Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/0/323830343a316561303a3a2f33322d3634203d3e20323634343430.roa
File:                     323830343a316561303a3a2f33322d3634203d3e20323634343430.roa (raw, json)
Hash identifier:          kwr2+ohTpFH8tlOGqAg+44l5v0DHLme+8ZMD+3MDNR4=
Subject key identifier:   04:CA:A9:8D:35:F7:04:E3:08:E4:2C:27:4A:AD:84:EA:06:20:64:9C
Certificate issuer:       /CN=0C7E5BA90F8E96FEEE1254FCBA3A123CA1C740DA
Certificate serial:       0A4B80AAC46D842023DDB18280640CE8CBF8F5B8
Authority key identifier: 0C:7E:5B:A9:0F:8E:96:FE:EE:12:54:FC:BA:3A:12:3C:A1:C7:40:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C7E5BA90F8E96FEEE1254FCBA3A123CA1C740DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/0/323830343a316561303a3a2f33322d3634203d3e20323634343430.roa
Signing time:             Thu 07 Sep 2023 15:00:00 +0000
ROA not before:           Thu 07 Sep 2023 14:55:00 +0000
ROA not after:            Thu 05 Sep 2024 15:00:00 +0000
asID:                     264440
IP address blocks:        2804:1ea0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:4b:80:aa:c4:6d:84:20:23:dd:b1:82:80:64:0c:e8:cb:f8:f5:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C7E5BA90F8E96FEEE1254FCBA3A123CA1C740DA
        Validity
            Not Before: Sep  7 14:55:00 2023 GMT
            Not After : Sep  5 15:00:00 2024 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5f:17:3d:33:83:33:cb:63:22:de:3a:58:3b:
                    d8:68:96:95:c5:0e:e6:79:e7:92:24:14:ed:f9:8d:
                    e5:4f:af:74:7b:6c:72:56:68:ec:80:6d:b1:b7:87:
                    d4:07:fd:be:27:d8:26:ea:61:98:5d:12:ba:7d:2d:
                    b8:c0:b9:be:cf:56:44:3c:ae:b0:bc:bb:b0:ab:fa:
                    2a:59:0d:cc:03:fd:1d:c5:bb:bd:53:4a:9a:96:09:
                    96:42:a4:c7:0d:5a:7b:c4:3a:fb:27:79:60:eb:cb:
                    7b:c1:bd:06:bb:ed:a6:54:8a:e8:73:4c:1e:cb:69:
                    33:6e:ef:cd:e4:ee:1c:36:02:a8:0a:9a:db:9b:5c:
                    2f:a9:b3:d9:3e:ca:93:70:76:a3:9b:50:65:dd:51:
                    1e:e0:5c:df:66:5f:b0:bc:64:11:5d:1e:94:0c:9c:
                    c1:18:99:84:da:b7:f3:42:37:2f:17:80:9b:21:b7:
                    dd:0a:bb:3b:e0:f6:1b:40:50:1a:38:42:9a:91:78:
                    0a:5b:07:66:d7:2f:7a:ff:b2:1e:8f:a6:18:d2:36:
                    44:84:8f:97:d2:c2:a7:cf:a3:cb:ac:2b:4a:f2:a8:
                    e6:ea:1e:f0:8e:c6:6e:b2:f9:5b:3a:6f:d6:1e:a7:
                    6c:e6:70:9c:91:f5:41:f1:43:85:34:49:13:15:0d:
                    1e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:CA:A9:8D:35:F7:04:E3:08:E4:2C:27:4A:AD:84:EA:06:20:64:9C
            X509v3 Authority Key Identifier:
                keyid:0C:7E:5B:A9:0F:8E:96:FE:EE:12:54:FC:BA:3A:12:3C:A1:C7:40:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/0/0C7E5BA90F8E96FEEE1254FCBA3A123CA1C740DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C7E5BA90F8E96FEEE1254FCBA3A123CA1C740DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/0/323830343a316561303a3a2f33322d3634203d3e20323634343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:01:fc:27:70:84:b5:29:38:7f:5d:26:13:03:17:5c:95:76:
         5b:59:9b:5c:92:c4:05:69:80:63:40:b4:ba:20:33:d7:01:37:
         33:ec:2a:49:4f:e4:91:8d:1b:48:e5:26:90:ff:3f:0a:29:a3:
         af:9e:4a:d8:5f:81:1e:76:8a:d5:62:9a:c7:92:1f:1b:c6:8a:
         d3:46:9a:61:fb:61:80:00:98:c0:d9:40:1a:40:39:1e:1e:6b:
         02:58:dc:a2:2a:95:0f:f6:01:81:75:b2:8a:bc:97:4e:fb:46:
         13:c9:ee:52:f6:cf:8b:ec:67:ab:d7:99:93:70:cb:e7:d8:5d:
         0c:72:21:23:4f:60:69:07:a1:d5:1a:95:a0:4f:46:3b:91:59:
         06:13:c4:61:7d:14:16:0e:99:32:75:e8:7a:a7:15:95:11:4f:
         35:28:09:19:4a:15:af:bc:2d:78:2d:a8:d4:86:c0:44:8b:bf:
         1d:b4:29:fc:62:e0:d8:3e:f3:37:cf:ad:da:df:94:7a:84:e0:
         39:8c:e7:1b:45:1c:57:12:33:19:41:3b:85:b9:27:5d:df:b0:
         2d:d4:b5:86:d9:44:dc:01:6f:f1:94:c5:44:ef:02:01:9f:01:
         b5:f3:cf:24:ae:ea:77:c8:b0:5d:9f:70:68:30:1c:62:22:50:
         6d:4e:a6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:36 2024 by rpki-client on console-fra.rpki-client.org