Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/323830343a316137633a3a2f33322d3334203d3e203631383632.roa
File:                     323830343a316137633a3a2f33322d3334203d3e203631383632.roa (raw, json)
Hash identifier:          wlBkZxbNFdKvnwpLpsP3cdSEkXw5om5592+LfGdfve0=
Subject key identifier:   07:85:5A:B1:1D:DA:F2:0C:5F:EA:33:E9:1A:48:F4:DA:71:AB:7D:FB
Certificate issuer:       /CN=E353CE4BE5E0399F71F65375C3CBEAF3B0BE0849
Certificate serial:       61723820C8676C039BF88301DC31DDF13F75C99B
Authority key identifier: E3:53:CE:4B:E5:E0:39:9F:71:F6:53:75:C3:CB:EA:F3:B0:BE:08:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E353CE4BE5E0399F71F65375C3CBEAF3B0BE0849.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/323830343a316137633a3a2f33322d3334203d3e203631383632.roa
Signing time:             Fri 12 Jan 2024 19:32:19 +0000
ROA not before:           Fri 12 Jan 2024 19:27:19 +0000
ROA not after:            Fri 10 Jan 2025 19:32:19 +0000
asID:                     61862
IP address blocks:        2804:1a7c::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:72:38:20:c8:67:6c:03:9b:f8:83:01:dc:31:dd:f1:3f:75:c9:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E353CE4BE5E0399F71F65375C3CBEAF3B0BE0849
        Validity
            Not Before: Jan 12 19:27:19 2024 GMT
            Not After : Jan 10 19:32:19 2025 GMT
        Subject: CN=07855AB11DDAF20C5FEA33E91A48F4DA71AB7DFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:37:44:80:7b:5c:71:2e:00:30:b1:0e:f1:a0:
                    63:54:1a:cd:99:2f:a3:fd:56:99:de:0c:bc:75:bd:
                    1c:92:f9:db:f9:f6:1b:90:83:fe:c1:0a:6b:81:1e:
                    d0:63:dd:f9:72:09:67:6e:41:af:31:d0:ea:cd:c8:
                    7b:29:f0:26:0c:5c:2f:bc:0e:8c:fb:dc:74:2b:9b:
                    51:90:72:16:7c:a2:0e:fa:68:d0:14:a6:0f:6a:de:
                    75:0c:99:02:07:50:2e:37:8a:49:0e:08:ef:58:6a:
                    bf:cb:75:b7:b2:f9:64:a3:1b:58:01:56:83:b4:48:
                    f2:66:15:e1:df:a9:8d:08:59:80:62:4c:17:32:f4:
                    7b:44:26:72:a4:bc:f4:3e:26:e7:44:33:0f:40:88:
                    b3:0c:57:d2:bf:d6:42:7f:1a:45:59:b2:f5:ea:ac:
                    54:8c:45:05:58:b4:c3:8d:62:97:59:c3:a2:fe:fd:
                    58:7f:52:30:9e:5e:86:67:a1:4d:60:ee:71:92:6f:
                    ff:4d:50:e9:2d:48:66:24:f9:0f:6e:23:84:ef:a3:
                    35:48:13:10:02:49:65:cf:a8:38:29:be:da:7b:69:
                    24:65:98:16:52:9d:df:5d:0f:41:4d:7c:46:50:1c:
                    c6:da:60:2e:3b:8b:e9:9e:f8:ed:26:47:79:30:30:
                    5c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:85:5A:B1:1D:DA:F2:0C:5F:EA:33:E9:1A:48:F4:DA:71:AB:7D:FB
            X509v3 Authority Key Identifier:
                keyid:E3:53:CE:4B:E5:E0:39:9F:71:F6:53:75:C3:CB:EA:F3:B0:BE:08:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/E353CE4BE5E0399F71F65375C3CBEAF3B0BE0849.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E353CE4BE5E0399F71F65375C3CBEAF3B0BE0849.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/323830343a316137633a3a2f33322d3334203d3e203631383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:1d:8a:62:93:2d:41:99:93:0e:23:91:82:ed:a8:6b:25:cd:
         7a:2c:e6:de:88:57:b4:04:18:7c:5e:93:87:8d:1f:48:32:84:
         68:73:16:2e:46:5f:a1:96:f7:bf:0b:8e:37:f5:20:14:ff:5b:
         15:98:48:11:dc:e0:31:38:09:ed:a4:45:a3:96:3c:a0:6a:ef:
         0c:c0:15:b3:9a:b3:16:8d:d1:32:98:98:7e:c3:cf:f0:d9:98:
         c6:2d:ec:95:b0:23:ed:6e:e6:6f:4d:e7:e1:c3:c8:c6:fe:b6:
         a6:77:8a:7c:67:a7:f6:7f:ed:43:e1:84:84:0f:a5:07:0b:02:
         43:46:33:8e:ca:24:4a:6e:52:82:04:c1:5a:ee:b6:61:46:51:
         95:ac:30:06:ff:f9:7a:45:31:53:63:1f:10:19:53:e2:4d:57:
         59:fa:a5:6c:59:3c:e5:ba:b7:e8:12:f7:9f:44:d4:3b:cf:71:
         91:08:cf:8e:75:ad:a2:f1:27:32:ab:95:ff:08:f1:c4:7d:13:
         90:83:c1:8e:fb:1a:88:16:1a:df:b7:72:f1:e1:32:2d:da:7c:
         52:80:6b:0b:9a:da:3c:95:cc:b6:37:ee:33:fd:12:25:f9:d6:
         1f:02:47:72:6a:5d:23:55:5f:69:25:0a:93:e3:a9:4d:7d:07:
         d7:cc:6c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org