Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/0/323830343a326431343a3a2f33322d3335203d3e20323635323630.roa
File:                     323830343a326431343a3a2f33322d3335203d3e20323635323630.roa (raw, json)
Hash identifier:          xPjGeoQqqclpaETicN8QM/94UfHLEX/xwIm7IcdSEC8=
Subject key identifier:   06:BB:C5:2F:EF:54:FA:EC:01:56:A1:18:D3:38:EE:30:77:DD:51:4C
Certificate issuer:       /CN=D40880D267C5925DEB436B44648225149D2B8823
Certificate serial:       7AD3233BD341B4CC1329AF4856F2BDE08C3822B4
Authority key identifier: D4:08:80:D2:67:C5:92:5D:EB:43:6B:44:64:82:25:14:9D:2B:88:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D40880D267C5925DEB436B44648225149D2B8823.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/0/323830343a326431343a3a2f33322d3335203d3e20323635323630.roa
Signing time:             Wed 18 Oct 2023 18:00:01 +0000
ROA not before:           Wed 18 Oct 2023 17:55:01 +0000
ROA not after:            Wed 16 Oct 2024 18:00:01 +0000
asID:                     265260
IP address blocks:        2804:2d14::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d3:23:3b:d3:41:b4:cc:13:29:af:48:56:f2:bd:e0:8c:38:22:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D40880D267C5925DEB436B44648225149D2B8823
        Validity
            Not Before: Oct 18 17:55:01 2023 GMT
            Not After : Oct 16 18:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b8:2e:a0:eb:ac:2f:21:b7:c4:a2:16:c9:b2:
                    a9:74:21:6e:17:7c:b5:77:95:dd:4d:bc:3d:c7:89:
                    81:bd:6b:88:b4:76:81:b7:7d:77:b3:a3:96:7f:0e:
                    0f:3d:e1:e8:ff:6c:3e:0a:a0:a0:d8:b6:c0:34:bb:
                    98:e2:c2:f0:97:6e:85:28:b6:75:8e:b0:1c:dd:f3:
                    d3:5e:e6:8f:b4:2d:ad:5c:56:32:8a:11:5a:b9:ff:
                    b5:3c:ce:43:9b:b3:e3:f2:4e:ae:dd:fb:fa:2a:69:
                    f1:ec:c3:cb:07:af:37:cc:b3:47:8a:32:24:1b:3b:
                    02:d2:12:a0:c3:c4:88:be:aa:70:eb:3f:d6:b8:2f:
                    43:ca:a8:58:5b:59:64:fa:4e:f6:a9:7e:df:fe:db:
                    e3:7a:84:94:c9:7c:22:3c:28:d7:8b:63:18:4b:19:
                    23:95:a8:9c:22:a7:8d:59:88:1e:78:89:1f:eb:27:
                    8b:77:f7:76:15:34:7b:1e:6f:06:0b:30:2a:f9:ab:
                    1b:39:24:92:75:7f:00:97:d6:3a:e8:e1:6c:a7:7b:
                    02:f3:40:5d:10:23:4d:d5:a3:e9:70:b6:b7:c5:f1:
                    59:89:8f:da:6b:44:3a:c0:7a:4e:57:a7:15:2e:3a:
                    52:3b:81:04:29:e9:9c:ee:32:63:cb:cc:c0:59:01:
                    f9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:BB:C5:2F:EF:54:FA:EC:01:56:A1:18:D3:38:EE:30:77:DD:51:4C
            X509v3 Authority Key Identifier:
                keyid:D4:08:80:D2:67:C5:92:5D:EB:43:6B:44:64:82:25:14:9D:2B:88:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/0/D40880D267C5925DEB436B44648225149D2B8823.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D40880D267C5925DEB436B44648225149D2B8823.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/0/323830343a326431343a3a2f33322d3335203d3e20323635323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d14::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:1a:db:d6:cb:3b:86:7c:51:91:2b:6c:45:45:40:4a:e6:c2:
         9f:4c:6f:9c:f7:89:84:fd:cd:ca:8b:7a:21:2b:c6:51:0c:30:
         88:30:e6:0e:84:ae:5a:36:7f:28:0a:f4:41:18:d4:b4:00:70:
         6f:59:0b:47:72:5e:37:60:a2:d2:39:30:0f:ca:54:9a:fb:e5:
         7d:ca:75:d4:96:88:46:36:ce:35:9b:ef:5b:33:ca:13:08:eb:
         01:f8:5a:71:79:af:73:3e:08:63:f3:94:f3:cd:fc:f3:04:7c:
         29:65:bb:08:c3:05:9b:9d:1b:21:46:c7:2a:ec:4f:f7:fa:29:
         d2:be:c7:07:2c:73:86:b2:93:d9:d9:ae:d5:16:c6:71:09:c8:
         ce:35:16:82:d5:b5:bb:f4:6c:a2:cd:5e:ac:51:af:5b:1b:80:
         b6:2f:bb:8a:6a:61:ae:55:51:9c:e9:aa:83:3a:99:29:a3:10:
         fe:71:6f:c0:ac:15:3e:dc:41:c5:aa:97:8f:9a:05:33:8a:51:
         9e:10:a5:a9:ce:c0:10:e8:ac:de:00:6d:73:a2:0c:a8:f7:5c:
         3a:52:a6:f0:f9:87:9c:43:b0:ab:e7:54:90:c2:71:d5:77:3f:
         13:52:81:1a:92:51:75:e4:7a:86:c5:91:80:62:aa:eb:de:dc:
         ee:75:17:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org