Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/323830343a6233303a3a2f33332d3430203d3e203532373438.roa
File:                     323830343a6233303a3a2f33332d3430203d3e203532373438.roa (raw, json)
Hash identifier:          WsrmsqLNfmKNjmE9SPpqcPceiYtN0XB38H8/yXo85oI=
Subject key identifier:   B7:8E:30:FE:7C:5A:CB:6B:AB:64:7F:59:1E:D4:63:5F:84:B1:72:5B
Certificate issuer:       /CN=4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3
Certificate serial:       18E8F078FA06FDA6E8146253AAD3680610B30782
Authority key identifier: 4D:36:8C:FC:AB:18:A0:A4:14:A6:03:7F:BD:BB:76:28:6C:A3:EF:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/323830343a6233303a3a2f33332d3430203d3e203532373438.roa
Signing time:             Wed 17 May 2023 14:20:14 +0000
ROA not before:           Wed 17 May 2023 14:15:14 +0000
ROA not after:            Wed 15 May 2024 14:20:14 +0000
asID:                     52748
IP address blocks:        2804:b30::/33 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e8:f0:78:fa:06:fd:a6:e8:14:62:53:aa:d3:68:06:10:b3:07:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3
        Validity
            Not Before: May 17 14:15:14 2023 GMT
            Not After : May 15 14:20:14 2024 GMT
        Subject: CN=B78E30FE7C5ACB6BAB647F591ED4635F84B1725B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:0f:f0:cb:27:7b:1d:f6:06:f0:71:20:0c:62:
                    a4:d0:fc:af:e4:e6:72:af:4a:09:3b:aa:c1:c8:b1:
                    de:df:b9:bc:42:21:86:a0:39:d5:d2:b4:d2:9d:a0:
                    8b:24:c6:86:54:34:3b:51:1a:1a:9f:6e:24:1a:9a:
                    0a:05:98:49:1d:5b:00:44:c1:76:a0:45:e3:5d:85:
                    ac:89:c4:1b:1a:53:07:bd:1b:c6:d0:f8:4a:67:7e:
                    ff:80:a8:6d:02:ec:04:70:d2:2e:c6:70:36:10:3c:
                    63:13:e7:14:6e:d0:f9:12:af:86:c1:3d:2a:23:69:
                    90:07:a2:ce:c0:12:ad:87:83:ae:f2:52:41:bb:a5:
                    1a:cf:61:c6:e4:1a:14:c3:cd:93:0d:b8:67:4f:bb:
                    f4:38:b7:b0:fb:e9:a2:1c:b1:5b:1e:54:08:62:71:
                    71:93:16:34:ba:40:a0:3d:64:bd:9c:57:2e:b6:71:
                    ee:45:49:79:98:dd:6a:80:d9:16:4e:bf:21:99:0b:
                    eb:74:3f:53:71:f2:c7:65:33:93:40:d1:49:c6:12:
                    94:ed:30:f4:b9:37:c0:a5:c6:1b:5b:4d:36:51:93:
                    ef:6b:21:a9:e2:09:56:96:42:11:89:6f:b3:61:2d:
                    72:ab:22:87:ed:a6:b9:26:a2:42:18:af:0d:30:10:
                    f8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8E:30:FE:7C:5A:CB:6B:AB:64:7F:59:1E:D4:63:5F:84:B1:72:5B
            X509v3 Authority Key Identifier:
                keyid:4D:36:8C:FC:AB:18:A0:A4:14:A6:03:7F:BD:BB:76:28:6C:A3:EF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/323830343a6233303a3a2f33332d3430203d3e203532373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b30::/33

    Signature Algorithm: sha256WithRSAEncryption
         3e:9d:77:61:f3:91:0f:27:f8:3e:15:aa:0d:ed:10:d8:63:e8:
         e0:d7:dc:b8:bc:6f:b4:fe:a9:90:42:2b:67:aa:fd:01:29:11:
         a2:f2:78:77:df:80:f2:90:02:5c:43:2c:a9:ae:a2:0c:44:b8:
         06:ef:9f:ee:d9:1d:d0:7d:0c:03:e5:1d:ec:d1:69:aa:27:f9:
         96:14:35:62:5c:16:65:22:0f:74:7e:90:87:53:e5:21:c2:71:
         b7:6e:a6:95:3d:8f:4d:54:95:e2:87:b1:7e:ab:7c:c5:c2:b8:
         42:fe:98:56:89:76:76:8f:f2:c6:11:31:9f:cf:67:06:68:8d:
         34:e1:bd:44:14:2c:f6:0a:b0:bd:67:ec:78:e1:8a:61:f9:4a:
         af:28:0b:6d:43:05:74:51:01:2d:f0:81:11:e2:6a:ff:22:84:
         de:c7:95:5a:55:7d:1f:04:fb:96:93:0c:20:66:db:6c:58:67:
         4b:90:63:fd:8a:c7:47:b3:bb:52:c5:07:25:27:c8:1e:25:86:
         79:22:97:c6:63:84:b9:e7:04:89:eb:1d:30:97:1c:e2:0e:b3:
         cf:c1:56:a6:46:c1:df:27:91:8c:e6:86:4a:3e:21:2b:67:dc:
         c0:da:0a:30:de:01:dd:22:6c:2b:43:aa:13:11:24:7a:87:54:
         82:1a:2d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org