Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/323830343a373936633a3a2f33322d3332203d3e20323731333034.roa
File:                     323830343a373936633a3a2f33322d3332203d3e20323731333034.roa (raw, json)
Hash identifier:          CqywqyhyQ19JsDLkIUq9tbzGr/F8j3K0QwcXS/mjBE4=
Subject key identifier:   18:E3:1A:52:DC:18:05:D4:18:2D:A9:3C:FC:CA:86:37:AB:E1:53:E2
Certificate issuer:       /CN=DF1BF4C8AF5714489FC67733E3835BAE3260825C
Certificate serial:       3E2E02B624BA148DA0ED62B71AEE7385468CAAFC
Authority key identifier: DF:1B:F4:C8:AF:57:14:48:9F:C6:77:33:E3:83:5B:AE:32:60:82:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF1BF4C8AF5714489FC67733E3835BAE3260825C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/323830343a373936633a3a2f33322d3332203d3e20323731333034.roa
Signing time:             Thu 13 Jul 2023 23:00:00 +0000
ROA not before:           Thu 13 Jul 2023 22:55:00 +0000
ROA not after:            Thu 11 Jul 2024 23:00:00 +0000
asID:                     271304
IP address blocks:        2804:796c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:2e:02:b6:24:ba:14:8d:a0:ed:62:b7:1a:ee:73:85:46:8c:aa:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF1BF4C8AF5714489FC67733E3835BAE3260825C
        Validity
            Not Before: Jul 13 22:55:00 2023 GMT
            Not After : Jul 11 23:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:49:d6:ce:3b:a6:7c:4e:e9:3a:75:88:6a:fd:
                    80:7f:9d:bf:fc:eb:80:15:c9:34:62:be:90:08:f2:
                    54:26:84:ff:50:f0:84:dd:84:78:7c:33:1e:0b:64:
                    9e:db:09:dc:69:e7:3a:2a:c9:09:b2:18:52:79:e3:
                    3b:0f:20:79:cf:d4:9e:53:d7:d1:8d:f1:68:28:9d:
                    b4:f8:28:b3:d5:4b:4a:79:c2:a1:b1:10:98:81:59:
                    cf:d9:42:77:d0:06:3e:1c:b6:63:a3:9a:55:42:74:
                    18:af:6f:55:13:6b:41:16:8b:ab:b3:33:8b:bb:bb:
                    e9:58:3f:17:4d:20:23:2e:a6:dd:24:2c:45:6e:dd:
                    81:f2:47:9c:4a:a5:d4:67:ed:6f:fb:7a:a9:c7:20:
                    0a:4d:ca:ff:22:d4:83:aa:55:98:0a:6c:5e:ae:c6:
                    13:ab:e2:24:e9:ea:38:16:9f:8b:98:62:17:b4:64:
                    2e:6e:b1:60:9d:6b:a4:d6:42:f0:c3:6b:07:54:76:
                    24:a9:9f:89:71:11:65:ed:1e:6f:c6:d0:94:0d:6b:
                    67:95:89:3c:58:e8:34:e3:bf:26:8d:92:3f:9c:82:
                    f1:1b:12:7f:ba:c7:1e:46:03:a1:af:b0:88:4c:05:
                    77:18:46:fd:d4:5c:d4:ab:04:c8:f4:83:1c:66:9f:
                    11:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E3:1A:52:DC:18:05:D4:18:2D:A9:3C:FC:CA:86:37:AB:E1:53:E2
            X509v3 Authority Key Identifier:
                keyid:DF:1B:F4:C8:AF:57:14:48:9F:C6:77:33:E3:83:5B:AE:32:60:82:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/DF1BF4C8AF5714489FC67733E3835BAE3260825C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF1BF4C8AF5714489FC67733E3835BAE3260825C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/323830343a373936633a3a2f33322d3332203d3e20323731333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:796c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:4e:e7:42:dd:13:4c:4f:27:ed:69:5d:49:8c:10:37:8c:dc:
         af:c1:e4:0e:fc:50:41:40:c2:41:ea:cc:97:11:40:99:f7:18:
         81:68:5a:76:57:ae:56:f5:db:d5:d2:dc:ae:b3:5f:e4:d5:d2:
         cb:2b:39:15:ed:d1:ce:b9:bf:43:30:53:31:6c:d5:b6:23:29:
         92:a5:4b:bd:98:b8:fa:17:79:71:55:7f:d1:91:b5:50:bf:76:
         bb:8a:00:68:da:9e:64:c9:85:50:28:8f:08:dc:eb:16:6b:95:
         f2:8e:63:89:12:c3:b2:ee:af:dc:a6:71:51:28:e8:e3:68:bd:
         74:b6:1e:1b:0f:cd:06:85:3d:cc:8a:ea:9e:a0:1e:e4:3f:87:
         13:ec:03:2b:03:48:ac:88:87:48:22:45:0a:0b:f6:50:a2:eb:
         69:f8:d8:b1:fd:bc:ba:13:e7:79:35:a0:26:89:f3:1f:55:9b:
         a4:97:b8:69:6b:dd:06:53:8c:ff:11:a9:b0:c4:dd:dd:6a:b6:
         d2:67:b1:8f:6c:b5:77:87:f4:26:88:3e:f2:7f:2d:f3:e7:84:
         b0:fd:1e:7c:2a:7f:0d:9c:14:11:55:60:d1:77:49:f3:ca:3d:
         e8:46:a2:87:22:72:8b:8f:45:03:35:98:17:d4:4a:02:e6:3f:
         b3:54:e8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org