Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/1/323830343a373933633a3a2f33322d3438203d3e20323731323933.roa
File:                     323830343a373933633a3a2f33322d3438203d3e20323731323933.roa (raw, json)
Hash identifier:          XidLXxh8SJ1mDnBZ604EMwqOHgE9pnqvKxFwnD5vsd0=
Subject key identifier:   7C:D7:7A:27:7B:BC:DD:55:8F:81:BF:E8:7B:7B:DA:0B:CE:3C:E3:7B
Certificate issuer:       /CN=3751E14F83E2CE00B85D8F4A98C3ED0330138694
Certificate serial:       565913DD5F3F3EBCF0BA7B9AE9896B10F3A3A8ED
Authority key identifier: 37:51:E1:4F:83:E2:CE:00:B8:5D:8F:4A:98:C3:ED:03:30:13:86:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3751E14F83E2CE00B85D8F4A98C3ED0330138694.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/1/323830343a373933633a3a2f33322d3438203d3e20323731323933.roa
Signing time:             Thu 28 Mar 2024 14:28:04 +0000
ROA not before:           Thu 28 Mar 2024 14:23:04 +0000
ROA not after:            Thu 27 Mar 2025 14:28:04 +0000
asID:                     271293
IP address blocks:        2804:793c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:59:13:dd:5f:3f:3e:bc:f0:ba:7b:9a:e9:89:6b:10:f3:a3:a8:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3751E14F83E2CE00B85D8F4A98C3ED0330138694
        Validity
            Not Before: Mar 28 14:23:04 2024 GMT
            Not After : Mar 27 14:28:04 2025 GMT
        Subject: CN=7CD77A277BBCDD558F81BFE87B7BDA0BCE3CE37B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:38:2d:7f:f4:45:0f:07:bc:32:4a:fe:fa:cb:
                    7d:42:e4:ab:d8:78:bc:77:20:ab:cd:76:fa:45:97:
                    7d:d5:fc:14:30:23:0d:a7:7c:9d:52:71:cc:06:94:
                    81:c0:d4:14:c2:b0:d1:52:13:19:6b:0e:9a:29:0c:
                    26:ca:bd:34:14:fa:dd:3d:86:6e:36:48:3b:95:3a:
                    7d:f9:f7:f7:91:04:d1:46:21:7c:40:5f:f5:50:3f:
                    a9:6d:87:8d:62:c8:72:22:b2:7f:aa:16:9c:db:83:
                    d1:45:0d:22:1b:88:34:e0:44:11:1b:1d:27:14:94:
                    b0:e2:f3:04:f5:40:a1:c7:9e:fb:9a:2f:eb:8b:95:
                    80:fe:d8:4c:23:27:f6:16:6d:ec:8c:93:33:85:a1:
                    76:97:b6:a1:b4:44:89:2f:8c:8c:49:bd:14:ca:d0:
                    ae:e1:3e:e4:8b:21:9d:5a:2d:e9:07:08:73:44:87:
                    21:52:8e:49:ca:53:5b:9e:9f:71:68:4b:6a:81:c9:
                    7d:e4:35:7b:42:48:94:b4:da:f2:87:3e:f0:93:20:
                    75:49:8d:68:f7:7b:03:2c:1e:de:cd:30:36:1e:21:
                    f3:1f:dc:e4:3f:c2:8d:1a:d9:8b:7c:45:ed:a8:4e:
                    f8:df:22:48:f8:d0:3b:5f:7c:52:fd:b6:6b:22:b0:
                    b7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D7:7A:27:7B:BC:DD:55:8F:81:BF:E8:7B:7B:DA:0B:CE:3C:E3:7B
            X509v3 Authority Key Identifier:
                keyid:37:51:E1:4F:83:E2:CE:00:B8:5D:8F:4A:98:C3:ED:03:30:13:86:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/1/3751E14F83E2CE00B85D8F4A98C3ED0330138694.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3751E14F83E2CE00B85D8F4A98C3ED0330138694.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/1/323830343a373933633a3a2f33322d3438203d3e20323731323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:793c::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:d0:11:ee:60:a9:70:6e:6e:95:af:68:c1:60:02:4e:37:40:
         57:ae:f2:fe:73:b9:ce:a0:ff:f6:d3:e1:ab:ea:a3:41:0a:0f:
         bf:3e:0a:c1:47:bb:42:fb:17:2a:2f:bf:47:ac:12:e8:a3:1e:
         8b:be:91:05:ed:ff:ff:ef:b3:92:71:f1:38:4b:32:c9:9e:2c:
         65:11:54:6c:61:06:d9:57:a6:2b:d3:bd:29:40:47:a9:16:5d:
         c8:d2:b1:7d:a1:28:4f:6d:3e:20:87:f2:28:99:1a:3b:9e:32:
         6a:f8:61:8c:02:1d:f7:68:99:ec:b7:52:b9:9f:63:fd:d2:43:
         e8:30:3d:20:5e:6a:e9:c5:ab:21:63:af:f0:83:26:9d:39:c4:
         43:a7:8c:c7:fb:95:8e:31:80:1b:94:0c:5b:d3:f2:20:e0:9f:
         3e:5a:e8:d5:a1:7e:5d:ef:5e:81:f8:7a:59:7c:7d:cf:79:78:
         37:63:0c:9e:f3:1d:4f:56:21:7d:a0:27:cd:14:c8:97:2c:25:
         3c:3e:7d:17:83:73:4e:e7:ac:0a:6d:fe:84:ac:c3:4d:05:c0:
         da:02:53:46:45:85:54:c5:08:80:56:b7:c1:12:e9:bb:bd:6f:
         7e:8c:b4:43:18:9a:12:d3:32:52:d2:ff:0c:54:a6:09:b5:e0:
         73:66:9b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org