Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/323830343a323862303a343030303a3a2f33342d3334203d3e203532393332.roa
File:                     323830343a323862303a343030303a3a2f33342d3334203d3e203532393332.roa (raw, json)
Hash identifier:          bNF8DBWzLdJz5mJCE2Bm96GizBHHrW+zSuBWxSTYWac=
Subject key identifier:   21:D6:69:51:D2:39:A8:5D:92:6A:39:D2:B4:3B:75:99:D5:A1:1C:C3
Certificate issuer:       /CN=9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72
Certificate serial:       200CE40FDA2C7C12279F0937B43BA9D23A2FB121
Authority key identifier: 9D:34:8A:0A:66:A2:F5:5A:35:EE:3F:E7:6C:50:D4:DE:EE:98:4B:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/323830343a323862303a343030303a3a2f33342d3334203d3e203532393332.roa
Signing time:             Wed 03 Apr 2024 18:31:10 +0000
ROA not before:           Wed 03 Apr 2024 18:26:10 +0000
ROA not after:            Wed 02 Apr 2025 18:31:10 +0000
asID:                     52932
IP address blocks:        2804:28b0:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:0c:e4:0f:da:2c:7c:12:27:9f:09:37:b4:3b:a9:d2:3a:2f:b1:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72
        Validity
            Not Before: Apr  3 18:26:10 2024 GMT
            Not After : Apr  2 18:31:10 2025 GMT
        Subject: CN=21D66951D239A85D926A39D2B43B7599D5A11CC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:48:72:87:98:c0:c0:f4:6e:19:c5:8f:bf:c1:
                    be:83:39:32:c2:39:a6:d3:fe:5d:24:4b:dc:5b:23:
                    4a:4b:12:05:5a:b1:04:b8:1d:99:8f:3c:d7:3f:50:
                    c7:85:f0:6d:bc:38:58:39:2e:33:1b:59:85:f2:79:
                    f2:04:22:b9:98:97:89:9c:bd:c9:f8:21:95:3a:6e:
                    bb:6b:5f:be:67:14:a3:a4:4b:62:20:d5:f9:8f:73:
                    2e:c2:b6:72:82:df:25:25:c3:59:9a:83:10:66:6a:
                    57:31:ab:e9:84:3f:2e:75:b6:59:df:61:26:a4:1e:
                    fb:74:d4:cb:b4:ba:34:8d:38:79:66:74:88:d7:7b:
                    c3:6b:28:91:93:6d:b8:d4:17:f9:65:da:4d:69:05:
                    51:c4:e8:2f:f6:fb:73:eb:23:da:9f:83:8b:da:ff:
                    1f:68:e6:8c:07:01:ac:b1:6d:e2:40:a6:eb:eb:7b:
                    28:46:b6:9a:8e:53:0a:6c:fd:b4:d1:35:a9:cc:7a:
                    72:d2:00:15:34:f1:3c:bd:0b:a4:3d:15:5a:0f:3c:
                    27:4d:80:c6:9f:fd:48:f6:d3:ec:76:7e:23:9e:a2:
                    02:d7:51:80:45:cd:9f:1a:3e:9b:06:6c:03:2d:61:
                    b6:ce:db:ed:18:16:1e:d9:44:46:e0:d5:88:e2:96:
                    ec:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D6:69:51:D2:39:A8:5D:92:6A:39:D2:B4:3B:75:99:D5:A1:1C:C3
            X509v3 Authority Key Identifier:
                keyid:9D:34:8A:0A:66:A2:F5:5A:35:EE:3F:E7:6C:50:D4:DE:EE:98:4B:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/323830343a323862303a343030303a3a2f33342d3334203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28b0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         41:0c:6c:32:64:df:7c:85:88:13:5c:54:45:32:73:6a:9c:49:
         9c:1b:20:1f:6d:e6:fc:29:6e:4c:99:34:6c:43:43:7b:0f:eb:
         76:d8:b4:d5:79:21:7d:48:88:64:f4:63:ea:90:5b:c0:f0:0b:
         84:d6:0a:82:d2:c1:95:6a:af:44:0a:0d:88:ab:7b:72:1a:2f:
         fe:92:50:16:32:05:67:ac:1c:ba:d6:1d:90:f3:e6:a8:a4:8c:
         47:be:71:3d:df:f8:bc:bc:ee:18:40:97:7b:80:5e:7a:3e:65:
         e3:dd:49:e3:d9:58:11:b3:b1:bb:89:06:15:68:8a:38:16:9d:
         93:5b:7e:ea:80:ce:79:02:f6:95:ac:b9:24:11:50:a6:95:c7:
         ee:e9:99:50:51:e6:55:c2:6a:23:04:39:70:20:25:3f:2d:d7:
         f2:84:51:59:2c:aa:c7:c8:86:5e:16:48:da:04:20:b4:fd:bf:
         4e:2a:bf:3a:2c:fd:91:bb:08:4c:5e:ae:2a:03:25:21:5d:33:
         a0:b5:d3:15:8f:20:07:0c:7d:72:02:6f:81:b6:b6:a8:a5:05:
         3e:2d:9c:6d:1c:8b:b3:56:4e:3a:73:d5:58:c7:5d:45:ce:81:
         6d:b1:e3:b7:28:e7:15:fd:24:bb:5d:d8:ef:d3:f8:a5:b6:20:
         8b:65:23:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org