Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/0/323830343a386133343a3a2f33382d3338203d3e20323733363534.roa
File:                     323830343a386133343a3a2f33382d3338203d3e20323733363534.roa (raw, json)
Hash identifier:          VJAxmmiLX6Rzyq4cEV8sW98RAW0uBLVG/LTS7FjpZAU=
Subject key identifier:   50:51:70:BA:80:B6:47:B6:7D:41:07:0E:B7:8C:78:7A:53:95:1E:B9
Certificate issuer:       /CN=489A4EF4D133DC9A829FC327FFED5038FD2206A5
Certificate serial:       7F73299DAD5979AEB289A04D5EBB7A02AA528696
Authority key identifier: 48:9A:4E:F4:D1:33:DC:9A:82:9F:C3:27:FF:ED:50:38:FD:22:06:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/489A4EF4D133DC9A829FC327FFED5038FD2206A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/0/323830343a386133343a3a2f33382d3338203d3e20323733363534.roa
Signing time:             Mon 11 Sep 2023 12:48:28 +0000
ROA not before:           Mon 11 Sep 2023 12:43:28 +0000
ROA not after:            Mon 09 Sep 2024 12:48:28 +0000
asID:                     273654
IP address blocks:        2804:8a34::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:73:29:9d:ad:59:79:ae:b2:89:a0:4d:5e:bb:7a:02:aa:52:86:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=489A4EF4D133DC9A829FC327FFED5038FD2206A5
        Validity
            Not Before: Sep 11 12:43:28 2023 GMT
            Not After : Sep  9 12:48:28 2024 GMT
        Subject: CN=505170BA80B647B67D41070EB78C787A53951EB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a2:fc:b4:f7:ba:0b:77:a1:e7:e5:21:c9:e0:
                    19:c8:7c:de:63:a2:75:49:22:2a:fc:20:37:32:9d:
                    27:61:68:53:90:2f:7a:0f:28:8a:6b:bd:45:4e:96:
                    e3:c1:4c:69:71:bd:22:42:ec:49:a0:61:5b:05:32:
                    2f:67:d3:86:46:23:b5:2c:60:93:69:f0:7a:12:20:
                    e5:4b:33:cd:01:61:4d:18:16:a4:b7:c4:78:8b:a8:
                    ee:ca:5e:73:97:33:07:2f:99:ba:fb:89:ff:7f:fe:
                    b2:b4:1e:32:aa:82:b3:6f:5b:d8:37:13:80:5b:c9:
                    cc:f4:96:97:c0:b3:fe:5d:b4:da:ba:9c:e5:65:95:
                    d7:ed:21:ff:96:ea:da:e4:23:dc:96:e2:78:d9:2c:
                    27:b4:0d:fd:b8:8e:cf:75:90:9d:93:5e:4e:19:69:
                    85:53:fa:11:99:2e:15:1d:a9:65:8b:e4:d7:a3:65:
                    47:bd:4d:06:f2:04:cf:9b:fc:29:b2:2b:3e:13:9b:
                    5b:85:c9:fa:bb:ac:dd:ea:b1:b8:38:f3:95:d8:f0:
                    1a:52:e0:54:46:e6:23:e6:df:4c:ee:64:63:93:52:
                    53:df:1e:1f:71:7e:3d:b0:80:b9:6d:50:ec:a5:38:
                    62:47:8d:61:2f:e2:22:8b:63:98:40:65:fe:15:10:
                    18:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:51:70:BA:80:B6:47:B6:7D:41:07:0E:B7:8C:78:7A:53:95:1E:B9
            X509v3 Authority Key Identifier:
                keyid:48:9A:4E:F4:D1:33:DC:9A:82:9F:C3:27:FF:ED:50:38:FD:22:06:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/0/489A4EF4D133DC9A829FC327FFED5038FD2206A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/489A4EF4D133DC9A829FC327FFED5038FD2206A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/0/323830343a386133343a3a2f33382d3338203d3e20323733363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a34::/38

    Signature Algorithm: sha256WithRSAEncryption
         3a:e8:a3:4f:26:81:b9:d0:35:89:b3:bc:11:d9:4b:c7:f3:d3:
         c8:bd:88:b8:58:e6:21:00:ba:4a:72:f5:c7:50:40:65:51:9e:
         75:2f:b4:d8:3a:1b:de:1c:44:2c:de:4b:86:ea:2b:87:e5:5f:
         7a:a2:9a:ab:05:2c:ae:7f:cb:e2:0a:70:71:be:e2:ac:2e:6f:
         a7:ed:65:d8:e1:15:71:e5:7c:e9:77:6c:97:29:c4:f3:8b:18:
         c6:99:24:44:85:12:0f:cd:92:3a:90:89:ec:ed:a5:fe:b0:61:
         5a:00:7e:53:db:d2:1a:be:52:6e:79:66:b1:cf:15:f0:ff:56:
         e8:6f:ce:3a:f9:5e:be:67:7a:ef:f0:60:24:ff:b8:93:54:eb:
         1f:ec:7f:b1:81:d1:eb:aa:22:b8:ff:4d:bc:a5:51:91:87:f0:
         2c:50:31:46:0f:0a:3b:26:ad:74:a9:33:9e:41:15:b9:9c:98:
         f6:38:29:b1:30:5d:cc:33:26:88:86:f3:e0:ab:54:ca:71:b7:
         dc:45:94:a1:0f:d3:17:a5:32:97:76:4c:20:0c:7d:15:a5:f6:
         9b:0b:bd:fb:3d:ee:b0:85:bf:8a:9e:e4:65:44:0d:9e:d1:d1:
         04:96:f5:a5:68:3e:a6:16:a6:82:61:1e:24:64:c8:bd:02:0b:
         fb:60:18:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:10 2024 by rpki-client on console-fra.rpki-client.org