Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a373030303a3a2f33362d3336203d3e203532373036.roa
File:                     323830343a6337303a373030303a3a2f33362d3336203d3e203532373036.roa (raw, json)
Hash identifier:          WIfDtEYOKJUQctFI+UOYdXl78s3DtHCRLyn7Ivz78MY=
Subject key identifier:   FA:2B:06:FF:A9:F9:8B:8A:F1:4F:E9:D2:06:5F:AD:1C:38:81:8F:F8
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       45BC64A41F1A91C117C8FD77183AF621C04A5DFA
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a373030303a3a2f33362d3336203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:20:18 +0000
ROA not before:           Thu 20 Jul 2023 14:15:18 +0000
ROA not after:            Thu 18 Jul 2024 14:20:18 +0000
asID:                     52706
IP address blocks:        2804:c70:7000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:bc:64:a4:1f:1a:91:c1:17:c8:fd:77:18:3a:f6:21:c0:4a:5d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:15:18 2023 GMT
            Not After : Jul 18 14:20:18 2024 GMT
        Subject: CN=FA2B06FFA9F98B8AF14FE9D2065FAD1C38818FF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cb:ea:1b:f1:51:d1:e6:ba:20:d1:22:24:4e:
                    08:98:88:50:c7:4b:a7:94:92:31:7c:3b:f3:03:ed:
                    6f:85:f7:5c:d5:8b:85:02:d3:26:61:7d:ba:ca:16:
                    7e:07:22:1d:7a:94:bc:c4:a0:30:49:6b:c7:fc:bd:
                    62:f8:d3:90:79:e0:84:3b:46:b0:5c:9c:12:15:47:
                    b3:22:be:3c:85:ce:28:32:35:3b:6c:c0:1c:f0:12:
                    47:b3:bc:5e:30:ea:a3:eb:8a:36:a1:f1:68:c7:39:
                    f8:c8:a5:ac:5d:31:56:b9:3a:c5:94:4e:a4:28:70:
                    6a:64:8c:f5:44:b1:7f:97:22:d5:2b:46:7b:36:73:
                    4c:f2:15:b3:94:bd:84:80:07:fc:ef:97:40:09:11:
                    49:49:9e:0e:40:0d:7f:19:5b:33:d4:6d:26:dd:e7:
                    c3:39:ae:07:c7:f7:5e:f4:25:06:8a:96:5b:02:86:
                    d3:5c:83:29:f5:b9:60:69:8e:b8:42:8f:d8:7c:c3:
                    0f:3b:99:b7:ba:cc:64:a7:11:1e:b1:e3:81:87:2b:
                    a1:9e:ab:08:9a:ee:43:1a:09:c6:11:6d:57:ad:46:
                    ee:b1:4c:f5:69:70:33:44:a0:c7:94:72:41:69:fc:
                    58:46:a1:a0:00:cf:cc:5c:6d:bf:ca:df:e9:78:d2:
                    24:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2B:06:FF:A9:F9:8B:8A:F1:4F:E9:D2:06:5F:AD:1C:38:81:8F:F8
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a373030303a3a2f33362d3336203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b6:1d:ab:0a:1f:ae:d1:2f:f2:ed:de:d7:32:b2:d4:fd:75:cd:
         b3:66:55:c6:d4:86:94:56:52:44:52:86:14:eb:57:a2:f4:7f:
         f5:f9:3a:c9:b4:a6:0c:d5:8e:f8:de:72:e0:cf:7b:04:29:b2:
         fc:bc:c4:f6:cf:3d:c6:80:8f:12:f1:0a:94:53:6c:5e:f4:bf:
         b3:7f:9f:b6:21:e7:3e:5f:95:ee:72:b2:a9:ef:01:ed:fc:d8:
         c0:53:be:57:79:68:bd:a3:44:d7:9b:4d:60:28:eb:cc:db:66:
         63:a7:44:62:e4:f8:97:e8:5d:d4:fb:86:fd:cf:29:96:60:df:
         ab:39:7e:b3:d8:aa:cb:94:a4:57:e0:dd:e3:17:fa:c9:17:e3:
         ea:4a:2b:dd:1e:0d:54:b1:18:5c:cd:c6:97:2a:03:6c:9c:38:
         93:09:04:58:51:da:5b:9e:d1:82:c4:f0:e1:df:75:d8:05:b0:
         bd:c5:69:e7:b6:19:d9:1f:dc:67:d7:ad:21:f6:99:40:9a:a4:
         28:05:aa:4b:06:65:bb:20:e4:e7:a0:1b:be:c7:2c:a8:a7:f6:
         f9:97:d0:78:d4:fc:6e:9c:a0:dc:a5:af:5f:15:83:a6:0b:d2:
         17:ed:c1:e7:a0:5a:a7:b0:12:82:fa:7e:e7:81:53:9b:ee:a7:
         58:57:59:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:41 2024 by rpki-client on console-fra.rpki-client.org