Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/323830343a363339633a633030303a3a2f33342d3334203d3e20323639333732.roa
File:                     323830343a363339633a633030303a3a2f33342d3334203d3e20323639333732.roa (raw, json)
Hash identifier:          yaefXwDZN4t98adgnmq0ujC3XYQebYHwD68n3C3QErk=
Subject key identifier:   C2:4D:FF:83:8A:9D:91:1E:30:10:30:3D:20:EB:AB:13:BE:8A:35:D2
Certificate issuer:       /CN=A3948DF92873B3152952F292409AE5A8EE92371C
Certificate serial:       63296BB726FEDA208D7E67E865CE581744E81705
Authority key identifier: A3:94:8D:F9:28:73:B3:15:29:52:F2:92:40:9A:E5:A8:EE:92:37:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3948DF92873B3152952F292409AE5A8EE92371C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/323830343a363339633a633030303a3a2f33342d3334203d3e20323639333732.roa
Signing time:             Wed 26 Apr 2023 19:09:46 +0000
ROA not before:           Wed 26 Apr 2023 19:04:46 +0000
ROA not after:            Wed 24 Apr 2024 19:09:46 +0000
asID:                     269372
IP address blocks:        2804:639c:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:29:6b:b7:26:fe:da:20:8d:7e:67:e8:65:ce:58:17:44:e8:17:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3948DF92873B3152952F292409AE5A8EE92371C
        Validity
            Not Before: Apr 26 19:04:46 2023 GMT
            Not After : Apr 24 19:09:46 2024 GMT
        Subject: CN=C24DFF838A9D911E3010303D20EBAB13BE8A35D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0c:c9:9f:1d:6c:8f:fc:4d:e9:b2:d7:d6:95:
                    e1:9c:e3:0d:89:1b:98:fc:2a:b0:a5:3d:c4:07:4e:
                    93:c7:6a:8c:0c:2f:93:b7:74:0f:0c:2f:99:6a:13:
                    c1:99:20:02:1d:16:fb:5f:25:85:75:2b:a3:56:4b:
                    a5:cc:12:83:96:8f:ce:14:1e:25:cd:df:2b:d4:82:
                    35:fb:e1:14:e8:e3:29:9d:b7:64:62:33:2e:c9:64:
                    a9:0d:5a:6f:79:cb:e4:eb:af:a6:e4:e2:2a:ac:ce:
                    1b:68:5b:83:72:08:e5:8d:7c:a0:01:35:e0:d3:09:
                    0c:ff:7e:64:a0:a1:2f:0d:79:67:52:c7:13:25:0c:
                    3e:de:c9:c5:61:c7:73:a7:56:86:05:f2:7a:42:41:
                    e7:9e:c6:72:e0:c5:30:b7:d1:24:17:e0:83:7f:3f:
                    9a:51:4a:48:84:94:67:06:2d:a0:a4:4b:ad:c1:17:
                    13:e2:1c:04:26:43:32:cb:08:77:87:a5:52:e2:e6:
                    e6:63:97:0a:3e:ca:17:2e:c0:aa:55:03:09:82:f8:
                    86:87:2b:ed:55:d8:ca:71:ae:d9:bd:d7:75:53:28:
                    e6:e5:d9:d7:c2:a8:60:9c:48:28:f7:87:f6:92:75:
                    1e:df:72:89:f8:6e:e9:ed:b6:01:85:7b:2c:1e:6c:
                    6f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4D:FF:83:8A:9D:91:1E:30:10:30:3D:20:EB:AB:13:BE:8A:35:D2
            X509v3 Authority Key Identifier:
                keyid:A3:94:8D:F9:28:73:B3:15:29:52:F2:92:40:9A:E5:A8:EE:92:37:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/A3948DF92873B3152952F292409AE5A8EE92371C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3948DF92873B3152952F292409AE5A8EE92371C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/323830343a363339633a633030303a3a2f33342d3334203d3e20323639333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:639c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         45:1e:3a:ee:ae:85:60:5b:cb:83:1e:db:a5:9d:04:88:0c:b7:
         56:5c:6b:74:b4:eb:4d:7f:2f:e9:8b:7c:4c:56:72:6a:53:9c:
         a2:f9:23:d6:ca:96:61:0f:be:8f:28:21:50:f7:d5:b1:66:8d:
         53:04:e5:c6:81:1f:71:90:c2:f3:71:ba:fd:27:41:24:e6:03:
         48:ac:a2:cc:e7:d3:29:35:55:89:2d:de:93:87:f5:49:a5:6e:
         bb:de:55:9d:07:9c:57:5c:a1:f4:2a:66:d1:6b:5e:c9:fc:8c:
         17:1b:2d:70:39:01:73:7d:53:10:69:66:f5:a7:6a:90:5b:b7:
         27:0e:c1:3d:4a:6e:ee:4f:96:93:f4:49:6d:d8:34:84:6d:46:
         1e:8f:3e:a3:85:89:96:29:67:66:a0:f3:dc:2e:42:88:0b:42:
         70:2e:67:28:a5:bf:d7:b4:49:80:f6:9c:6d:08:94:ca:d2:90:
         81:2b:6a:7e:c9:da:00:47:5d:a2:30:93:56:f9:1f:58:07:47:
         a8:e3:99:86:df:bc:7c:af:8c:3c:9b:66:d9:14:76:88:94:1a:
         3d:91:d0:90:d7:a3:4e:fd:21:d4:7e:d7:d7:33:11:ca:b7:70:
         f9:05:00:09:40:67:9c:4a:d9:ca:f9:f5:3e:04:35:a0:fa:3a:
         0f:e5:f8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:33 2024 by rpki-client on console-fra.rpki-client.org