Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a3a2f33322d3332203d3e20323731353034.roa
File:                     323830343a376339303a3a2f33322d3332203d3e20323731353034.roa (raw, json)
Hash identifier:          Eyo3rCR+522C5YV4c5UyegM6Sad5XeZBffoB8iHawAk=
Subject key identifier:   2F:72:EC:EF:2C:81:3D:05:A9:4F:84:C5:18:4A:56:9C:A0:C3:05:FF
Certificate issuer:       /CN=10872CEC6BBF53B1A7F684D9A661A8978564FE7D
Certificate serial:       1EDB84C3F68771F104091AE3DADF14081F41058E
Authority key identifier: 10:87:2C:EC:6B:BF:53:B1:A7:F6:84:D9:A6:61:A8:97:85:64:FE:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10872CEC6BBF53B1A7F684D9A661A8978564FE7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a3a2f33322d3332203d3e20323731353034.roa
Signing time:             Tue 12 Mar 2024 08:08:52 +0000
ROA not before:           Tue 12 Mar 2024 08:03:52 +0000
ROA not after:            Tue 11 Mar 2025 08:08:52 +0000
asID:                     271504
IP address blocks:        2804:7c90::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:db:84:c3:f6:87:71:f1:04:09:1a:e3:da:df:14:08:1f:41:05:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10872CEC6BBF53B1A7F684D9A661A8978564FE7D
        Validity
            Not Before: Mar 12 08:03:52 2024 GMT
            Not After : Mar 11 08:08:52 2025 GMT
        Subject: CN=2F72ECEF2C813D05A94F84C5184A569CA0C305FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:89:b8:cd:3f:04:aa:9f:80:6f:05:cf:f6:ed:
                    e6:58:97:7f:c6:52:85:9c:b6:db:e2:5d:a8:d9:8b:
                    cb:d2:eb:2c:0a:6a:d7:a4:9f:de:55:ad:fc:db:e6:
                    d1:ff:d2:a4:27:51:53:88:c7:3d:bb:09:de:8a:c2:
                    df:ac:f0:7c:d5:a1:37:bd:14:f4:fd:9f:90:91:b5:
                    62:55:85:ad:e7:f2:f3:6d:da:88:a5:86:4b:02:fd:
                    3d:47:46:5c:12:5a:0d:f2:22:aa:0e:d3:f6:8c:47:
                    f5:e3:84:1e:c2:74:2d:0c:6d:96:7a:46:cf:f4:5e:
                    e3:ce:66:8f:ce:c2:82:02:39:55:18:48:bc:ac:e1:
                    3b:6f:28:72:d6:c9:88:60:e9:2a:0d:4c:ea:87:ab:
                    a4:fb:9a:a0:fd:86:3d:4b:1d:1f:a1:ab:59:e8:e6:
                    cd:6b:0d:aa:03:6e:e8:42:3b:c0:26:44:a5:06:90:
                    69:83:63:2a:f5:2c:59:9d:22:1e:a6:1c:a4:51:9d:
                    6e:9f:c0:19:b6:31:43:45:d6:a3:89:fd:09:3d:68:
                    91:cf:b0:5e:e9:58:f8:25:8c:d4:73:9f:ab:af:83:
                    af:61:2a:a5:66:13:10:33:b3:e7:8f:55:6e:c1:13:
                    1f:83:92:95:93:42:64:33:2c:c0:88:c7:e3:9d:9d:
                    81:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:72:EC:EF:2C:81:3D:05:A9:4F:84:C5:18:4A:56:9C:A0:C3:05:FF
            X509v3 Authority Key Identifier:
                keyid:10:87:2C:EC:6B:BF:53:B1:A7:F6:84:D9:A6:61:A8:97:85:64:FE:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/10872CEC6BBF53B1A7F684D9A661A8978564FE7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10872CEC6BBF53B1A7F684D9A661A8978564FE7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a3a2f33322d3332203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c90::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:6e:3a:d2:2d:6c:f1:1b:62:04:5f:b8:25:00:35:da:e6:a0:
         0f:9c:1f:86:bc:2e:45:7c:48:66:56:84:2a:14:fa:c2:4e:07:
         76:a7:58:53:7e:e0:5b:9a:47:b9:4c:9f:97:bc:a2:55:9e:3a:
         9b:4b:81:2d:93:5b:a2:6a:df:f5:27:b4:b1:ce:be:03:d6:d8:
         3d:d8:41:10:45:0d:ed:5e:c7:80:16:fd:ad:37:0d:1b:13:6e:
         b6:1f:eb:47:c1:a1:24:33:f9:7e:aa:fa:3a:0b:d5:c2:c1:ea:
         0b:ca:d6:08:f8:4f:40:49:df:8f:56:f2:48:e7:0b:8e:6e:1c:
         cf:88:28:cf:fd:da:4e:7f:cf:8a:2e:0f:e1:b0:de:0c:b1:2b:
         fd:3e:3a:95:00:ce:4a:82:28:9b:76:9f:1a:02:d8:cc:a5:40:
         35:60:c1:01:70:9d:c1:c6:66:b8:57:9f:01:d1:22:a1:95:06:
         9a:15:2c:76:c3:34:32:57:22:68:a6:d5:36:4f:41:d5:cb:f2:
         7a:3f:b0:5b:56:96:e7:9f:87:58:f3:ca:80:e2:7a:51:ab:dd:
         b9:48:b9:62:a9:ee:b8:63:e1:3d:2e:5b:71:64:7d:5c:39:ca:
         25:93:1e:aa:7f:f7:55:88:84:6a:06:ad:c3:a8:5f:20:38:72:
         59:df:3e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org