Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/1/323830343a323232383a3a2f33322d3333203d3e20323634353935.roa
File:                     323830343a323232383a3a2f33322d3333203d3e20323634353935.roa (raw, json)
Hash identifier:          dsN5RIO/BorEJQkWK5WhdVS8xEGbI5JUdtVV93Fbx/4=
Subject key identifier:   23:FF:4B:B2:49:B6:FD:41:7F:B0:E1:E0:F2:95:A2:14:2B:13:38:F0
Certificate issuer:       /CN=C7CDE00B8FAF822929EE8184DED9A4F02250D9CB
Certificate serial:       0DDB23212D2D9E0798ED0A6594972365E341B9EA
Authority key identifier: C7:CD:E0:0B:8F:AF:82:29:29:EE:81:84:DE:D9:A4:F0:22:50:D9:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7CDE00B8FAF822929EE8184DED9A4F02250D9CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/1/323830343a323232383a3a2f33322d3333203d3e20323634353935.roa
Signing time:             Fri 05 Apr 2024 04:35:43 +0000
ROA not before:           Fri 05 Apr 2024 04:30:43 +0000
ROA not after:            Fri 04 Apr 2025 04:35:43 +0000
asID:                     264595
IP address blocks:        2804:2228::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:db:23:21:2d:2d:9e:07:98:ed:0a:65:94:97:23:65:e3:41:b9:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7CDE00B8FAF822929EE8184DED9A4F02250D9CB
        Validity
            Not Before: Apr  5 04:30:43 2024 GMT
            Not After : Apr  4 04:35:43 2025 GMT
        Subject: CN=23FF4BB249B6FD417FB0E1E0F295A2142B1338F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:47:07:de:e2:4f:1c:47:5d:66:16:6d:40:f5:
                    57:0e:4c:a1:0a:5f:49:98:cc:8f:f1:5f:48:48:9a:
                    97:29:6a:37:84:dd:18:20:6a:87:80:3d:33:26:80:
                    65:6d:45:4f:db:ba:a5:e7:bb:bf:87:ff:06:90:bd:
                    88:a3:b9:33:9a:51:b0:eb:06:9f:9e:46:f6:fe:aa:
                    aa:41:fd:8c:07:b7:8c:53:3c:bf:12:4c:35:1e:e9:
                    ee:ec:0c:49:d6:2b:0b:0e:e6:7f:52:48:e6:a4:a6:
                    db:bf:f7:61:00:ec:17:57:83:a8:87:51:1f:af:1a:
                    9c:27:a3:75:87:e3:54:1f:d9:25:9f:db:81:3e:a7:
                    b0:d2:e6:59:43:ce:c4:62:8f:31:74:a8:21:e5:33:
                    c4:66:6a:6b:83:e7:9b:f6:51:8f:0e:7c:34:a4:40:
                    d6:be:f6:4d:b5:99:82:7e:ed:a4:5e:a0:76:3c:6e:
                    e3:ba:28:49:e4:c3:22:a5:92:c7:4a:0f:2c:62:71:
                    05:1d:eb:98:b0:a7:c7:30:ee:5a:76:03:57:80:5c:
                    34:25:53:fe:bc:cb:75:04:32:02:20:de:70:81:be:
                    d9:98:49:69:22:1d:df:fd:2a:7a:f9:c9:c3:11:bd:
                    84:31:e9:e3:97:15:9f:7a:26:f9:f9:73:a3:13:d5:
                    81:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FF:4B:B2:49:B6:FD:41:7F:B0:E1:E0:F2:95:A2:14:2B:13:38:F0
            X509v3 Authority Key Identifier:
                keyid:C7:CD:E0:0B:8F:AF:82:29:29:EE:81:84:DE:D9:A4:F0:22:50:D9:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/1/C7CDE00B8FAF822929EE8184DED9A4F02250D9CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7CDE00B8FAF822929EE8184DED9A4F02250D9CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/1/323830343a323232383a3a2f33322d3333203d3e20323634353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2228::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:45:92:0e:4a:84:85:36:18:31:06:16:ae:6c:a4:57:51:41:
         a2:00:bf:b1:ca:2e:7f:d7:8f:8a:58:92:4f:68:3c:86:40:37:
         4d:2f:68:65:a3:f4:9f:a4:ed:7f:8c:d6:3b:ee:1f:b7:ef:8e:
         c8:04:0f:74:4e:67:db:46:65:f8:59:f8:91:43:0f:e4:67:44:
         b7:52:ce:21:2d:22:7d:c0:80:6f:51:32:3d:10:61:0b:27:d5:
         9b:98:1b:51:2f:42:d7:53:94:ee:2d:04:e3:f6:63:57:af:98:
         08:28:20:27:d9:d4:59:32:9f:4a:64:e0:93:e4:4f:c6:3f:1c:
         75:e9:66:cf:a0:41:82:26:da:96:90:7a:19:3f:d6:10:90:88:
         75:c7:80:b0:b5:7f:85:af:68:08:43:ce:d8:ef:98:3b:f5:c8:
         e1:f0:31:df:21:1d:90:a4:fd:82:8e:31:58:fc:7a:1b:8e:80:
         1b:63:8c:5f:7a:a2:0b:b6:17:f9:57:75:e8:9b:64:59:44:ed:
         30:6b:0c:30:27:32:4a:1f:6c:a4:5b:b5:a1:45:98:7a:74:33:
         db:a4:09:be:52:08:70:f1:32:7d:a6:54:9b:30:a8:45:5a:4a:
         c5:ab:52:3e:64:aa:7d:f6:93:a9:49:dd:48:a2:84:e5:2c:9f:
         a3:2d:68:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 20:18:16 2024 by rpki-client on console-fra.rpki-client.org