Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/0/323830343a323063383a3a2f33322d3335203d3e20323634353134.roa
File:                     323830343a323063383a3a2f33322d3335203d3e20323634353134.roa (raw, json)
Hash identifier:          /vv+/918zOTyyuti8PomrxwL+ltmbFuhtHO1eDLsnhg=
Subject key identifier:   72:3C:F2:C1:3D:EB:57:0C:22:8D:3C:37:19:16:19:2B:EB:AC:EC:FA
Certificate issuer:       /CN=A230333F7690F474E284A95BADD3D39F6C5CB9F3
Certificate serial:       79FF550235067A3A44F5230F2400793358397A81
Authority key identifier: A2:30:33:3F:76:90:F4:74:E2:84:A9:5B:AD:D3:D3:9F:6C:5C:B9:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A230333F7690F474E284A95BADD3D39F6C5CB9F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/0/323830343a323063383a3a2f33322d3335203d3e20323634353134.roa
Signing time:             Tue 17 Oct 2023 15:00:00 +0000
ROA not before:           Tue 17 Oct 2023 14:55:00 +0000
ROA not after:            Tue 15 Oct 2024 15:00:00 +0000
asID:                     264514
IP address blocks:        2804:20c8::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ff:55:02:35:06:7a:3a:44:f5:23:0f:24:00:79:33:58:39:7a:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A230333F7690F474E284A95BADD3D39F6C5CB9F3
        Validity
            Not Before: Oct 17 14:55:00 2023 GMT
            Not After : Oct 15 15:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:cf:8f:af:5e:5d:42:be:4e:20:38:7e:14:9c:
                    88:23:99:54:c1:91:81:ed:98:cf:70:74:62:de:bf:
                    1b:60:1a:2f:71:97:d7:c8:ac:c7:2b:88:52:2f:af:
                    c2:ec:e1:6f:80:b4:02:d4:e4:83:2b:87:34:23:bb:
                    6e:97:9e:63:cd:4b:87:af:c7:5c:5e:77:54:73:29:
                    d0:8c:3c:0c:57:b7:32:cb:68:02:d4:57:b6:a1:15:
                    98:a6:de:b9:62:d3:57:4a:07:df:bc:d1:e9:5b:4c:
                    04:36:b8:4c:4c:5d:e5:47:9c:43:de:97:1d:03:b0:
                    17:80:f3:38:09:83:ce:b3:f6:f6:31:1f:ca:2d:66:
                    47:19:a7:c3:94:99:2d:7a:88:df:8b:72:a2:8b:b2:
                    15:d5:09:ca:f7:1a:4e:e9:7f:6c:c4:1b:bf:cd:ce:
                    57:5a:dc:05:1a:ec:9c:8c:d3:c3:e1:01:67:82:72:
                    db:12:b2:cd:d8:e1:e7:37:4b:98:81:5e:d4:8d:41:
                    93:0e:34:d0:79:64:79:7d:2e:b4:b8:ce:1d:02:91:
                    cc:32:b8:07:c0:4b:7a:9b:e1:ea:7a:ff:ae:c7:7b:
                    14:87:e7:17:97:f2:a0:46:51:04:a2:26:21:d3:0f:
                    0b:81:04:ea:4b:53:26:40:a2:d6:94:c3:0f:58:18:
                    a9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3C:F2:C1:3D:EB:57:0C:22:8D:3C:37:19:16:19:2B:EB:AC:EC:FA
            X509v3 Authority Key Identifier:
                keyid:A2:30:33:3F:76:90:F4:74:E2:84:A9:5B:AD:D3:D3:9F:6C:5C:B9:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/0/A230333F7690F474E284A95BADD3D39F6C5CB9F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A230333F7690F474E284A95BADD3D39F6C5CB9F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/0/323830343a323063383a3a2f33322d3335203d3e20323634353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:6d:bf:0c:f7:a5:7b:06:5e:bd:a5:58:77:0b:53:89:00:ce:
         1b:e9:77:db:e9:9f:a6:13:27:64:b1:44:84:56:a7:0f:d0:02:
         62:0a:b7:14:91:5b:f0:03:47:95:93:4c:3f:a1:f3:4f:67:f6:
         e0:76:26:a8:1c:79:dc:1b:ce:f4:49:e7:e6:39:89:98:76:73:
         e8:0c:c8:e6:f1:78:24:be:b2:16:b1:d1:8c:6b:91:5d:1f:99:
         93:49:c3:77:b1:6b:a0:69:10:d9:8a:bb:a8:2f:41:e5:63:e3:
         de:50:ec:18:86:6d:1f:dc:8c:3b:e4:1b:8f:b9:45:a5:4e:f1:
         86:5f:7d:4b:2d:f1:dd:44:aa:92:e7:59:e6:0e:76:93:92:dc:
         9b:87:a6:24:3b:fd:05:38:df:6d:6c:13:ad:03:1e:f1:7c:4c:
         09:9b:28:83:97:20:b5:87:4b:34:13:6a:cb:d4:8f:0a:12:1d:
         d6:83:6d:c0:df:c9:c6:11:81:53:67:03:de:1f:3b:9d:72:aa:
         6f:55:d2:75:35:f8:90:00:2a:cb:27:5e:f1:ee:d4:e2:f6:35:
         98:23:73:27:78:5b:0a:a3:05:11:a2:26:83:67:dc:8d:5e:72:
         75:ed:f6:c4:91:d2:df:9b:1d:26:74:5e:45:6e:69:cb:83:b3:
         04:7a:64:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org