Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4Eg9KnE3bCK82WrBusNbH9wd6Pe8QZVaACByEWhXQqG/0/323830343a356238633a3a2f33332d3333203d3e20323638383534.roa
File:                     323830343a356238633a3a2f33332d3333203d3e20323638383534.roa (raw, json)
Hash identifier:          L71EjFBEEZAijqcma5O0qtDo4EzXivi6couikkBEw4I=
Subject key identifier:   32:C9:DB:E7:E0:B3:5D:85:67:36:10:C5:93:F6:0A:33:A3:72:18:5C
Certificate issuer:       /CN=7BB6A1BE9B83789D0AA4CEA6F7BA3F6623DB841F
Certificate serial:       20F7F92DCCE1086093F04460F96D7F8B72ABE586
Authority key identifier: 7B:B6:A1:BE:9B:83:78:9D:0A:A4:CE:A6:F7:BA:3F:66:23:DB:84:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BB6A1BE9B83789D0AA4CEA6F7BA3F6623DB841F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4Eg9KnE3bCK82WrBusNbH9wd6Pe8QZVaACByEWhXQqG/0/323830343a356238633a3a2f33332d3333203d3e20323638383534.roa
Signing time:             Fri 10 Nov 2023 19:17:21 +0000
ROA not before:           Fri 10 Nov 2023 19:12:21 +0000
ROA not after:            Fri 08 Nov 2024 19:17:21 +0000
asID:                     268854
IP address blocks:        2804:5b8c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f7:f9:2d:cc:e1:08:60:93:f0:44:60:f9:6d:7f:8b:72:ab:e5:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BB6A1BE9B83789D0AA4CEA6F7BA3F6623DB841F
        Validity
            Not Before: Nov 10 19:12:21 2023 GMT
            Not After : Nov  8 19:17:21 2024 GMT
        Subject: CN=32C9DBE7E0B35D85673610C593F60A33A372185C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5d:dd:7f:b0:07:1c:a8:32:c6:e8:c2:76:ce:
                    1d:96:43:91:6c:3a:9e:2d:93:a7:52:7e:6f:5b:c6:
                    01:34:f1:83:43:32:92:07:6e:12:36:af:7a:82:4e:
                    3f:63:02:56:ec:fb:80:9e:ff:4f:b3:4e:cb:61:81:
                    72:c5:b4:de:48:6a:a2:bb:ea:30:e3:4d:36:54:9d:
                    99:bd:a7:a5:0b:72:c9:af:31:3c:5f:60:42:b2:26:
                    17:de:a9:a4:fb:48:b9:ca:0b:ee:ac:59:d9:58:0e:
                    fc:4c:02:a0:d2:59:0d:26:8e:fa:17:1c:fc:59:46:
                    02:7f:da:89:df:b7:12:10:38:76:53:8d:33:fb:77:
                    fb:6f:3b:15:59:e5:dc:5e:2a:a2:ca:e0:79:35:14:
                    80:d9:0d:4c:6a:5c:99:ec:7a:42:8e:83:b6:81:7d:
                    6e:c3:65:61:85:9d:34:40:38:1c:9a:04:84:bf:46:
                    02:93:6a:59:4b:73:d0:b5:0e:b5:31:9b:f8:75:94:
                    29:5a:9c:ec:2b:3b:b5:5d:79:57:9a:73:f8:80:d7:
                    e3:56:85:f3:d2:d9:80:49:bc:14:ad:d9:4b:1b:a9:
                    1f:e5:46:5d:44:16:73:48:06:58:c4:6d:dc:f0:2a:
                    dc:aa:87:47:4b:91:c2:45:59:9e:84:e9:e5:0d:04:
                    a8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C9:DB:E7:E0:B3:5D:85:67:36:10:C5:93:F6:0A:33:A3:72:18:5C
            X509v3 Authority Key Identifier:
                keyid:7B:B6:A1:BE:9B:83:78:9D:0A:A4:CE:A6:F7:BA:3F:66:23:DB:84:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4Eg9KnE3bCK82WrBusNbH9wd6Pe8QZVaACByEWhXQqG/0/7BB6A1BE9B83789D0AA4CEA6F7BA3F6623DB841F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BB6A1BE9B83789D0AA4CEA6F7BA3F6623DB841F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4Eg9KnE3bCK82WrBusNbH9wd6Pe8QZVaACByEWhXQqG/0/323830343a356238633a3a2f33332d3333203d3e20323638383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b8c::/33

    Signature Algorithm: sha256WithRSAEncryption
         66:e9:59:2f:95:10:65:d1:53:13:f3:9c:4a:87:ae:1a:3c:ca:
         1a:32:ec:98:48:0b:56:a3:58:9b:c8:77:e8:79:68:9d:e7:fc:
         43:c0:2d:f3:27:24:d6:92:a2:ae:e3:22:f5:a8:8d:8a:47:cd:
         f8:a6:10:ba:22:95:98:b6:e8:74:d2:9b:8a:4f:df:e0:bb:9c:
         c0:f8:c1:f8:7a:b5:87:24:e5:75:76:81:2e:f0:b0:0a:4b:8f:
         75:a7:36:0b:6f:0a:92:b0:77:60:c8:0f:c1:03:8a:f7:e9:95:
         72:cd:d4:fa:9d:d9:ee:34:16:c8:d5:30:85:64:64:3d:23:6c:
         40:ec:07:53:ac:3d:0f:b8:6f:2c:77:d5:c1:45:0e:a1:3b:6e:
         13:ff:44:08:93:44:62:4c:2d:59:12:81:30:e9:d6:ee:9b:a0:
         49:28:35:bf:96:02:a3:d9:e5:8a:56:8a:af:3e:ac:f0:eb:b0:
         6e:bc:72:19:34:71:32:39:6a:ef:75:fe:da:5a:9d:95:7f:df:
         ba:38:9c:7a:3d:82:5c:ea:6e:e2:ce:e5:e3:c7:74:05:4c:ff:
         15:e7:76:b1:8c:39:06:fe:46:ca:da:e4:cf:ce:1b:6b:fc:fa:
         3e:61:4b:80:99:d1:07:8b:7b:6b:e7:78:78:09:49:b2:11:99:
         37:cd:e3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org