Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/323830343a333330343a323030313a3a2f34382d3438203d3e20323635313131.roa
File:                     323830343a333330343a323030313a3a2f34382d3438203d3e20323635313131.roa (raw, json)
Hash identifier:          l+nbgq8QAKywPcCBFPENwvAU+Co+CFAgxpaVq0Mw6OY=
Subject key identifier:   75:E8:15:A5:51:04:19:C1:83:C7:72:82:2E:F9:FA:5B:B2:AA:2D:23
Certificate issuer:       /CN=03D0BB3196FA38806A8E301A208B9222BAE61FDB
Certificate serial:       7FF373F3459D50BB0DA728F9B7CB2C099F7BE344
Authority key identifier: 03:D0:BB:31:96:FA:38:80:6A:8E:30:1A:20:8B:92:22:BA:E6:1F:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03D0BB3196FA38806A8E301A208B9222BAE61FDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/323830343a333330343a323030313a3a2f34382d3438203d3e20323635313131.roa
Signing time:             Mon 03 Apr 2023 17:41:49 +0000
ROA not before:           Mon 03 Apr 2023 17:36:49 +0000
ROA not after:            Mon 01 Apr 2024 17:41:49 +0000
asID:                     265111
IP address blocks:        2804:3304:2001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f3:73:f3:45:9d:50:bb:0d:a7:28:f9:b7:cb:2c:09:9f:7b:e3:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03D0BB3196FA38806A8E301A208B9222BAE61FDB
        Validity
            Not Before: Apr  3 17:36:49 2023 GMT
            Not After : Apr  1 17:41:49 2024 GMT
        Subject: CN=75E815A5510419C183C772822EF9FA5BB2AA2D23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:0c:10:a2:5e:c3:8d:f5:74:34:44:55:1c:91:
                    bd:eb:cc:3a:4c:31:dd:c7:27:57:95:10:e8:9a:b3:
                    b9:38:b7:ca:9e:7e:9d:69:8a:c5:06:e7:8c:36:bc:
                    e2:dd:b6:f6:ab:c3:61:4c:45:67:5f:9d:02:9a:4c:
                    aa:a3:50:51:39:04:13:04:30:bd:41:53:c5:0c:c7:
                    82:9c:a0:4e:1f:75:aa:ea:48:57:34:d1:74:22:d6:
                    26:47:eb:c8:54:20:17:fc:47:5e:72:44:cc:04:55:
                    e4:e8:3e:b6:05:23:81:14:ac:97:e4:5d:76:97:e7:
                    ee:da:b2:94:e0:e7:24:af:20:f1:88:59:f8:f1:56:
                    b3:ee:9c:c7:c0:c9:7b:6f:56:56:ce:89:44:cb:dd:
                    0a:53:af:be:ab:74:f5:18:a3:b7:07:eb:c3:17:3e:
                    69:b3:7a:c9:fa:ae:5f:50:d3:84:cf:f6:c4:60:dc:
                    15:e2:c3:09:6b:f9:de:85:df:08:c0:99:ed:02:d8:
                    45:3a:a4:f5:be:5b:31:43:27:cb:72:62:a1:cc:de:
                    31:50:29:97:86:c6:b3:0f:db:50:6d:f6:13:85:67:
                    32:9b:a1:3e:dd:2f:a3:9f:d7:24:1c:b5:db:c6:7c:
                    15:d5:49:3e:bf:4c:47:37:ee:55:63:c1:a7:12:71:
                    d6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E8:15:A5:51:04:19:C1:83:C7:72:82:2E:F9:FA:5B:B2:AA:2D:23
            X509v3 Authority Key Identifier:
                keyid:03:D0:BB:31:96:FA:38:80:6A:8E:30:1A:20:8B:92:22:BA:E6:1F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/03D0BB3196FA38806A8E301A208B9222BAE61FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03D0BB3196FA38806A8E301A208B9222BAE61FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/323830343a333330343a323030313a3a2f34382d3438203d3e20323635313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3304:2001::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:83:4f:73:4c:65:e5:39:51:03:48:48:d9:10:93:93:18:93:
         d3:be:dc:62:a2:c1:39:21:19:99:b6:a8:9a:c5:3b:be:2e:89:
         ba:5e:32:c1:fd:6a:ec:e4:c3:e6:87:cc:12:32:c3:34:69:65:
         2d:f4:05:18:bd:46:06:b8:a5:76:d9:bb:7b:85:28:b0:c8:7e:
         a0:78:7a:72:a6:69:eb:e9:8f:46:cd:19:a3:d0:78:db:a4:12:
         c3:57:e6:c5:fd:7f:22:dd:4d:31:8f:2d:a8:e8:69:b2:9c:d1:
         2e:83:3b:26:01:36:a1:24:ec:ad:54:63:aa:51:f3:39:07:c7:
         a5:38:1a:62:dd:fb:09:0c:45:28:87:77:00:32:2f:6d:49:34:
         81:28:57:91:76:2e:cd:91:14:00:d2:9d:3c:ee:a8:5d:29:38:
         d9:35:d7:5a:49:60:8c:5a:3b:fa:a6:71:f9:3b:b9:da:65:31:
         15:07:92:6f:78:19:52:fb:14:f3:8c:a5:44:0e:36:eb:9a:a6:
         e0:39:1f:34:7b:a2:6a:2c:f0:16:39:c8:8e:26:30:0a:92:bd:
         50:0f:2f:0f:c9:97:06:18:a7:d7:d7:af:db:2e:de:fe:f2:40:
         a4:82:7c:cd:0f:a1:f3:9f:94:0f:a6:16:01:c6:85:9c:10:8b:
         c3:2a:e4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org