Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/323830343a64303a3a2f33322d3438203d3e203238313435.roa
File:                     323830343a64303a3a2f33322d3438203d3e203238313435.roa (raw, json)
Hash identifier:          BeYkia69TzfQIT2FpSvcaxGrT5tm7PGjViANHhxSzMU=
Subject key identifier:   2E:8C:63:31:D4:3F:2F:A5:4D:0C:96:99:FF:48:91:1D:EF:47:A8:D2
Certificate issuer:       /CN=791B8D485A23826792942D3A94738A4EE7360CFA
Certificate serial:       4688BC57B08ADFAC3BD425D090FF774741948C61
Authority key identifier: 79:1B:8D:48:5A:23:82:67:92:94:2D:3A:94:73:8A:4E:E7:36:0C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/791B8D485A23826792942D3A94738A4EE7360CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/323830343a64303a3a2f33322d3438203d3e203238313435.roa
Signing time:             Sun 29 Oct 2023 13:38:22 +0000
ROA not before:           Sun 29 Oct 2023 13:33:22 +0000
ROA not after:            Sun 27 Oct 2024 13:38:22 +0000
asID:                     28145
IP address blocks:        2804:d0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:88:bc:57:b0:8a:df:ac:3b:d4:25:d0:90:ff:77:47:41:94:8c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=791B8D485A23826792942D3A94738A4EE7360CFA
        Validity
            Not Before: Oct 29 13:33:22 2023 GMT
            Not After : Oct 27 13:38:22 2024 GMT
        Subject: CN=2E8C6331D43F2FA54D0C9699FF48911DEF47A8D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:bc:1b:36:fe:3c:1e:c0:4e:27:45:7a:18:80:
                    44:c3:ca:4c:f6:6f:98:85:af:29:2e:17:fc:bc:4c:
                    9c:1d:71:2a:39:5a:e4:08:31:19:37:0e:4c:76:02:
                    9c:fa:36:59:a9:6d:f5:b6:1b:ea:9f:37:b9:ca:70:
                    2c:58:11:c6:8d:56:2f:4c:4b:66:1d:83:f5:87:01:
                    95:1e:77:2f:98:3e:bf:3e:f7:24:a2:03:ba:cb:18:
                    7c:d1:99:a0:c4:46:52:6d:d4:a8:5b:88:a3:20:d0:
                    20:27:83:24:58:f1:d6:7c:ee:f5:76:37:a2:2f:c2:
                    b1:3c:3c:db:30:c7:ba:28:44:33:72:b9:4d:c6:78:
                    08:95:89:14:24:3b:68:f6:2d:72:d8:98:26:5d:f9:
                    da:5e:13:f6:a8:d6:f3:5b:83:e4:4b:42:3c:be:be:
                    32:26:41:cd:be:7c:50:39:ca:ac:30:ed:f2:78:0b:
                    c9:b8:8f:58:ba:b9:88:c3:36:78:e0:90:46:b4:be:
                    a5:67:9c:43:de:f2:4f:92:41:7a:3c:98:be:83:b1:
                    17:40:30:85:d6:d1:cc:50:cb:26:d1:a5:57:12:86:
                    10:4d:9c:40:86:8d:51:02:ba:59:2c:66:d0:d3:dc:
                    7f:6e:b4:cd:83:ce:20:c1:e0:ac:c0:2f:af:32:59:
                    5f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8C:63:31:D4:3F:2F:A5:4D:0C:96:99:FF:48:91:1D:EF:47:A8:D2
            X509v3 Authority Key Identifier:
                keyid:79:1B:8D:48:5A:23:82:67:92:94:2D:3A:94:73:8A:4E:E7:36:0C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/791B8D485A23826792942D3A94738A4EE7360CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/791B8D485A23826792942D3A94738A4EE7360CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/323830343a64303a3a2f33322d3438203d3e203238313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:1b:92:27:3b:3d:31:59:07:43:78:dc:42:b0:43:d5:5c:eb:
         12:ee:1e:22:d0:86:27:f2:77:c8:c1:af:72:99:04:ca:58:1b:
         02:2d:ea:b3:23:58:87:34:59:84:4d:36:ad:f3:bc:d3:b4:6b:
         bb:cf:ad:ba:8f:50:6f:9a:25:0b:e7:f7:99:e3:c2:39:a4:29:
         1c:d8:b3:8c:66:77:f1:05:36:12:38:59:03:04:a2:01:d5:4c:
         f9:27:b1:44:48:38:8f:38:07:e3:aa:0c:e4:37:27:be:66:66:
         88:83:46:0a:7d:d3:8d:47:78:f6:1c:ee:78:c4:10:fa:6b:1a:
         0e:3a:86:e0:64:0c:b7:e2:29:f6:cb:74:fd:53:a1:14:bd:fd:
         c9:12:12:df:02:41:2f:34:be:54:33:16:7e:6d:71:25:04:f3:
         35:e0:5b:a0:4c:ad:f8:3e:b0:76:30:4c:a8:5a:dc:88:99:4f:
         09:b6:9c:ac:ff:86:12:36:c4:7b:d5:da:16:7b:db:48:6a:fc:
         45:84:da:1b:01:f4:3b:c4:86:aa:99:59:bd:a0:eb:2d:37:7a:
         aa:6a:1a:9c:9c:82:c9:33:89:ba:07:c9:2b:26:a6:0c:97:a3:
         1e:69:a5:d6:02:f1:09:59:29:3a:25:37:c1:fb:8e:2b:24:80:
         37:82:85:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org