Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/0/323830343a343334633a383030303a3a2f33332d3333203d3e20323637353631.roa
File:                     323830343a343334633a383030303a3a2f33332d3333203d3e20323637353631.roa (raw, json)
Hash identifier:          Gpb4T2TKNwQgkSIyHw8M2qUYYH2gUUU6TG9AbDahYHY=
Subject key identifier:   23:F2:7B:5A:72:54:F0:60:61:2D:E3:2D:FE:76:7E:10:C7:58:50:8E
Certificate issuer:       /CN=E4BB7B7EEFAB6DFDFD4441966045A23CF06D02E5
Certificate serial:       7EB35B977F329C6A097C77F3528BDD10AC3B0E82
Authority key identifier: E4:BB:7B:7E:EF:AB:6D:FD:FD:44:41:96:60:45:A2:3C:F0:6D:02:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E4BB7B7EEFAB6DFDFD4441966045A23CF06D02E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/0/323830343a343334633a383030303a3a2f33332d3333203d3e20323637353631.roa
Signing time:             Mon 04 Mar 2024 19:32:13 +0000
ROA not before:           Mon 04 Mar 2024 19:27:13 +0000
ROA not after:            Mon 03 Mar 2025 19:32:13 +0000
asID:                     267561
IP address blocks:        2804:434c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b3:5b:97:7f:32:9c:6a:09:7c:77:f3:52:8b:dd:10:ac:3b:0e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4BB7B7EEFAB6DFDFD4441966045A23CF06D02E5
        Validity
            Not Before: Mar  4 19:27:13 2024 GMT
            Not After : Mar  3 19:32:13 2025 GMT
        Subject: CN=23F27B5A7254F060612DE32DFE767E10C758508E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:80:60:71:23:13:13:b1:0e:66:74:e5:f5:c2:
                    31:32:1e:d2:95:75:4f:40:f8:f0:99:4d:75:2c:37:
                    b3:13:9a:12:06:53:92:a4:fc:11:f2:d8:95:29:38:
                    c6:f4:a0:87:83:1f:e5:40:07:59:e6:cb:40:f6:a6:
                    62:68:bd:1f:34:34:00:aa:91:e9:92:19:2d:c9:51:
                    d2:9d:67:e2:da:f9:d1:ab:a1:dd:d6:01:9d:d4:79:
                    1c:a3:4f:d5:0e:b7:a6:7e:a4:36:c3:2f:22:1f:af:
                    22:04:80:6c:6c:b4:1d:02:6c:1e:8e:c2:7a:4c:ec:
                    50:d5:ff:42:77:ee:31:14:e0:51:46:d3:87:a2:0e:
                    44:0a:8b:02:ab:de:ec:8f:5d:6a:13:3d:db:5a:f0:
                    f6:c7:db:a0:4f:9c:dd:6b:64:e5:99:90:5a:eb:c8:
                    b2:cc:de:23:23:ca:cc:41:5b:4e:94:52:4b:18:be:
                    ca:91:dd:3b:af:32:ee:f2:22:35:87:a6:57:58:e2:
                    1a:c0:f2:a1:8c:41:68:14:87:22:e4:57:a1:21:ab:
                    d0:09:59:08:a5:e6:72:83:cb:f4:11:de:28:64:b9:
                    ce:40:65:f9:9a:fe:0c:aa:f1:ce:2b:5a:ea:37:e7:
                    eb:ab:71:73:58:03:36:7b:f1:f9:1a:79:9e:f7:cb:
                    f3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F2:7B:5A:72:54:F0:60:61:2D:E3:2D:FE:76:7E:10:C7:58:50:8E
            X509v3 Authority Key Identifier:
                keyid:E4:BB:7B:7E:EF:AB:6D:FD:FD:44:41:96:60:45:A2:3C:F0:6D:02:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/0/E4BB7B7EEFAB6DFDFD4441966045A23CF06D02E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E4BB7B7EEFAB6DFDFD4441966045A23CF06D02E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/0/323830343a343334633a383030303a3a2f33332d3333203d3e20323637353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:434c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8d:96:33:b5:c5:31:2a:35:e2:50:b7:96:0c:a6:51:02:e1:12:
         bb:6d:e5:3a:6c:d3:93:b1:e0:0e:8b:54:29:fa:37:97:94:19:
         82:2d:b6:8b:34:8c:27:d1:f9:4f:25:90:f4:0c:bd:ca:36:da:
         60:b8:76:d5:a7:e3:fe:c0:3e:01:c8:75:17:71:95:d3:1c:8a:
         eb:17:08:29:7a:e1:5e:2f:d9:37:34:47:4b:9f:af:36:02:ea:
         d2:2a:51:45:ca:ad:37:dd:1d:df:d9:73:cc:6d:db:d0:99:2f:
         2e:ee:9c:79:4d:2e:52:68:81:0e:e0:de:7e:dd:73:89:e4:51:
         6d:4c:d2:9e:21:33:5b:cf:4a:82:17:2d:88:79:1d:7f:d0:a7:
         c4:53:b5:cb:47:a2:da:b5:d5:a0:e3:34:b7:b2:15:c0:91:dc:
         e2:d1:04:a0:83:c2:f5:65:e3:3d:42:14:1a:05:ea:37:93:1b:
         d5:28:87:70:81:26:0c:d0:7d:b0:32:da:4d:80:c2:95:59:01:
         71:32:9c:0e:45:45:30:09:8f:24:c0:18:52:70:02:20:36:44:
         b5:77:1b:94:e5:96:1e:93:82:ff:d5:96:76:73:da:f4:a7:8e:
         9b:62:3e:fe:34:06:48:80:ab:de:64:b5:c0:46:8a:e6:47:96:
         ea:1c:43:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org