Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3oxFaTYGfTARJsi18ZHZXx1wt5vb8GjDSss7Z1G9sm2/0/323830343a6365383a3a2f33322d3332203d3e203532353734.roa
File:                     323830343a6365383a3a2f33322d3332203d3e203532353734.roa (raw, json)
Hash identifier:          fsO/PqrU1ogxYaWXQKJX6Z0h+yz73sHPMHWAXzRjR8w=
Subject key identifier:   EF:96:27:F2:0B:72:B8:EB:AC:A3:11:90:42:2B:B8:CB:E0:EF:14:68
Certificate issuer:       /CN=AF3951551819FDDD32AC038498170995A6E15E3C
Certificate serial:       098C8FCBAF026E54D6F560830E80E472C90FEC39
Authority key identifier: AF:39:51:55:18:19:FD:DD:32:AC:03:84:98:17:09:95:A6:E1:5E:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF3951551819FDDD32AC038498170995A6E15E3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3oxFaTYGfTARJsi18ZHZXx1wt5vb8GjDSss7Z1G9sm2/0/323830343a6365383a3a2f33322d3332203d3e203532353734.roa
Signing time:             Thu 10 Nov 2022 14:41:12 +0000
ROA not before:           Thu 10 Nov 2022 14:36:12 +0000
ROA not after:            Thu 09 Nov 2023 14:41:12 +0000
asID:                     52574
IP address blocks:        2804:ce8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:8c:8f:cb:af:02:6e:54:d6:f5:60:83:0e:80:e4:72:c9:0f:ec:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3951551819FDDD32AC038498170995A6E15E3C
        Validity
            Not Before: Nov 10 14:36:12 2022 GMT
            Not After : Nov  9 14:41:12 2023 GMT
        Subject: CN=EF9627F20B72B8EBACA31190422BB8CBE0EF1468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0b:c7:fb:07:95:ad:e5:71:a4:37:a8:8a:07:
                    74:27:c1:da:0b:81:c3:fb:e1:93:20:bd:af:b4:17:
                    4b:08:82:37:63:f3:1d:4c:d4:62:95:3e:2e:c8:f4:
                    2b:d3:4c:9b:7e:d6:91:1f:ea:69:da:c1:fc:81:9c:
                    00:ef:fe:df:0e:45:6d:63:9b:a1:b7:ac:0a:39:9b:
                    33:3f:1e:7e:4e:b0:84:b9:0f:aa:13:15:88:d0:15:
                    b3:c1:7a:1c:90:85:18:a5:f1:d3:34:13:eb:d3:c9:
                    eb:7e:6b:68:44:1f:da:4f:c3:a3:39:ac:84:e2:3d:
                    26:b2:e8:76:d7:61:6c:8d:cf:8b:55:8e:b1:7a:b7:
                    57:6c:15:ef:c5:07:e0:41:64:3e:fa:3a:c8:15:fa:
                    f7:c1:5e:80:41:41:a5:61:ae:5f:c1:75:fd:90:21:
                    43:70:62:bf:62:1b:04:fd:f4:7e:96:46:54:41:ed:
                    f4:8b:49:f8:06:a2:71:93:f5:88:09:01:7c:a6:5e:
                    93:83:70:16:e0:38:3b:c9:82:cb:d1:91:18:74:e2:
                    69:48:9d:ba:ea:f8:e4:02:bb:ac:c2:5a:21:32:89:
                    91:fe:5e:f6:4f:9c:3c:24:7a:2c:be:86:9a:cd:13:
                    6d:77:a3:f8:16:d2:81:ba:a2:40:c4:24:76:3b:49:
                    3b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:96:27:F2:0B:72:B8:EB:AC:A3:11:90:42:2B:B8:CB:E0:EF:14:68
            X509v3 Authority Key Identifier:
                keyid:AF:39:51:55:18:19:FD:DD:32:AC:03:84:98:17:09:95:A6:E1:5E:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3oxFaTYGfTARJsi18ZHZXx1wt5vb8GjDSss7Z1G9sm2/0/AF3951551819FDDD32AC038498170995A6E15E3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF3951551819FDDD32AC038498170995A6E15E3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3oxFaTYGfTARJsi18ZHZXx1wt5vb8GjDSss7Z1G9sm2/0/323830343a6365383a3a2f33322d3332203d3e203532353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ce8::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:f4:1c:48:21:77:7d:5a:15:68:06:e4:71:01:84:0a:c6:9b:
         81:22:8c:1f:99:db:01:cc:23:50:6c:fd:cc:7d:6f:51:dc:34:
         2b:8d:b0:32:bf:ac:d8:9c:79:c8:16:7a:b7:68:e7:44:19:40:
         68:17:31:3f:5a:c4:a1:1d:a2:94:d2:95:b5:d8:26:1b:22:d1:
         0d:4c:71:ab:b8:9e:ec:08:d8:67:9b:ea:89:30:23:73:21:93:
         a5:9b:b5:e1:e3:07:90:aa:66:cc:f7:8a:67:fd:0b:a1:44:af:
         6f:c7:42:fc:6b:24:ba:c6:3f:2f:ce:ff:d9:61:5d:f1:cf:8b:
         05:09:6c:ea:d5:26:4e:fa:75:1c:dd:ac:22:1b:6c:00:73:eb:
         21:b4:84:e2:0b:28:36:67:48:61:63:3b:5d:53:9b:75:af:16:
         b0:20:e9:03:8f:dd:fa:11:26:77:cd:c1:44:4f:8e:39:4a:44:
         e5:02:4a:4a:d4:01:21:11:3c:dd:0e:b7:63:38:64:78:a5:13:
         ad:83:c1:fd:f5:e3:8f:f5:2f:b3:08:40:51:28:41:6e:b4:ce:
         59:bd:59:39:1a:1a:ee:ff:e1:99:3b:d2:01:cc:ab:1b:53:d2:
         af:a1:29:a6:96:bb:cf:28:8c:5d:10:82:3a:7b:e4:eb:41:d1:
         bd:cb:9e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org