Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/323830343a386566383a343030303a3a2f33342d3334203d3e20323733343539.roa
File:                     323830343a386566383a343030303a3a2f33342d3334203d3e20323733343539.roa (raw, json)
Hash identifier:          oI4SMWrEZ7DZ+f6lQD5EkeQh5VsxKgiCvNCijFoKWFg=
Subject key identifier:   FD:D5:2C:AE:44:21:83:A7:AB:B4:7B:15:64:2C:0D:98:8F:2A:A4:9B
Certificate issuer:       /CN=7290B7A0179E2C55CDBEA9434D1E9E612E4A52B7
Certificate serial:       98113EE14E3D30BDB89E1465819C43A804C199
Authority key identifier: 72:90:B7:A0:17:9E:2C:55:CD:BE:A9:43:4D:1E:9E:61:2E:4A:52:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7290B7A0179E2C55CDBEA9434D1E9E612E4A52B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/323830343a386566383a343030303a3a2f33342d3334203d3e20323733343539.roa
Signing time:             Mon 04 Mar 2024 23:45:11 +0000
ROA not before:           Mon 04 Mar 2024 23:40:11 +0000
ROA not after:            Mon 03 Mar 2025 23:45:11 +0000
asID:                     273459
IP address blocks:        2804:8ef8:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            98:11:3e:e1:4e:3d:30:bd:b8:9e:14:65:81:9c:43:a8:04:c1:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7290B7A0179E2C55CDBEA9434D1E9E612E4A52B7
        Validity
            Not Before: Mar  4 23:40:11 2024 GMT
            Not After : Mar  3 23:45:11 2025 GMT
        Subject: CN=FDD52CAE442183A7ABB47B15642C0D988F2AA49B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:63:16:a3:5b:71:39:2c:69:57:51:07:11:67:
                    bd:ad:72:db:96:a3:74:be:78:62:b9:46:45:84:c8:
                    55:f9:9e:4c:33:aa:f3:e8:94:80:28:cd:ec:99:61:
                    10:f6:ad:a8:34:0a:5a:d3:ea:ca:87:75:be:3c:40:
                    d6:dd:39:69:57:14:b0:2d:93:d4:d3:1d:c0:8f:94:
                    4a:58:e7:82:43:5c:ac:b3:a0:37:0e:ee:46:af:7a:
                    37:e8:0a:7c:16:6a:53:97:11:98:82:08:f1:76:76:
                    81:25:b7:04:b8:2c:1c:97:99:7e:ce:d7:f5:4c:a1:
                    8e:6a:82:ab:4f:0c:48:c7:4e:56:03:95:1e:7b:a6:
                    ff:6d:d0:dd:4f:5e:ed:f7:96:bc:91:ef:21:da:ad:
                    92:5f:4b:75:ee:7c:a4:07:f0:5d:dc:07:6c:17:e9:
                    5c:0d:79:f7:da:d9:56:40:7e:9b:5f:ad:37:cd:bc:
                    bf:6f:fb:bf:fd:b3:b3:66:71:ef:00:61:3d:fb:6d:
                    78:3b:ce:73:d6:7d:53:3f:dc:c0:ff:ce:10:52:87:
                    a0:51:09:e3:12:0c:56:3c:e9:f9:06:cc:5f:13:d1:
                    72:1a:c6:2a:09:70:77:0f:aa:b0:87:b6:d9:69:c7:
                    b8:82:8c:a5:63:80:96:70:09:1a:a6:45:e4:e4:9c:
                    c4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D5:2C:AE:44:21:83:A7:AB:B4:7B:15:64:2C:0D:98:8F:2A:A4:9B
            X509v3 Authority Key Identifier:
                keyid:72:90:B7:A0:17:9E:2C:55:CD:BE:A9:43:4D:1E:9E:61:2E:4A:52:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/7290B7A0179E2C55CDBEA9434D1E9E612E4A52B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7290B7A0179E2C55CDBEA9434D1E9E612E4A52B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/323830343a386566383a343030303a3a2f33342d3334203d3e20323733343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ef8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         02:23:a1:41:6f:02:7d:8a:f2:aa:8f:c0:46:6a:a8:9b:15:b1:
         2a:e9:ba:b0:26:26:36:e5:5b:e4:2a:a2:99:25:22:0e:b6:c6:
         d0:6f:21:bd:d6:cb:87:60:f9:be:52:3d:0b:3f:5f:1a:25:55:
         79:42:11:dc:a0:bf:10:a5:70:d0:07:70:95:e7:6e:7c:e9:50:
         43:7c:11:6b:81:b5:43:2a:b8:90:e4:cb:44:32:a2:4b:44:ec:
         be:bf:da:0e:5e:31:c3:39:13:d9:93:1e:89:fa:c0:05:21:21:
         77:e8:7a:38:4e:da:d1:59:29:9b:89:db:f4:61:35:4b:06:ce:
         f9:55:16:ab:bb:3f:56:66:cb:29:b8:da:65:24:48:ac:8f:89:
         0f:5a:91:c0:d0:00:8c:d5:36:32:e9:05:98:b3:8d:19:3a:cf:
         d1:aa:87:2d:df:9b:60:4e:1a:51:67:98:5e:e3:b8:d7:67:31:
         80:66:16:8c:a6:30:95:e0:8f:59:4c:0d:c8:7e:9b:d9:37:ed:
         ae:ef:1b:57:b7:a6:4b:5b:f4:fc:a9:b4:25:b2:c5:50:5b:82:
         5b:7c:bf:b4:5e:12:51:99:bd:c5:68:ff:66:86:a7:ee:25:f2:
         23:3c:d0:d6:df:2b:76:5a:e2:8b:f5:3b:b1:08:1a:e5:57:5c:
         b7:0f:b7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org