Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/0/323830343a353738383a633030303a3a2f33342d3334203d3e20323638303730.roa
File:                     323830343a353738383a633030303a3a2f33342d3334203d3e20323638303730.roa (raw, json)
Hash identifier:          B566lH6gCgBZ9DxXxlo0ETgBxn4tjqf6YyYFcJToU1o=
Subject key identifier:   9D:CD:1B:75:49:62:D8:CC:F1:55:2B:6E:9B:2F:06:58:AF:28:C2:C6
Certificate issuer:       /CN=177CC1F044635CDEFDDF40B78BE59FC17A2383BF
Certificate serial:       3D9159F75837A70FFA15D6B6E811A77F9B0D22CB
Authority key identifier: 17:7C:C1:F0:44:63:5C:DE:FD:DF:40:B7:8B:E5:9F:C1:7A:23:83:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177CC1F044635CDEFDDF40B78BE59FC17A2383BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/0/323830343a353738383a633030303a3a2f33342d3334203d3e20323638303730.roa
Signing time:             Wed 26 Jul 2023 14:12:10 +0000
ROA not before:           Wed 26 Jul 2023 14:07:10 +0000
ROA not after:            Wed 24 Jul 2024 14:12:10 +0000
asID:                     268070
IP address blocks:        2804:5788:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:91:59:f7:58:37:a7:0f:fa:15:d6:b6:e8:11:a7:7f:9b:0d:22:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177CC1F044635CDEFDDF40B78BE59FC17A2383BF
        Validity
            Not Before: Jul 26 14:07:10 2023 GMT
            Not After : Jul 24 14:12:10 2024 GMT
        Subject: CN=3082010A0282010100D1BF2F1368AF709A85A72D6910ABD1E773E79573BD327518107902A1E44E6A77A7E84F6BAB89CE615F3DAD8FF9CFAE188BAE7683F69E7D9C7A6692C7E97ED4233B305C851B6AB82309AECEC96305EA3BFC64682E0BC12DE5075FDF4491C63F5CD09965BF8EBA9C90B8D598018ED94361C384F8A2EF4504AAAC58E7F3D01CACF61A10CAEA6E5B0197A2166A1362BE29D49150ABE192720802277A122F45FC766DA11FE640B55E9CEF3AF31314DA4C9F634B252CE5C0733E6C47D53CD14540879E1EA537C253C0D1CE257DD3D2D51C5C7E2AEA53277D21CE026EAB41AB77DC612BB29CD18328E2C22D216289C319ED8FF62A9281D60BEB05CAD5FCEAA156DBF4630203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bf:2f:13:68:af:70:9a:85:a7:2d:69:10:ab:
                    d1:e7:73:e7:95:73:bd:32:75:18:10:79:02:a1:e4:
                    4e:6a:77:a7:e8:4f:6b:ab:89:ce:61:5f:3d:ad:8f:
                    f9:cf:ae:18:8b:ae:76:83:f6:9e:7d:9c:7a:66:92:
                    c7:e9:7e:d4:23:3b:30:5c:85:1b:6a:b8:23:09:ae:
                    ce:c9:63:05:ea:3b:fc:64:68:2e:0b:c1:2d:e5:07:
                    5f:df:44:91:c6:3f:5c:d0:99:65:bf:8e:ba:9c:90:
                    b8:d5:98:01:8e:d9:43:61:c3:84:f8:a2:ef:45:04:
                    aa:ac:58:e7:f3:d0:1c:ac:f6:1a:10:ca:ea:6e:5b:
                    01:97:a2:16:6a:13:62:be:29:d4:91:50:ab:e1:92:
                    72:08:02:27:7a:12:2f:45:fc:76:6d:a1:1f:e6:40:
                    b5:5e:9c:ef:3a:f3:13:14:da:4c:9f:63:4b:25:2c:
                    e5:c0:73:3e:6c:47:d5:3c:d1:45:40:87:9e:1e:a5:
                    37:c2:53:c0:d1:ce:25:7d:d3:d2:d5:1c:5c:7e:2a:
                    ea:53:27:7d:21:ce:02:6e:ab:41:ab:77:dc:61:2b:
                    b2:9c:d1:83:28:e2:c2:2d:21:62:89:c3:19:ed:8f:
                    f6:2a:92:81:d6:0b:eb:05:ca:d5:fc:ea:a1:56:db:
                    f4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CD:1B:75:49:62:D8:CC:F1:55:2B:6E:9B:2F:06:58:AF:28:C2:C6
            X509v3 Authority Key Identifier:
                keyid:17:7C:C1:F0:44:63:5C:DE:FD:DF:40:B7:8B:E5:9F:C1:7A:23:83:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/0/177CC1F044635CDEFDDF40B78BE59FC17A2383BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177CC1F044635CDEFDDF40B78BE59FC17A2383BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/0/323830343a353738383a633030303a3a2f33342d3334203d3e20323638303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5788:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         81:f2:31:26:69:85:a9:d8:7d:33:7b:40:5d:b3:a3:c7:ce:f2:
         ef:d5:af:92:3b:73:87:ac:9d:c3:df:54:6b:00:a2:f2:7d:d4:
         1d:2f:f8:51:74:75:a4:3a:ba:d3:73:cc:67:ac:b1:25:8f:38:
         25:66:88:9d:1a:8b:84:06:18:68:6f:0e:0a:7a:76:8a:4a:4a:
         42:d8:aa:12:8b:4e:da:08:1b:c4:af:10:ac:67:35:31:b6:e3:
         ab:dc:0f:20:d3:c7:54:b7:b8:31:33:9c:35:74:2c:01:10:8b:
         f9:e1:6f:20:da:3c:26:79:38:4a:eb:89:c7:c5:62:ba:7e:01:
         d1:c9:16:b8:f1:6d:3f:52:c7:32:3d:34:1b:1a:ae:42:79:db:
         77:bb:5f:21:03:a8:47:9f:75:52:63:ca:df:1f:7b:af:5f:9c:
         1d:76:38:c3:6f:64:71:17:c6:e1:3a:55:84:ea:d7:6a:6c:da:
         40:b7:e7:a7:ed:69:70:ab:b0:45:66:77:a3:a4:b7:67:e3:42:
         43:e1:82:ba:73:d9:b3:af:24:6b:e6:67:56:d1:e4:69:0d:7a:
         8f:41:39:1a:84:aa:e3:5e:47:7e:1f:b7:7f:3f:10:73:25:7d:
         c5:95:70:2e:20:f1:68:f2:68:da:f7:3b:62:b8:f6:4e:c3:f2:
         67:41:e7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org