Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/323830343a323862303a383030303a3a2f33332d3333203d3e203532393332.roa
File:                     323830343a323862303a383030303a3a2f33332d3333203d3e203532393332.roa (raw, json)
Hash identifier:          MkOKQtP9l9ZueaVKYOoXA+cR5QMnUoKouAe11GTXs/Y=
Subject key identifier:   3E:CD:6E:0D:1E:A2:EE:9A:DB:20:89:28:4C:9D:3E:30:84:F2:AD:2F
Certificate issuer:       /CN=9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72
Certificate serial:       76579A7E18F31D3CF134D78C3A6C3944A620E448
Authority key identifier: 9D:34:8A:0A:66:A2:F5:5A:35:EE:3F:E7:6C:50:D4:DE:EE:98:4B:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/323830343a323862303a383030303a3a2f33332d3333203d3e203532393332.roa
Signing time:             Wed 03 Apr 2024 18:31:10 +0000
ROA not before:           Wed 03 Apr 2024 18:26:10 +0000
ROA not after:            Wed 02 Apr 2025 18:31:10 +0000
asID:                     52932
IP address blocks:        2804:28b0:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:57:9a:7e:18:f3:1d:3c:f1:34:d7:8c:3a:6c:39:44:a6:20:e4:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72
        Validity
            Not Before: Apr  3 18:26:10 2024 GMT
            Not After : Apr  2 18:31:10 2025 GMT
        Subject: CN=3ECD6E0D1EA2EE9ADB2089284C9D3E3084F2AD2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:19:94:ff:9e:8f:0a:7c:a0:c6:ac:be:1a:4c:
                    ad:9b:02:6d:63:78:d5:f2:e5:6e:5d:c7:2d:e6:4b:
                    72:b2:b2:1e:eb:cb:0f:37:ef:d8:2b:5e:84:b3:b3:
                    b2:f4:6e:c4:91:b2:f6:cf:70:51:64:9a:c6:7c:d0:
                    45:e0:a3:3e:12:3a:1a:a1:79:ff:5c:5e:70:0e:d4:
                    ed:9b:06:2f:a7:f4:a2:01:40:a4:38:0c:4b:08:38:
                    07:37:22:01:5c:16:1d:8f:54:ee:fc:72:6a:4e:c3:
                    74:5a:88:8f:ea:38:db:e5:87:3a:63:e7:9c:5c:a2:
                    fc:30:0e:38:3b:97:db:99:bb:69:d4:14:f4:cc:cc:
                    69:a2:3f:6d:28:ce:4e:1c:e4:3c:59:49:8d:2b:b4:
                    6c:ae:06:94:ef:4c:ad:47:3f:b5:c9:09:5f:9e:f4:
                    04:29:13:a8:ea:47:82:4a:00:80:e5:b2:62:6d:13:
                    ae:3f:ad:65:30:e4:4f:53:54:23:f1:43:14:d2:29:
                    a8:3e:60:f9:bc:0d:11:51:c8:f4:2a:48:e1:1b:38:
                    52:e4:b8:ac:66:ea:64:ce:b2:f2:39:8d:f1:b8:a8:
                    f4:90:d0:9a:ed:06:42:1a:f1:9a:17:97:0d:a3:d7:
                    db:10:0e:da:31:5a:80:ca:73:03:c2:f6:da:1f:d9:
                    5b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CD:6E:0D:1E:A2:EE:9A:DB:20:89:28:4C:9D:3E:30:84:F2:AD:2F
            X509v3 Authority Key Identifier:
                keyid:9D:34:8A:0A:66:A2:F5:5A:35:EE:3F:E7:6C:50:D4:DE:EE:98:4B:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/323830343a323862303a383030303a3a2f33332d3333203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28b0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         03:3b:75:0b:c3:8d:d7:59:fd:d1:92:6b:f4:99:30:e1:f2:43:
         b4:cd:50:6f:0e:bf:47:0c:87:04:78:32:a2:7a:2f:24:a5:d3:
         a4:45:06:3b:c9:ef:d6:25:11:52:57:e9:d6:13:a8:27:b6:59:
         92:80:1b:39:98:f0:80:e2:9e:eb:51:49:8e:fd:3c:ce:e9:fd:
         e7:6c:bf:39:a7:b5:c7:56:08:ae:aa:42:ed:2b:1f:d9:8a:b3:
         51:53:69:a2:77:42:78:25:88:e5:85:b2:39:4b:ac:42:27:32:
         d3:76:9b:82:d2:0b:97:48:f6:5c:2b:72:13:c5:5c:31:0b:86:
         a9:f1:f2:c1:22:39:81:0f:c9:dd:43:e5:d2:52:0d:2f:0c:06:
         59:a2:60:83:dd:0e:e0:22:59:48:09:12:36:d0:42:33:46:9e:
         c2:ce:dd:4c:81:13:0a:c1:b1:c7:2e:b1:e0:7c:80:6a:f4:ba:
         54:2a:45:5f:b3:b4:6b:c0:07:9b:49:f3:51:b4:c6:e1:3e:e2:
         68:68:aa:23:8f:6e:9d:d0:de:02:0a:98:24:11:0f:db:25:43:
         50:c7:3d:e5:94:33:2c:fd:d4:53:55:c3:86:4a:3e:2d:59:0b:
         b3:65:5f:97:70:c1:32:be:08:86:5e:b6:00:66:58:f4:2d:0b:
         b4:af:7e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org