Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a3130303a3a2f34302d3430203d3e20323632363837.roa
File:                     323830343a333835633a3130303a3a2f34302d3430203d3e20323632363837.roa (raw, json)
Hash identifier:          gfqZ6jcwrIU2Q9DHPjPt6ySIjY6qJyDV+aeJs8UOp4Q=
Subject key identifier:   08:36:5C:93:39:92:9C:55:CE:A6:15:37:6C:4C:07:6A:85:19:72:08
Certificate issuer:       /CN=D4043FF361E9F3F8626E866CD52D1D952930B170
Certificate serial:       429E80420F367B1D68A2ABC44108CCABC0601A7F
Authority key identifier: D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a3130303a3a2f34302d3430203d3e20323632363837.roa
Signing time:             Sun 07 Apr 2024 18:00:02 +0000
ROA not before:           Sun 07 Apr 2024 17:55:02 +0000
ROA not after:            Sun 06 Apr 2025 18:00:02 +0000
asID:                     262687
IP address blocks:        2804:385c:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:9e:80:42:0f:36:7b:1d:68:a2:ab:c4:41:08:cc:ab:c0:60:1a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4043FF361E9F3F8626E866CD52D1D952930B170
        Validity
            Not Before: Apr  7 17:55:02 2024 GMT
            Not After : Apr  6 18:00:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d8:bd:5a:a8:c6:12:22:06:37:a8:ac:d4:a6:
                    79:aa:a7:fe:a0:17:de:cd:9b:76:23:10:20:2f:73:
                    d1:07:f9:a4:e2:36:1b:31:c8:f9:fd:e9:70:44:4b:
                    c5:b8:ca:7f:2a:8b:68:31:65:93:9b:03:f0:c4:0a:
                    1c:01:9f:ed:5a:c5:57:f9:4a:bf:0a:e1:aa:73:3b:
                    66:23:1a:ab:97:0b:73:ed:95:22:9d:a1:e5:65:0e:
                    b1:89:7e:43:e1:31:92:da:b5:89:84:2e:b0:9d:37:
                    8e:63:4b:71:c6:95:0d:6e:07:5c:e9:9d:21:0e:14:
                    27:22:66:71:70:01:26:e7:4b:d1:26:0e:1f:2a:4a:
                    5b:1c:ff:61:19:40:30:47:a1:76:3e:6f:d3:9f:ce:
                    ab:f5:05:82:dd:71:3a:9a:9b:56:5d:24:94:57:99:
                    89:f2:80:19:3e:e9:ad:61:b7:cf:94:4a:b9:b7:38:
                    82:5e:f9:29:29:84:87:9c:bc:3d:98:9d:d8:a0:6c:
                    43:b3:41:2d:47:e7:17:a4:25:33:dc:b0:9c:fa:60:
                    b4:a5:98:a0:5d:a5:e6:d1:f6:16:9a:eb:41:d1:1d:
                    2a:3e:77:4b:18:79:d9:96:d2:92:15:22:2a:a6:b1:
                    cd:44:d0:df:09:31:2a:08:30:2b:5f:2e:a8:68:61:
                    e9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:36:5C:93:39:92:9C:55:CE:A6:15:37:6C:4C:07:6A:85:19:72:08
            X509v3 Authority Key Identifier:
                keyid:D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D4043FF361E9F3F8626E866CD52D1D952930B170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a3130303a3a2f34302d3430203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         29:d9:fc:a9:5b:11:fd:85:88:d6:e3:4b:ce:e9:ef:49:b9:ad:
         45:0c:85:54:7c:94:6b:39:b0:f2:1f:41:66:35:94:d9:45:40:
         55:d4:b1:ae:59:6c:11:bf:d5:97:6a:01:5d:1d:7e:fb:61:6b:
         e5:7d:66:11:f1:88:50:1e:34:93:e5:e5:1b:7b:94:3e:d7:62:
         bb:fc:dd:ca:6b:dc:f9:37:d7:4d:36:18:b6:04:ff:4f:ea:5c:
         ac:c8:5c:4a:ab:20:3e:ce:df:de:39:b7:fd:10:51:ef:c0:de:
         30:07:84:b9:82:d8:10:c7:aa:ec:2d:02:27:a7:20:9e:c5:2a:
         14:73:78:b8:e7:22:46:c7:73:c4:c3:8c:31:1e:7f:ef:f4:8d:
         e9:36:cc:57:00:1b:42:af:5b:ff:b0:74:d3:42:9f:8e:c9:53:
         46:0f:27:7d:4d:31:2a:42:6e:ef:cc:d0:69:4f:74:67:ff:c3:
         ee:25:26:f2:e6:82:08:ef:4d:af:a8:5d:a5:a5:17:c1:ff:dc:
         f4:42:7d:b9:65:22:99:6a:21:c2:5d:fa:30:43:65:2f:0a:b7:
         e0:0a:eb:6b:13:98:ad:da:79:5f:6a:c7:ec:f5:31:cb:e3:95:
         20:5a:50:e7:ae:62:ef:1c:63:35:0c:a0:08:06:3d:40:e1:0f:
         62:2f:40:9f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:28 2024 by rpki-client on console-ams.rpki-client.org