Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/323830343a333563303a3a2f33322d313238203d3e20323636333034.roa
File:                     323830343a333563303a3a2f33322d313238203d3e20323636333034.roa (raw, json)
Hash identifier:          NL0tiCvMhHP3bBqleGNdSQPc0xJpcA7Ki/Z1RIX/6aM=
Subject key identifier:   10:D0:61:4D:84:0F:5B:5D:5C:0F:F7:D7:7A:80:78:4A:E1:12:E4:E8
Certificate issuer:       /CN=B972E6C020508D0A414EE6D0F0E456F40E486260
Certificate serial:       4F7BE0C171242B06225C7F854C8844EAC9B59897
Authority key identifier: B9:72:E6:C0:20:50:8D:0A:41:4E:E6:D0:F0:E4:56:F4:0E:48:62:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B972E6C020508D0A414EE6D0F0E456F40E486260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/323830343a333563303a3a2f33322d313238203d3e20323636333034.roa
Signing time:             Fri 22 Mar 2024 14:57:25 +0000
ROA not before:           Fri 22 Mar 2024 14:52:25 +0000
ROA not after:            Fri 21 Mar 2025 14:57:25 +0000
asID:                     266304
IP address blocks:        2804:35c0::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:7b:e0:c1:71:24:2b:06:22:5c:7f:85:4c:88:44:ea:c9:b5:98:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B972E6C020508D0A414EE6D0F0E456F40E486260
        Validity
            Not Before: Mar 22 14:52:25 2024 GMT
            Not After : Mar 21 14:57:25 2025 GMT
        Subject: CN=10D0614D840F5B5D5C0FF7D77A80784AE112E4E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:84:a1:3f:c4:f1:59:63:9a:6b:c0:f3:08:2e:
                    17:28:40:78:bb:4b:9a:de:7c:51:82:10:c5:ba:62:
                    d0:60:c6:c6:1a:47:de:0e:44:31:5b:9c:fe:9e:4c:
                    99:d8:98:d3:6f:fe:f7:50:3c:5d:d6:7f:3a:d1:16:
                    d3:59:67:77:0c:9b:8b:59:e6:d1:0a:91:80:aa:11:
                    8f:73:1a:2d:8f:e3:62:f3:3f:89:41:47:44:a1:c6:
                    12:9d:57:0d:bf:62:e9:fc:47:53:15:c7:c8:f5:e4:
                    90:75:c7:69:9a:a6:49:29:8c:2b:7a:82:d7:8d:cd:
                    50:ea:cc:7b:41:bf:66:bc:5d:8d:c5:3d:98:12:ee:
                    40:0c:e4:ac:eb:a8:30:dc:0d:0a:e6:9a:e7:f2:51:
                    b3:fd:79:47:7c:0c:fe:b7:a8:dd:f1:2d:7b:92:44:
                    5d:6e:f5:c2:b7:d2:bc:ee:ca:f7:05:41:a6:e3:67:
                    2c:15:33:37:2b:bb:67:89:b7:7a:d0:14:5d:36:ff:
                    f9:08:54:c5:f3:36:59:7b:2c:df:ff:46:5b:d2:86:
                    bd:f0:ed:bc:d9:38:47:41:7e:91:7c:4f:b4:e5:c4:
                    79:7d:e1:02:80:9d:2d:f4:1a:86:0a:71:f6:5b:90:
                    bf:e9:ae:e7:70:ee:d3:36:ab:34:7d:0c:ce:eb:97:
                    d1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D0:61:4D:84:0F:5B:5D:5C:0F:F7:D7:7A:80:78:4A:E1:12:E4:E8
            X509v3 Authority Key Identifier:
                keyid:B9:72:E6:C0:20:50:8D:0A:41:4E:E6:D0:F0:E4:56:F4:0E:48:62:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/B972E6C020508D0A414EE6D0F0E456F40E486260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B972E6C020508D0A414EE6D0F0E456F40E486260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/323830343a333563303a3a2f33322d313238203d3e20323636333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:78:a6:07:45:e1:aa:47:4b:30:79:93:12:b3:b4:50:27:d2:
         0f:46:30:c3:9f:a5:8f:07:dc:c5:54:f3:8c:12:71:e9:8c:4e:
         f8:8f:44:d0:26:b6:4d:60:d0:6f:70:f6:44:9b:72:99:3c:71:
         fd:3b:ca:d9:f7:cf:6f:68:44:1f:8b:43:7f:c0:42:d1:ec:5e:
         7d:75:ed:38:48:27:d1:64:a7:84:24:a2:9a:db:60:f7:53:3b:
         55:e9:f5:d2:1d:fa:bc:e1:ea:2c:25:0f:46:5e:31:00:b8:b9:
         06:a6:c5:16:80:b0:78:e4:74:7a:b0:d5:a9:97:3c:c3:de:f1:
         de:9d:76:eb:51:f3:c6:5f:2d:16:0b:c4:45:f7:b8:71:df:d4:
         9c:d3:e9:1d:28:44:59:c6:53:6c:83:49:f5:15:71:bb:54:25:
         0d:5f:dc:7d:12:92:f0:a0:53:8a:08:30:f5:44:a4:c2:09:7f:
         ef:64:6a:7a:03:bb:30:af:f4:17:f1:36:93:c2:33:99:37:5c:
         f9:d7:4e:fa:8e:af:23:28:7e:14:b4:e8:6a:d2:50:d2:41:a6:
         ba:9e:1e:91:31:6d:c7:e2:ab:ba:57:e7:ba:72:c3:39:8e:55:
         2c:67:01:a3:dc:98:5c:8f:3e:4c:ec:f9:dd:4e:ec:e3:50:84:
         a8:e5:d5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:09 2024 by rpki-client on console-ams.rpki-client.org