4c:e8:13:73:a0:5e:f1:26:bd:
                    a0:64:52:b9:8e:d4:30:0d:9a:44:c2:75:b1:e3:85:
                    24:4e:ed:34:9e:30:33:48:11:bb:b9:dc:cd:cc:d4:
                    61:49:ac:5f:b3:2f:a3:85:a6:4c:3a:8b:a5:32:4c:
                    2d:95:69:c5:dc:ca:0f:3a:ab:8e:ff:63:15:31:6a:
                    a6:78:c9:b9:ed:6e:68:d5:40:42:5a:02:0c:63:7b:
                    7a:44:1b:fc:f2:ed:e7:79:35:d7:41:3a:f8:41:23:
                    3b:0f:7e:e5:cb:c5:f4:c8:03:86:c4:8c:6e:62:9e:
                    3b:ac:44:75:70:3b:e6:4f:4e:95:17:05:87:30:a0:
                    eb:f9:63:b4:e3:cb:a1:e2:b5:ce:c0:ac:60:28:8a:
                    2b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:71:93:70:EC:59:79:60:12:CB:EE:DD:A0:56:03:0E:9D:54:17:F1
            X509v3 Authority Key Identifier:
                keyid:A3:EF:70:86:C3:F6:DD:56:AC:E7:C8:59:6F:89:BC:53:DA:07:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQNWaGBLkLHnCh65yNU3J4T13qDV1RJJhqxHjHC8TB25/0/A3EF7086C3F6DD56ACE7C8596F89BC53DA075EA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3EF7086C3F6DD56ACE7C8596F89BC53DA075EA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQNWaGBLkLHnCh65yNU3J4T13qDV1RJJhqxHjHC8TB25/0/323830343a376138343a3a2f33322d3336203d3e20323731333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a84::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:e4:e7:ae:6a:e4:fc:c2:68:ae:d1:8b:24:e0:ce:92:36:29:
         b4:63:a0:57:04:5e:a9:4c:e3:06:8f:e6:dc:dd:3d:0f:f0:d1:
         14:80:f5:26:dd:47:e9:13:d2:71:39:41:18:31:66:c7:dd:ef:
         5c:40:2a:ad:27:47:d3:3a:08:41:a3:62:cf:ec:14:73:d2:ad:
         a9:1f:76:dd:df:1d:fb:2a:a5:27:eb:33:45:f7:3b:e2:cf:0b:
         f3:94:a0:6b:6b:3e:8c:bd:f6:2b:2f:25:70:37:e1:1b:99:2d:
         48:af:f0:df:dc:d9:f9:aa:48:dd:74:32:d6:93:4d:a0:3f:57:
         43:91:db:11:a4:3e:c8:91:56:15:74:40:6e:67:d9:ed:9a:4a:
         fb:0d:e7:3c:29:3f:f1:91:45:da:f1:52:b6:37:6d:21:48:d9:
         6c:31:3e:42:38:f2:56:38:29:22:8d:5e:3b:e4:13:0b:d7:83:
         43:38:4b:2f:a4:62:5f:da:22:d9:70:aa:06:99:13:cc:c0:90:
         82:c7:34:ab:3c:50:e0:3c:57:91:18:c0:7a:0d:b0:28:9a:cb:
         28:f7:d9:10:b5:9d:ed:ba:23:ab:d2:66:6a:df:55:11:88:a7:
         9e:fe:5b:03:0a:15:76:fc:1f:aa:c5:da:5a:0f:c9:fd:25:db:
         55:cc:a7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org