Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/0/323830343a353738383a3a2f33342d3334203d3e20323638303730.roa
File:                     323830343a353738383a3a2f33342d3334203d3e20323638303730.roa (raw, json)
Hash identifier:          T90UXYxUkrxY8P6jR91Liip4lQsmziEfmc3lOtcnA1I=
Subject key identifier:   D3:FD:5A:97:DA:F1:55:E3:63:73:1E:E9:ED:C2:2A:F7:9B:B4:F7:4F
Certificate issuer:       /CN=177CC1F044635CDEFDDF40B78BE59FC17A2383BF
Certificate serial:       433E9B01060C4B23CB1AE3AFE43A8B86FACE8314
Authority key identifier: 17:7C:C1:F0:44:63:5C:DE:FD:DF:40:B7:8B:E5:9F:C1:7A:23:83:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177CC1F044635CDEFDDF40B78BE59FC17A2383BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/0/323830343a353738383a3a2f33342d3334203d3e20323638303730.roa
Signing time:             Wed 26 Jul 2023 14:12:01 +0000
ROA not before:           Wed 26 Jul 2023 14:07:01 +0000
ROA not after:            Wed 24 Jul 2024 14:12:01 +0000
asID:                     268070
IP address blocks:        2804:5788::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3e:9b:01:06:0c:4b:23:cb:1a:e3:af:e4:3a:8b:86:fa:ce:83:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177CC1F044635CDEFDDF40B78BE59FC17A2383BF
        Validity
            Not Before: Jul 26 14:07:01 2023 GMT
            Not After : Jul 24 14:12:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:15:01:db:10:c5:48:41:ef:0b:a6:5b:ef:e6:
                    cf:d5:fa:98:bf:74:d0:06:87:f3:14:4b:81:6a:ac:
                    bc:73:d1:b5:03:9e:2b:ca:bd:b7:a2:c3:c3:fb:d2:
                    e0:4d:81:9f:f4:19:09:32:c7:e9:ce:34:d4:3f:12:
                    40:5f:9a:53:7d:fd:a3:2b:f3:c4:7f:6e:49:81:fa:
                    56:42:e8:0b:ce:82:b9:54:5b:55:15:c0:ce:0a:62:
                    50:2d:f4:16:ec:59:28:5b:d7:bc:af:94:29:b3:96:
                    90:f9:97:75:09:75:da:ac:3f:56:ba:ae:52:a9:42:
                    86:05:8a:b8:28:55:44:24:5a:2c:3e:1a:26:5a:b2:
                    39:09:e5:52:91:94:41:fe:2e:5e:04:35:1f:47:c2:
                    d4:b4:c1:9a:6e:7d:d5:f7:c1:aa:50:b8:02:b8:3e:
                    fb:0b:a3:c3:d3:75:eb:36:29:25:39:e3:59:6a:1d:
                    fd:22:53:02:0f:7c:a1:1d:82:85:74:9e:59:94:6b:
                    d7:31:71:fd:85:ab:f5:dc:5d:76:73:04:67:5c:52:
                    93:0c:bd:a1:19:95:bc:8d:c0:bb:4a:dd:ab:02:a3:
                    bf:2c:ac:42:10:6e:f2:22:e0:21:08:cb:13:f8:73:
                    5b:9a:92:c7:29:5e:a1:a6:53:12:72:f0:5c:df:7f:
                    63:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FD:5A:97:DA:F1:55:E3:63:73:1E:E9:ED:C2:2A:F7:9B:B4:F7:4F
            X509v3 Authority Key Identifier:
                keyid:17:7C:C1:F0:44:63:5C:DE:FD:DF:40:B7:8B:E5:9F:C1:7A:23:83:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/0/177CC1F044635CDEFDDF40B78BE59FC17A2383BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177CC1F044635CDEFDDF40B78BE59FC17A2383BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/0/323830343a353738383a3a2f33342d3334203d3e20323638303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5788::/34

    Signature Algorithm: sha256WithRSAEncryption
         23:c8:63:b4:80:5e:a7:ea:f4:c9:74:9b:ac:a6:66:5b:fb:c5:
         dd:24:fa:98:d0:fb:24:e9:a3:90:dc:61:22:28:a2:f5:16:b2:
         e0:e0:aa:1c:72:60:01:1e:cd:80:bb:b2:72:c5:ff:02:67:64:
         f3:72:9a:28:02:04:ae:a7:3b:77:d3:d9:d9:ee:a9:85:c9:85:
         d6:71:b2:ad:4c:67:6b:84:a7:c0:b8:91:68:9c:3f:14:1d:40:
         29:a1:e0:be:85:ff:3b:4f:59:62:1b:5c:88:08:56:08:51:05:
         d2:0b:88:39:0e:5d:61:2f:07:ed:6e:5b:5f:a1:71:f0:c0:2b:
         1c:b7:04:78:fe:cb:d9:7a:d6:80:a8:2f:28:16:f1:8f:96:e7:
         89:a0:58:a5:7a:f9:a3:d1:3b:37:78:8a:da:1f:b1:97:35:83:
         fc:6d:d0:97:1b:3d:52:4e:a4:56:bd:d8:e6:a2:03:1a:d0:aa:
         a3:50:33:82:b1:5b:1a:65:ce:21:91:c0:4b:a8:b0:75:0f:d9:
         7c:43:98:51:f8:aa:45:ff:ae:f1:17:06:c9:b1:86:59:bc:b3:
         db:3f:81:63:f5:46:ef:a5:70:d9:93:70:c2:9f:6c:d7:38:30:
         9b:cc:5d:1a:9c:ee:5a:13:ee:19:d8:f4:8c:e0:4c:0f:ea:c6:
         bc:5e:c9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org