Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/323830343a323862303a633030303a3a2f33342d3334203d3e203532393332.roa
File:                     323830343a323862303a633030303a3a2f33342d3334203d3e203532393332.roa (raw, json)
Hash identifier:          ellBKl2IzCnxnxODCHPlM2i+R4HZ5VG79qTb2QBkb48=
Subject key identifier:   A8:18:BF:DD:C9:CA:96:6B:2B:61:22:54:89:8F:A7:80:F8:C3:F9:8E
Certificate issuer:       /CN=9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72
Certificate serial:       09CA4317006B6DAF5058B7C80063665796B9B0A5
Authority key identifier: 9D:34:8A:0A:66:A2:F5:5A:35:EE:3F:E7:6C:50:D4:DE:EE:98:4B:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/323830343a323862303a633030303a3a2f33342d3334203d3e203532393332.roa
Signing time:             Wed 03 Apr 2024 18:31:11 +0000
ROA not before:           Wed 03 Apr 2024 18:26:11 +0000
ROA not after:            Wed 02 Apr 2025 18:31:11 +0000
asID:                     52932
IP address blocks:        2804:28b0:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ca:43:17:00:6b:6d:af:50:58:b7:c8:00:63:66:57:96:b9:b0:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72
        Validity
            Not Before: Apr  3 18:26:11 2024 GMT
            Not After : Apr  2 18:31:11 2025 GMT
        Subject: CN=A818BFDDC9CA966B2B612254898FA780F8C3F98E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ba:fc:46:cc:02:0b:29:3c:80:4d:bf:0b:a8:
                    45:21:0d:7e:a6:7c:1e:28:e9:95:31:ff:b1:23:e0:
                    5e:cf:01:82:22:45:ac:7c:1b:c8:34:06:2d:28:d5:
                    9b:9e:bf:8a:22:fc:1e:1b:68:99:e5:14:5d:3f:00:
                    70:f9:f1:bd:bf:18:74:60:28:40:64:61:0d:1b:b4:
                    ba:05:e2:87:9c:09:05:61:8f:bf:3c:b6:8a:d4:cb:
                    96:c6:fb:bc:d6:d4:a7:68:8b:4e:4e:84:70:21:53:
                    34:69:2a:b4:fe:32:41:d2:2a:da:21:cf:87:88:af:
                    2a:eb:e6:fa:73:7f:f1:d6:38:30:70:34:91:bd:8f:
                    01:f7:1b:58:3a:3c:32:55:c7:ec:75:38:8f:71:03:
                    39:a6:3f:32:9b:74:4b:c3:62:f6:ea:89:41:58:89:
                    3d:76:73:e9:1e:64:4a:3a:f4:d0:f9:f0:a9:64:b5:
                    c6:43:7d:c3:2e:56:85:42:1a:66:bc:0b:2b:33:0a:
                    b6:bc:85:8b:2c:74:2f:0b:29:a1:4a:0c:69:91:a4:
                    b0:17:02:c4:e4:68:4c:e9:a8:8c:d9:f6:c4:ae:05:
                    a2:2c:79:45:43:99:50:36:6b:1b:28:69:c7:55:5c:
                    27:a8:ec:a1:f2:5f:47:54:d2:82:a9:bb:4f:62:48:
                    08:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:18:BF:DD:C9:CA:96:6B:2B:61:22:54:89:8F:A7:80:F8:C3:F9:8E
            X509v3 Authority Key Identifier:
                keyid:9D:34:8A:0A:66:A2:F5:5A:35:EE:3F:E7:6C:50:D4:DE:EE:98:4B:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/323830343a323862303a633030303a3a2f33342d3334203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28b0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         55:fc:5e:8d:d1:91:47:ca:ae:7b:c1:99:97:36:5b:61:40:ea:
         22:1e:6a:da:42:02:e5:21:37:11:aa:a9:b8:2a:c6:18:b6:05:
         d9:f8:f8:cf:41:3e:bd:ee:6a:d7:30:a0:f4:12:40:d9:c9:b4:
         b7:b7:a1:7a:d3:cc:b5:20:98:76:6a:1e:bd:a3:81:9b:37:b7:
         85:7b:75:87:58:15:35:66:98:90:d1:80:33:6b:8f:38:ed:54:
         1a:b6:6b:ca:d2:e9:21:ff:c7:ce:c6:b1:a5:64:d2:70:8b:7e:
         c2:40:f8:17:cc:0a:0a:74:94:31:13:0b:57:1a:06:8d:c6:da:
         e7:81:98:92:b4:c9:65:d5:5e:5c:4f:d5:f6:25:ad:4d:04:11:
         90:33:3b:89:49:3a:72:87:e3:8b:c6:e1:71:48:68:84:b5:e3:
         a7:2e:7f:75:e3:b0:2f:f6:5c:9b:7e:f5:1c:ef:e2:99:85:4f:
         e7:3e:d3:30:a3:cb:72:3c:8d:28:68:39:a0:d3:91:a9:34:0f:
         a7:4a:99:ac:c6:71:b5:c3:63:32:50:ad:67:43:93:7f:92:9b:
         d7:5c:27:71:9d:5b:be:70:3f:86:80:ec:bb:c8:df:1a:f4:7c:
         a2:fe:3e:34:83:7b:b3:c6:72:5f:d7:fb:44:51:77:31:4d:f4:
         82:c6:84:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org