Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/323830343a326231303a313030303a3a2f33372d3337203d3e203532393136.roa
File:                     323830343a326231303a313030303a3a2f33372d3337203d3e203532393136.roa (raw, json)
Hash identifier:          QbUNagdGxWF2G7kjXghgAsRIUzUsfM776EEOFh8ULjA=
Subject key identifier:   C9:08:E9:65:EF:58:9F:09:8B:A4:E1:F9:F0:F6:33:66:99:14:9F:2A
Certificate issuer:       /CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
Certificate serial:       3C7A024895695EA44A5634C6C67297840F8B1E9B
Authority key identifier: D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/323830343a326231303a313030303a3a2f33372d3337203d3e203532393136.roa
Signing time:             Fri 24 Nov 2023 19:42:45 +0000
ROA not before:           Fri 24 Nov 2023 19:37:45 +0000
ROA not after:            Fri 22 Nov 2024 19:42:45 +0000
asID:                     52916
IP address blocks:        2804:2b10:1000::/37 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:7a:02:48:95:69:5e:a4:4a:56:34:c6:c6:72:97:84:0f:8b:1e:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
        Validity
            Not Before: Nov 24 19:37:45 2023 GMT
            Not After : Nov 22 19:42:45 2024 GMT
        Subject: CN=C908E965EF589F098BA4E1F9F0F6336699149F2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:6f:5e:e4:70:12:77:ca:74:a5:36:7f:bf:ff:
                    c8:f5:52:03:c9:ef:20:95:94:4d:23:f0:f3:8f:9d:
                    ff:6d:5a:bf:76:65:29:b1:54:2e:5d:29:d7:d4:76:
                    fb:ab:51:a2:e1:57:1d:aa:f4:ed:cf:24:1c:56:f5:
                    5a:a5:5b:9f:10:d5:0d:11:9b:fd:88:11:a8:2e:96:
                    19:78:88:de:65:9f:86:00:4f:b3:0e:73:88:b8:89:
                    14:f8:d2:18:c5:ee:f5:21:99:8e:55:69:b2:3e:c6:
                    06:dd:db:09:1b:a8:50:d0:6f:af:93:9e:f8:39:c1:
                    75:ef:26:60:bd:d5:3b:9b:fa:80:d6:9c:f4:47:b4:
                    4a:e8:7f:8a:c7:ce:7c:18:14:dd:17:47:7e:80:9c:
                    a6:85:a3:ad:2d:6b:10:13:33:99:0b:bc:74:75:89:
                    c3:2c:3a:18:52:c4:d1:77:e1:02:ce:f1:15:f9:a8:
                    44:b8:0b:2a:23:60:e6:05:b6:f1:8e:dc:35:28:68:
                    d3:e0:df:dc:79:79:bb:ce:e6:78:77:ab:37:e5:41:
                    7a:51:b1:29:56:66:f8:6b:d0:b7:45:1e:06:31:fd:
                    16:13:3c:e2:b6:11:b1:7e:23:e5:16:5c:b6:70:06:
                    70:fc:72:13:f1:40:1f:fc:cb:3c:d4:6d:90:45:13:
                    84:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:08:E9:65:EF:58:9F:09:8B:A4:E1:F9:F0:F6:33:66:99:14:9F:2A
            X509v3 Authority Key Identifier:
                keyid:D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/323830343a326231303a313030303a3a2f33372d3337203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b10:1000::/37

    Signature Algorithm: sha256WithRSAEncryption
         b0:70:ff:1a:e4:b9:fd:24:eb:b9:9f:cb:e7:4c:27:26:20:25:
         72:d9:04:ee:f5:08:50:32:46:4c:82:cc:84:cb:a2:4b:7c:ce:
         d6:a3:3b:23:a8:2f:8c:15:e2:30:58:62:de:ee:2b:39:1b:36:
         70:e1:24:07:78:40:25:17:8b:85:b6:6f:09:a1:14:76:27:bf:
         51:d0:41:f4:d4:61:4b:fa:f1:e9:f8:26:a5:ea:19:bb:30:a8:
         ea:6a:7e:dd:35:99:ef:d7:fa:eb:e6:ab:90:9d:39:21:cb:6c:
         55:b7:a5:f6:bd:79:72:d5:bf:51:e8:25:41:b4:a2:02:77:52:
         59:06:7b:09:26:f1:ac:e5:a1:f6:12:22:4f:27:56:7b:07:76:
         05:d0:57:42:a8:87:c1:7a:ee:dc:ac:10:2c:6f:17:4b:e9:49:
         b2:cd:9b:df:ee:67:41:b6:8e:2d:fc:62:c5:85:72:2f:c7:d7:
         74:bc:1d:a4:4c:af:f2:87:dd:2f:21:ff:b2:69:b2:2c:4e:7d:
         86:54:9c:de:9e:a4:af:10:9f:53:4f:27:d7:ae:66:e6:40:a7:
         ce:e3:84:5b:06:0a:a6:dc:76:1a:d4:5c:2e:bb:03:bc:c0:47:
         58:09:31:2f:49:17:c0:28:aa:2b:a7:77:1a:cb:bc:9b:b1:41:
         8e:78:cd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org