Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a373030333a3a2f34382d3438203d3e20323731303134.roa
File:                     323830343a373466343a373030333a3a2f34382d3438203d3e20323731303134.roa (raw, json)
Hash identifier:          iWLXyAvpX+BoGBgXywll8QuOoKpsiHrLc/IQBFLUTIg=
Subject key identifier:   36:A5:7C:6A:78:EA:69:A9:6D:5C:B6:20:49:5C:33:46:E1:7D:07:E1
Certificate issuer:       /CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
Certificate serial:       35A224B13F5E93728246F1184DBF14B059F21D9B
Authority key identifier: 24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a373030333a3a2f34382d3438203d3e20323731303134.roa
Signing time:             Thu 08 Feb 2024 14:06:01 +0000
ROA not before:           Thu 08 Feb 2024 14:01:01 +0000
ROA not after:            Thu 06 Feb 2025 14:06:01 +0000
asID:                     271014
IP address blocks:        2804:74f4:7003::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a2:24:b1:3f:5e:93:72:82:46:f1:18:4d:bf:14:b0:59:f2:1d:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
        Validity
            Not Before: Feb  8 14:01:01 2024 GMT
            Not After : Feb  6 14:06:01 2025 GMT
        Subject: CN=36A57C6A78EA69A96D5CB620495C3346E17D07E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b4:59:6b:9a:4f:2d:a6:8a:62:6a:39:d3:3a:
                    86:cf:d6:53:a2:83:96:22:0e:f1:7e:bc:d0:33:61:
                    27:14:85:5e:0e:b9:89:33:47:13:8d:78:2e:b9:24:
                    40:c5:a2:89:fa:d1:93:d3:21:61:41:8a:61:b3:81:
                    14:97:11:9d:db:6d:6a:67:cb:b4:93:a9:ca:ec:05:
                    c7:4e:b6:9d:8a:64:e5:63:4f:88:c0:f7:96:1e:31:
                    24:d4:38:01:a6:25:ca:89:66:88:a0:12:44:d2:7d:
                    3b:bf:45:19:7c:c4:18:2d:38:6a:12:4c:8a:e7:41:
                    17:96:bc:8c:a5:46:b9:4b:71:44:1d:df:af:74:7c:
                    be:85:01:62:f6:db:b9:c0:4c:e1:16:d7:2c:44:e0:
                    7f:48:9d:e7:14:1b:88:71:7a:23:72:66:fb:8f:a9:
                    0c:df:9d:a0:99:30:87:d4:1f:11:4e:76:8c:6a:e3:
                    d1:73:c7:d7:af:30:ae:51:fe:28:d0:9a:e9:3f:b3:
                    7d:67:87:a9:df:d6:a0:5b:34:75:3a:17:b0:e8:15:
                    71:e2:9d:c4:ff:18:2c:27:74:8a:1c:9b:61:4e:d8:
                    76:f4:ba:b5:47:21:84:69:ff:a0:c4:16:3b:7c:e9:
                    41:ee:ea:27:7c:1f:ac:ad:96:4c:91:6d:4b:c1:01:
                    8a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A5:7C:6A:78:EA:69:A9:6D:5C:B6:20:49:5C:33:46:E1:7D:07:E1
            X509v3 Authority Key Identifier:
                keyid:24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a373030333a3a2f34382d3438203d3e20323731303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74f4:7003::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:e1:97:7c:b9:52:bc:f5:d5:d2:7a:07:84:d0:e7:5f:91:a4:
         c6:42:a5:a7:bf:35:62:44:24:39:83:14:58:15:9e:a0:7a:53:
         99:e3:b4:f2:2d:e8:26:59:65:4c:05:9e:f5:e8:f5:ab:32:ac:
         ba:82:d3:c5:bd:3b:79:64:72:59:41:8a:a0:87:37:87:8a:c7:
         df:3c:4c:4c:45:77:e3:38:f1:f7:35:b6:cc:77:9e:18:3d:3d:
         8b:a1:35:c5:5f:e4:9e:f9:23:a4:86:98:09:8d:4d:5d:7d:1f:
         d0:74:4f:30:a1:ba:8c:cb:40:8b:bc:ba:d8:59:87:53:33:35:
         9c:e9:b1:29:18:70:37:2a:41:cd:c8:fb:b6:c4:02:65:9a:a5:
         76:f1:39:8c:ba:0d:34:b9:17:bb:48:ab:fa:14:77:84:8f:81:
         75:f3:ee:8e:a7:b9:a8:3e:fc:1c:90:0e:64:f2:89:53:da:4b:
         64:d8:fd:fa:d8:4b:d7:4f:d1:59:b7:78:ba:fb:ef:61:d4:47:
         d2:ef:14:76:18:d3:4f:07:cd:51:05:1f:29:01:dc:a0:6a:0b:
         03:0d:85:8d:33:8d:8f:23:3d:50:67:26:9f:93:94:58:e7:3f:
         1e:05:e1:e1:8b:f0:2f:de:a3:17:15:3b:d9:13:d2:4c:86:a6:
         21:6b:2e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:36 2024 by rpki-client on console-fra.rpki-client.org