Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/1/323830343a363931343a3a2f33322d3438203d3e20323730323437.roa
File:                     323830343a363931343a3a2f33322d3438203d3e20323730323437.roa (raw, json)
Hash identifier:          ik+svsqKkbrrrvhgBQu83yMiflWhYAwJ+O8xQ3qIcDU=
Subject key identifier:   9A:AD:78:74:49:E1:66:D7:AC:6F:F1:DF:04:3D:A8:A2:DE:5D:48:4D
Certificate issuer:       /CN=7D387AC57CAC3C5F07D3053B964DFBBBAD73BF1B
Certificate serial:       5A2B132E829656332436DA73F0C711BD64D19F4D
Authority key identifier: 7D:38:7A:C5:7C:AC:3C:5F:07:D3:05:3B:96:4D:FB:BB:AD:73:BF:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D387AC57CAC3C5F07D3053B964DFBBBAD73BF1B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/1/323830343a363931343a3a2f33322d3438203d3e20323730323437.roa
Signing time:             Wed 10 Apr 2024 13:19:27 +0000
ROA not before:           Wed 10 Apr 2024 13:14:27 +0000
ROA not after:            Wed 09 Apr 2025 13:19:27 +0000
asID:                     270247
IP address blocks:        2804:6914::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:2b:13:2e:82:96:56:33:24:36:da:73:f0:c7:11:bd:64:d1:9f:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D387AC57CAC3C5F07D3053B964DFBBBAD73BF1B
        Validity
            Not Before: Apr 10 13:14:27 2024 GMT
            Not After : Apr  9 13:19:27 2025 GMT
        Subject: CN=9AAD787449E166D7AC6FF1DF043DA8A2DE5D484D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:21:95:c9:00:f2:6e:5f:cf:ef:b4:bd:b0:98:
                    dd:63:34:e3:ef:86:04:5c:a0:61:2d:55:8c:a2:52:
                    f7:3d:8c:0b:a9:bc:74:a2:19:40:35:57:84:61:20:
                    16:e0:87:2a:c8:2f:7f:4f:a2:c3:d5:b1:94:ff:c5:
                    29:17:5e:79:13:90:a5:5d:8f:20:f7:ce:73:ed:b5:
                    1e:12:b4:67:29:c5:4e:1e:c5:67:a0:be:84:ca:41:
                    b6:3d:49:67:8e:3b:dd:02:80:19:bc:7c:25:db:98:
                    eb:f1:09:c6:17:fc:b2:17:de:39:d6:9b:9f:93:58:
                    87:fb:3a:e9:67:08:4a:e7:54:70:4c:9b:6d:57:e6:
                    33:61:d2:39:31:4f:01:2b:fa:86:16:1a:22:32:47:
                    c5:f9:bf:b0:0f:18:f8:de:71:cf:92:ac:69:51:b5:
                    ad:0b:84:74:9d:d2:ab:fa:3d:6f:06:c1:45:2a:67:
                    5f:66:6d:3e:79:13:99:63:70:32:45:3a:5f:78:ea:
                    b6:19:47:0a:d0:d5:39:be:92:58:4a:ab:84:b4:d7:
                    7c:24:1b:be:dd:b8:cc:d5:9d:4a:94:33:a9:ba:c9:
                    34:fa:04:d6:71:ae:4d:d0:38:fc:ba:7a:e8:5f:9b:
                    ea:3d:ed:8e:84:72:74:89:69:6d:3b:48:06:18:b1:
                    5d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:AD:78:74:49:E1:66:D7:AC:6F:F1:DF:04:3D:A8:A2:DE:5D:48:4D
            X509v3 Authority Key Identifier:
                keyid:7D:38:7A:C5:7C:AC:3C:5F:07:D3:05:3B:96:4D:FB:BB:AD:73:BF:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/1/7D387AC57CAC3C5F07D3053B964DFBBBAD73BF1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D387AC57CAC3C5F07D3053B964DFBBBAD73BF1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/1/323830343a363931343a3a2f33322d3438203d3e20323730323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6914::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:6a:09:26:0b:04:2c:bb:7a:93:97:7a:4a:00:71:14:29:aa:
         8c:0d:0d:7c:2c:fc:13:1d:2d:4f:67:b2:ad:d4:26:e3:ab:6e:
         75:85:36:8d:91:2f:2a:66:67:92:05:f3:c2:7f:a5:43:69:94:
         9a:08:99:a3:d9:02:4d:e6:39:ff:fb:cf:62:02:af:88:5d:ac:
         e6:45:ab:d7:33:8d:10:f1:58:26:01:36:e3:2b:06:34:2d:27:
         97:dd:87:c0:99:1c:50:fc:81:64:f6:a1:6a:08:55:85:a0:e9:
         80:97:0e:ef:20:a2:65:b0:30:42:f5:a0:e0:7e:3c:ca:75:1e:
         0b:97:ae:19:fb:46:d3:89:96:31:72:a9:b1:53:47:20:ec:e9:
         f5:cb:5a:c8:20:e1:8c:57:5c:c5:3b:6d:e1:12:ed:06:51:60:
         97:f0:dd:b2:5b:44:62:de:20:21:f5:57:6d:f4:d0:b6:02:71:
         81:2f:29:2a:c6:57:41:ff:21:4e:06:23:79:26:a2:88:42:74:
         ad:61:3f:2c:9a:bc:fd:4f:3a:c5:3b:25:60:97:9a:e3:5e:75:
         4c:f3:de:74:52:c3:cb:a2:07:43:30:5d:c6:52:db:8b:c5:fd:
         0e:6b:1b:51:84:3d:6a:1d:20:11:06:3c:e7:4d:02:cb:c6:8e:
         14:67:b3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 13:46:32 2024 by rpki-client on console-fra.rpki-client.org