Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a3a2f33332d3333203d3e20323731353034.roa
File:                     323830343a376339303a3a2f33332d3333203d3e20323731353034.roa (raw, json)
Hash identifier:          FbHDAxiOl4IGQk/ay+reQdMQUCOLebS2quHoaeGsdKw=
Subject key identifier:   7A:A4:79:0C:70:94:AF:56:1A:2C:4E:94:C1:E3:DD:34:40:AA:C5:37
Certificate issuer:       /CN=10872CEC6BBF53B1A7F684D9A661A8978564FE7D
Certificate serial:       5A88DD3AD053A7987C622F86A2D04A0E2A4D3B03
Authority key identifier: 10:87:2C:EC:6B:BF:53:B1:A7:F6:84:D9:A6:61:A8:97:85:64:FE:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10872CEC6BBF53B1A7F684D9A661A8978564FE7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a3a2f33332d3333203d3e20323731353034.roa
Signing time:             Tue 12 Mar 2024 08:08:51 +0000
ROA not before:           Tue 12 Mar 2024 08:03:51 +0000
ROA not after:            Tue 11 Mar 2025 08:08:51 +0000
asID:                     271504
IP address blocks:        2804:7c90::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:88:dd:3a:d0:53:a7:98:7c:62:2f:86:a2:d0:4a:0e:2a:4d:3b:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10872CEC6BBF53B1A7F684D9A661A8978564FE7D
        Validity
            Not Before: Mar 12 08:03:51 2024 GMT
            Not After : Mar 11 08:08:51 2025 GMT
        Subject: CN=7AA4790C7094AF561A2C4E94C1E3DD3440AAC537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c8:6d:c8:5c:10:db:5b:df:da:23:ab:95:0a:
                    20:0d:af:23:5d:16:ff:76:98:92:28:1a:f9:21:8e:
                    91:b3:24:1c:56:93:02:f0:42:a5:95:b4:a1:99:f7:
                    15:9a:bc:4a:77:3a:ac:32:1e:f2:3f:31:a3:f6:73:
                    87:eb:bd:b8:78:7f:cc:56:25:b6:52:a2:c8:17:70:
                    3b:84:9e:85:09:21:5d:31:60:25:83:e4:b7:4c:3b:
                    fa:36:78:09:62:82:e7:df:e2:e1:08:50:08:ba:8b:
                    65:d0:e5:c0:71:b5:dc:5e:85:e9:fe:f3:51:f4:13:
                    5a:2b:6d:47:66:41:7a:1a:0d:37:65:38:e7:1c:cc:
                    89:ab:4a:f4:98:c4:2a:59:53:14:1a:e6:53:d4:bf:
                    3b:1f:d2:f4:9a:7c:95:6a:4a:4a:6b:2c:32:1c:e2:
                    74:05:a4:3e:6f:7e:7b:9b:33:f1:da:bc:3a:b3:60:
                    c5:7b:32:39:fe:74:13:04:1b:0e:a5:c0:b0:7f:c7:
                    bc:20:86:0d:0c:26:07:62:1a:89:94:31:ee:51:92:
                    59:de:3a:6a:87:69:6f:7e:55:92:8a:a5:57:e1:42:
                    59:15:e7:1f:bd:47:89:86:92:c8:dc:f5:c3:cc:90:
                    19:70:cf:74:a4:5d:0b:84:e3:b5:55:c3:e9:fd:9a:
                    09:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A4:79:0C:70:94:AF:56:1A:2C:4E:94:C1:E3:DD:34:40:AA:C5:37
            X509v3 Authority Key Identifier:
                keyid:10:87:2C:EC:6B:BF:53:B1:A7:F6:84:D9:A6:61:A8:97:85:64:FE:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/10872CEC6BBF53B1A7F684D9A661A8978564FE7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10872CEC6BBF53B1A7F684D9A661A8978564FE7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a3a2f33332d3333203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c90::/33

    Signature Algorithm: sha256WithRSAEncryption
         28:da:79:1b:17:77:14:7a:d4:bb:8a:c0:a1:01:15:b0:4b:e9:
         d2:ae:63:7b:b7:93:54:c6:75:60:ae:7d:89:02:3f:6b:c7:e5:
         4a:50:1e:f6:3c:6a:3a:9c:70:cd:72:2a:6f:db:b9:fd:53:cb:
         86:dd:2a:6d:ee:4a:d5:34:71:91:91:d9:ed:b1:da:1d:6a:8f:
         0d:03:4f:51:d5:ca:e9:bd:8b:4b:8f:a9:aa:6f:86:b3:78:ba:
         78:9f:82:3e:ff:b0:5c:a6:4b:e7:9b:96:6b:7b:90:e9:0e:17:
         bd:15:4c:f1:61:43:25:3c:16:c5:1b:b8:a0:ee:d6:9b:15:38:
         40:0f:be:7f:a8:0d:14:18:82:2a:dc:bb:78:79:20:c0:70:50:
         29:20:d4:38:61:d6:94:ce:9f:47:ce:58:a0:72:37:8e:53:39:
         d6:3d:fc:b8:03:91:da:17:5d:0d:5e:c4:81:ee:ff:37:a4:5b:
         8d:5d:e5:a3:cb:23:b0:5d:4f:db:ea:76:56:9a:dd:08:ee:d5:
         3f:1a:54:86:41:96:cb:ff:cf:f0:0a:93:e7:86:80:1a:c3:8a:
         7a:45:22:47:5d:2c:8f:e9:49:99:06:14:0e:99:5b:9b:95:e1:
         16:73:fc:36:ce:b9:76:c7:06:66:43:d6:b3:d6:2e:5e:c4:fa:
         96:97:1a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org