Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DabpVK4ptvKPrV5ZUA6GrrS1NBZ1omtagugy7kj6H6jQ/0/323830343a353534383a3a2f33332d3333203d3e20323638373030.roa
File:                     323830343a353534383a3a2f33332d3333203d3e20323638373030.roa (raw, json)
Hash identifier:          vzyVz0nwuL/HU2AOPJRZ11DySKxVdi6p8bXpXoXDiI4=
Subject key identifier:   C0:4B:1F:40:8A:5C:3D:8A:13:5B:B9:A9:DB:F8:55:D5:32:12:1E:9F
Certificate issuer:       /CN=074E7C5399BF0B4BA92B7F57D419D9A3D05F05F1
Certificate serial:       3CCB8DBDBD37771B045763300615BD3C6A24E69A
Authority key identifier: 07:4E:7C:53:99:BF:0B:4B:A9:2B:7F:57:D4:19:D9:A3:D0:5F:05:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/074E7C5399BF0B4BA92B7F57D419D9A3D05F05F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DabpVK4ptvKPrV5ZUA6GrrS1NBZ1omtagugy7kj6H6jQ/0/323830343a353534383a3a2f33332d3333203d3e20323638373030.roa
Signing time:             Fri 12 Apr 2024 18:00:00 +0000
ROA not before:           Fri 12 Apr 2024 17:55:00 +0000
ROA not after:            Fri 11 Apr 2025 18:00:00 +0000
asID:                     268700
IP address blocks:        2804:5548::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:cb:8d:bd:bd:37:77:1b:04:57:63:30:06:15:bd:3c:6a:24:e6:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=074E7C5399BF0B4BA92B7F57D419D9A3D05F05F1
        Validity
            Not Before: Apr 12 17:55:00 2024 GMT
            Not After : Apr 11 18:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:60:39:3c:10:33:ee:ec:fb:00:d8:01:01:71:
                    92:5b:20:1b:e8:d9:f6:c1:13:78:ac:c1:1e:5b:99:
                    1a:77:06:cd:a1:f5:84:6c:a8:2a:99:53:eb:f6:7c:
                    21:c0:7c:1d:fa:ff:07:c3:7f:6e:ea:c5:df:f3:0d:
                    d2:43:9a:cc:1d:94:35:83:98:96:91:08:74:30:07:
                    7e:91:f4:8d:db:fd:b6:05:fd:6b:cf:7a:e3:64:94:
                    75:a7:b3:9c:42:30:37:59:2c:25:18:68:64:5a:1c:
                    0d:34:d4:8e:9e:d0:dd:4e:7a:99:87:c3:3e:e1:cb:
                    93:35:77:28:d9:f3:e8:fc:22:44:89:b2:42:c5:79:
                    bb:26:23:84:98:95:fa:4c:d9:e3:d9:b2:1f:7b:2d:
                    33:b6:30:55:84:f1:89:e1:08:ac:5c:07:bd:ec:91:
                    47:00:98:3d:f7:9d:ca:4b:59:d7:02:dd:cb:39:7d:
                    ed:16:83:07:0c:f3:e3:6c:61:6a:bf:7e:24:09:21:
                    5b:f8:36:dd:49:30:d4:b3:01:45:bc:5d:e9:c2:6d:
                    9d:f6:24:e0:25:9f:f6:b5:39:f2:d3:50:1d:a8:37:
                    fa:72:f9:58:bb:f8:07:64:01:9d:58:c8:d6:d3:be:
                    ba:87:cd:72:5c:67:ee:89:90:8a:79:c3:3c:77:c3:
                    4c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:4B:1F:40:8A:5C:3D:8A:13:5B:B9:A9:DB:F8:55:D5:32:12:1E:9F
            X509v3 Authority Key Identifier:
                keyid:07:4E:7C:53:99:BF:0B:4B:A9:2B:7F:57:D4:19:D9:A3:D0:5F:05:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DabpVK4ptvKPrV5ZUA6GrrS1NBZ1omtagugy7kj6H6jQ/0/074E7C5399BF0B4BA92B7F57D419D9A3D05F05F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/074E7C5399BF0B4BA92B7F57D419D9A3D05F05F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DabpVK4ptvKPrV5ZUA6GrrS1NBZ1omtagugy7kj6H6jQ/0/323830343a353534383a3a2f33332d3333203d3e20323638373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5548::/33

    Signature Algorithm: sha256WithRSAEncryption
         2e:ee:0d:7a:11:85:3c:b5:19:99:c1:00:15:a1:14:2e:cb:6d:
         34:a2:ed:1b:ac:38:cc:18:d0:6e:bc:bd:cc:0c:24:41:cc:35:
         42:50:84:73:1f:74:2e:1d:95:af:08:f1:d8:8a:48:39:f7:07:
         1c:ba:49:13:42:e1:7a:f8:99:0d:36:5e:4c:3a:02:bb:5f:99:
         00:e3:cd:46:4b:96:a0:e1:94:f1:3e:6b:23:4d:bc:94:6e:62:
         ec:5a:fe:44:b4:c3:46:8f:e0:a2:2f:c1:e7:fe:d7:c6:d9:80:
         5c:fb:ae:9a:5f:d4:94:79:71:61:d5:94:7f:94:e1:1c:b4:09:
         ed:9a:80:15:a4:7f:f3:71:13:2d:01:05:cc:ca:11:84:17:b6:
         75:cc:68:1a:c8:95:65:d0:50:5a:21:49:73:b4:de:a3:30:ea:
         f5:a0:b1:4a:a9:5d:2b:98:bd:ff:31:63:5f:98:33:e2:06:44:
         a2:f0:b9:31:b1:d8:7e:81:f5:ba:c9:81:30:b7:b2:4c:2a:42:
         80:ce:9e:02:46:8d:28:c8:d2:d4:07:08:26:0b:ee:46:ef:e8:
         49:c5:39:e3:79:36:44:22:6a:ce:f1:f2:77:fb:ca:b1:bf:7b:
         36:f9:c2:6b:f4:fb:3c:91:64:35:29:06:d1:c6:b3:a1:3a:c0:
         98:d2:8e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org