Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/323830343a376637633a3a2f33322d313238203d3e20323731363931.roa
File:                     323830343a376637633a3a2f33322d313238203d3e20323731363931.roa (raw, json)
Hash identifier:          nsDeh3Bpt/1ZOVscYoI9cX3rl3kv+063ve5BxbvowZo=
Subject key identifier:   20:F9:F2:FB:2A:55:B1:1E:91:AA:C3:7F:28:CE:7C:47:24:75:D6:35
Certificate issuer:       /CN=22A35F8203D28C9D76E9A71A1296D297C4F0F7D9
Certificate serial:       38D44EA995DA8716AD398A29E3561FB2EA676EFD
Authority key identifier: 22:A3:5F:82:03:D2:8C:9D:76:E9:A7:1A:12:96:D2:97:C4:F0:F7:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22A35F8203D28C9D76E9A71A1296D297C4F0F7D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/323830343a376637633a3a2f33322d313238203d3e20323731363931.roa
Signing time:             Mon 30 Oct 2023 13:00:18 +0000
ROA not before:           Mon 30 Oct 2023 12:55:18 +0000
ROA not after:            Mon 28 Oct 2024 13:00:18 +0000
asID:                     271691
IP address blocks:        2804:7f7c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d4:4e:a9:95:da:87:16:ad:39:8a:29:e3:56:1f:b2:ea:67:6e:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22A35F8203D28C9D76E9A71A1296D297C4F0F7D9
        Validity
            Not Before: Oct 30 12:55:18 2023 GMT
            Not After : Oct 28 13:00:18 2024 GMT
        Subject: CN=20F9F2FB2A55B11E91AAC37F28CE7C472475D635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c8:1c:c3:81:bf:f2:09:82:7d:92:85:f6:ef:
                    bc:f5:90:bd:7f:27:f3:c9:ee:dd:58:ae:3f:c6:61:
                    65:22:9f:2c:77:20:1d:93:99:37:37:99:40:7b:03:
                    2d:b0:bd:d7:50:fc:36:b9:6e:9d:99:b3:59:ad:2c:
                    36:9b:30:46:f5:52:b2:cc:e3:91:dc:2a:f6:51:43:
                    f0:f6:81:56:e6:90:98:34:09:cb:9d:fe:ee:55:0d:
                    46:c5:2c:a3:a4:29:51:89:17:8c:ed:86:9b:5e:e3:
                    42:3f:7f:86:30:5f:a7:7f:3b:2a:a5:98:61:31:a8:
                    fb:90:2a:a0:e7:07:d9:a6:8b:87:4e:59:7b:67:a9:
                    3e:d6:21:13:15:66:2e:63:e2:30:5a:30:ec:cc:0b:
                    9c:cb:87:2b:af:93:a7:e6:90:74:7c:a2:a2:ea:38:
                    b4:02:8c:34:c8:b5:f3:d6:83:4a:7c:a6:f1:65:99:
                    ab:af:3b:d3:f2:96:d6:eb:fd:a9:01:4a:f0:1c:59:
                    62:41:a1:e4:42:77:24:e3:e6:38:0c:72:37:7b:07:
                    53:d3:61:24:44:2d:4e:82:9e:88:ec:c8:74:4a:97:
                    ca:89:35:4a:34:65:55:1e:9f:1a:c1:ae:5d:4e:32:
                    57:78:f9:d0:05:a6:a9:77:da:80:e3:2a:fc:f6:3f:
                    6b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F9:F2:FB:2A:55:B1:1E:91:AA:C3:7F:28:CE:7C:47:24:75:D6:35
            X509v3 Authority Key Identifier:
                keyid:22:A3:5F:82:03:D2:8C:9D:76:E9:A7:1A:12:96:D2:97:C4:F0:F7:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/22A35F8203D28C9D76E9A71A1296D297C4F0F7D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22A35F8203D28C9D76E9A71A1296D297C4F0F7D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/323830343a376637633a3a2f33322d313238203d3e20323731363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:0f:45:d9:71:35:f7:3c:f8:6c:c0:6c:5f:10:4b:c0:a4:6d:
         75:a3:f4:6a:9f:97:7d:85:e5:1a:67:1c:59:a9:93:8d:39:b5:
         71:ed:16:e1:11:9e:8d:49:be:a6:61:d7:85:34:62:f1:bb:c0:
         e2:72:9f:8a:59:c6:d7:fb:fd:b2:e9:05:db:ae:29:38:ff:d9:
         f7:7a:aa:52:39:f6:43:63:eb:82:98:18:39:ef:30:a7:e7:f2:
         92:79:ca:93:44:5b:98:9f:0c:82:37:a2:22:e6:e4:8f:35:0c:
         9c:a1:f7:6e:37:b4:a8:c9:c9:fa:a4:f7:41:58:c8:10:39:e5:
         fc:e3:4b:7b:3e:06:a9:c0:3e:8c:80:30:49:38:a4:7b:6c:95:
         dc:b1:66:79:90:fe:03:93:00:bb:bd:d2:e2:fb:25:5a:97:e5:
         0e:de:14:b6:02:fb:c1:32:f4:b2:7c:8d:33:fe:d2:2c:bb:57:
         1b:74:42:84:da:1c:ba:21:17:b5:f6:44:d6:3d:5d:56:f6:92:
         ed:5d:7b:fa:90:1a:be:2c:e1:98:89:c7:e2:10:d4:49:08:9b:
         2c:c6:af:ee:10:ab:57:f8:e1:e9:82:e8:a6:cf:78:e7:f5:68:
         3c:48:dd:68:ab:c4:12:0f:86:74:fe:64:96:3e:ba:75:b7:b2:
         a6:c5:96:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org