Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/323830343a336462633a3a2f33382d3338203d3e20323636353530.roa
File:                     323830343a336462633a3a2f33382d3338203d3e20323636353530.roa (raw, json)
Hash identifier:          O8/SDm1yJFSYwkcy2cvvWgzXoFYPvLVtwx2i5oK4tIA=
Subject key identifier:   BD:24:60:16:A3:94:C5:99:AF:B6:64:F6:66:F5:09:28:6B:FB:B0:E7
Certificate issuer:       /CN=003207C75EB18F584535FB5AB89F4EFAFBE7FD31
Certificate serial:       7055E95C75DFA7EB61891CC7087E98EF2AA12733
Authority key identifier: 00:32:07:C7:5E:B1:8F:58:45:35:FB:5A:B8:9F:4E:FA:FB:E7:FD:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/003207C75EB18F584535FB5AB89F4EFAFBE7FD31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/323830343a336462633a3a2f33382d3338203d3e20323636353530.roa
Signing time:             Mon 10 Jul 2023 13:27:11 +0000
ROA not before:           Mon 10 Jul 2023 13:22:11 +0000
ROA not after:            Mon 08 Jul 2024 13:27:11 +0000
asID:                     266550
IP address blocks:        2804:3dbc::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:55:e9:5c:75:df:a7:eb:61:89:1c:c7:08:7e:98:ef:2a:a1:27:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003207C75EB18F584535FB5AB89F4EFAFBE7FD31
        Validity
            Not Before: Jul 10 13:22:11 2023 GMT
            Not After : Jul  8 13:27:11 2024 GMT
        Subject: CN=BD246016A394C599AFB664F666F509286BFBB0E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c8:11:d0:88:1b:b3:9b:38:87:01:9f:b2:a1:
                    18:66:66:02:c3:47:6c:90:9e:9e:51:7f:c9:e2:50:
                    75:6a:b3:3f:58:7f:25:7a:45:c6:a0:0e:c9:2c:36:
                    da:30:1c:e4:c3:2a:0d:79:92:14:a0:65:1f:b5:72:
                    c4:cb:47:5a:d6:87:41:03:f9:1c:fa:2e:8f:c0:96:
                    25:4f:88:8d:96:de:89:84:de:37:a3:3c:98:48:e5:
                    46:e2:f6:d5:45:29:9c:b5:33:35:cb:1b:ca:26:58:
                    02:1a:8d:a0:5d:c9:16:38:73:2f:06:36:dd:db:32:
                    fd:81:26:48:d3:59:71:0a:c1:ca:af:ff:6a:2c:db:
                    a2:6a:dd:1f:b8:5c:e9:ec:59:e6:96:95:f0:7c:e4:
                    73:b5:87:15:44:b6:45:d4:b2:13:c8:4c:5b:80:b9:
                    64:67:ce:bb:6e:f5:3c:35:1c:f6:e4:09:c9:d9:fb:
                    be:7f:41:37:86:c8:d1:3e:37:5c:c4:38:45:7f:b9:
                    ac:35:01:e2:64:c3:73:e4:bb:8d:5d:f0:4f:15:9a:
                    02:b8:0c:f3:ad:48:45:cb:f6:5c:c1:e7:60:fd:76:
                    ce:17:ff:70:a3:40:6b:53:0c:b1:7e:77:c9:00:f0:
                    f9:63:1d:9d:42:6b:2b:62:fd:f8:a4:63:fe:67:c1:
                    c5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:24:60:16:A3:94:C5:99:AF:B6:64:F6:66:F5:09:28:6B:FB:B0:E7
            X509v3 Authority Key Identifier:
                keyid:00:32:07:C7:5E:B1:8F:58:45:35:FB:5A:B8:9F:4E:FA:FB:E7:FD:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/003207C75EB18F584535FB5AB89F4EFAFBE7FD31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/003207C75EB18F584535FB5AB89F4EFAFBE7FD31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/323830343a336462633a3a2f33382d3338203d3e20323636353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dbc::/38

    Signature Algorithm: sha256WithRSAEncryption
         40:33:ef:3d:f3:da:0f:e4:20:1b:9f:cc:c3:40:0b:44:34:2e:
         4f:0c:4e:fb:c8:d5:74:c5:1a:d1:51:9f:5e:dd:96:12:b0:89:
         03:79:6e:39:11:5e:b6:71:aa:ca:1d:28:e3:e9:9a:80:a5:5f:
         b8:4d:68:1f:1d:18:a6:55:89:85:95:36:8e:f6:c4:ad:ea:aa:
         ce:0a:7f:da:7c:73:25:88:1f:2b:54:d9:b7:94:4e:db:eb:18:
         be:df:d5:ad:a6:88:cd:35:2b:07:93:af:fd:50:3a:6a:c3:3e:
         ae:d5:69:61:52:6b:e9:24:0a:eb:8c:34:57:25:31:6c:c8:d3:
         38:89:83:d6:18:60:4c:81:f9:53:1f:12:9d:1f:b3:2d:57:6c:
         8c:0c:cd:3c:e9:52:63:e3:83:a8:06:b5:4e:b3:48:de:0c:d5:
         fd:0c:d2:a1:77:cd:b6:d5:64:4f:ba:44:7f:1d:ab:9e:98:97:
         78:13:37:36:3f:f2:18:57:90:44:95:da:f0:25:16:32:68:15:
         46:9e:c3:df:1f:49:75:aa:70:2c:cb:d4:c9:ff:db:a2:cc:5b:
         65:33:a1:22:c0:5f:2e:d8:d5:28:6c:4c:0a:d2:41:d8:2a:27:
         fb:0d:e5:bc:3f:a4:bc:1d:af:64:28:bb:85:38:a2:1e:4f:c9:
         1f:e4:d0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org