Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a3a2f33352d3335203d3e20323733363036.roa
File:                     323830343a383937383a3a2f33352d3335203d3e20323733363036.roa (raw, json)
Hash identifier:          jsJGq7Je4wnPnlYh6S7RSwn94Z8ywQLOGBwvELU5unk=
Subject key identifier:   8E:76:78:4E:E3:ED:CB:64:EC:F8:D8:4F:A1:4C:72:F7:74:7C:DC:B3
Certificate issuer:       /CN=AF57D8ABF92B4526A323E0F5712CC22330A693BB
Certificate serial:       7DA25C1326A0C1CCFF3E1E08149A24EB8338DF32
Authority key identifier: AF:57:D8:AB:F9:2B:45:26:A3:23:E0:F5:71:2C:C2:23:30:A6:93:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a3a2f33352d3335203d3e20323733363036.roa
Signing time:             Sat 24 Feb 2024 03:41:54 +0000
ROA not before:           Sat 24 Feb 2024 03:36:54 +0000
ROA not after:            Sat 22 Feb 2025 03:41:54 +0000
asID:                     273606
IP address blocks:        2804:8978::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a2:5c:13:26:a0:c1:cc:ff:3e:1e:08:14:9a:24:eb:83:38:df:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF57D8ABF92B4526A323E0F5712CC22330A693BB
        Validity
            Not Before: Feb 24 03:36:54 2024 GMT
            Not After : Feb 22 03:41:54 2025 GMT
        Subject: CN=8E76784EE3EDCB64ECF8D84FA14C72F7747CDCB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ad:42:30:29:d1:0b:54:e8:7a:a0:01:9a:69:
                    8e:25:a8:39:93:b3:24:82:a9:0c:9e:34:ff:1d:fd:
                    93:91:c5:f3:49:72:2e:23:20:03:2c:e5:13:b2:0b:
                    04:f9:88:d6:32:da:07:20:9c:9b:ab:5f:f1:b0:28:
                    c9:f0:3f:4a:99:98:2c:b1:10:7b:40:3f:6b:ca:80:
                    56:21:9c:b7:80:d0:2c:5d:56:73:24:bb:27:19:9c:
                    6d:d1:4f:3c:0b:42:c8:19:33:bc:c5:75:2c:66:97:
                    27:fc:63:2a:38:09:9d:5f:f9:1f:28:4d:a3:c0:9b:
                    ec:93:1f:bc:2d:2b:7d:62:10:1a:28:69:b5:02:dc:
                    1a:b2:50:b8:95:2c:1e:c3:7f:f0:cf:56:00:de:e4:
                    11:5e:26:30:f6:70:01:ff:87:75:d3:8e:60:66:bd:
                    69:0b:10:c8:45:14:ff:c4:07:7c:a8:46:ac:2b:cb:
                    18:84:8a:91:e6:d4:5f:f0:92:d3:e8:f1:ad:bc:27:
                    4b:bd:4a:16:45:5c:c1:57:a3:06:56:59:59:e9:30:
                    ef:51:1b:ad:60:ff:07:1f:db:a6:d4:99:b0:69:e5:
                    f3:0e:74:a3:ab:7d:eb:9b:7b:31:33:a1:3b:90:3d:
                    a4:f8:b0:85:2f:41:43:c4:41:2d:b3:b6:94:5f:8a:
                    c0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:76:78:4E:E3:ED:CB:64:EC:F8:D8:4F:A1:4C:72:F7:74:7C:DC:B3
            X509v3 Authority Key Identifier:
                keyid:AF:57:D8:AB:F9:2B:45:26:A3:23:E0:F5:71:2C:C2:23:30:A6:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a3a2f33352d3335203d3e20323733363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8978::/35

    Signature Algorithm: sha256WithRSAEncryption
         45:50:53:2a:f6:69:9f:3e:a9:86:13:21:3a:39:a9:fe:f6:f1:
         66:d1:07:ce:47:7b:e5:1b:60:b5:34:e0:cd:4d:6d:c5:bd:b9:
         8b:58:db:8d:b2:3b:2e:e0:77:f8:94:92:5d:58:ea:04:3b:f5:
         9a:b5:46:b5:c6:42:df:d2:bb:c5:e1:68:68:0b:93:f1:1b:3b:
         9d:ca:af:6a:bd:ac:a2:c7:80:b8:c5:17:73:f4:66:4c:e9:83:
         d4:12:da:bb:bb:c2:aa:7d:0d:b1:b9:c5:04:f9:86:00:bc:d2:
         5e:de:30:f4:96:ad:2c:7c:48:df:f1:29:a3:94:5f:84:ce:30:
         7c:d6:0e:13:2c:d6:e6:24:90:87:06:03:34:46:69:c6:6b:bb:
         ff:f7:c9:62:1f:24:fa:ca:39:1a:99:68:a0:b0:72:55:43:90:
         6d:de:08:ef:5c:49:2d:a4:ab:48:82:96:51:57:2a:ed:59:d3:
         85:45:b8:12:9c:c6:90:5f:cb:73:3b:a3:fb:e1:5b:77:d2:1c:
         6a:2c:28:2a:c9:8d:42:c4:a1:26:76:78:43:31:5d:73:2a:65:
         18:dd:bd:9c:8b:45:b7:3d:bd:67:bc:84:d4:b0:25:c6:ed:0d:
         9f:7f:54:ed:ef:ca:cc:8f:60:d6:25:5f:2a:0b:8e:dd:96:a8:
         bd:cc:27:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org