Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a33303a3a2f34382d3438203d3e20323632363837.roa
File:                     323830343a333835633a33303a3a2f34382d3438203d3e20323632363837.roa (raw, json)
Hash identifier:          t4FBdh9/oOv3qHIoss6yNhmP7ryX3Mrsk1ztf9CVf5I=
Subject key identifier:   B2:54:2D:9C:AA:EA:E4:5B:7B:FC:D5:0F:23:2B:54:38:F2:17:74:5A
Certificate issuer:       /CN=D4043FF361E9F3F8626E866CD52D1D952930B170
Certificate serial:       4FFAD673F73B0BAD05575B8C6FF4395054C775C7
Authority key identifier: D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a33303a3a2f34382d3438203d3e20323632363837.roa
Signing time:             Tue 27 Feb 2024 18:29:02 +0000
ROA not before:           Tue 27 Feb 2024 18:24:02 +0000
ROA not after:            Tue 25 Feb 2025 18:29:02 +0000
asID:                     262687
IP address blocks:        2804:385c:30::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:fa:d6:73:f7:3b:0b:ad:05:57:5b:8c:6f:f4:39:50:54:c7:75:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4043FF361E9F3F8626E866CD52D1D952930B170
        Validity
            Not Before: Feb 27 18:24:02 2024 GMT
            Not After : Feb 25 18:29:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:48:65:bc:11:2c:90:3d:87:ca:62:17:7b:b2:
                    ac:3c:1c:80:2e:bb:a6:f9:36:b7:7b:52:f4:47:23:
                    3f:68:68:f7:37:8c:6a:68:75:61:9d:c1:06:e3:af:
                    04:10:af:62:6b:96:49:15:d2:47:e0:b8:94:0c:4b:
                    b7:3a:c5:5b:8c:ed:f2:3e:4a:aa:05:62:ee:07:68:
                    8e:e6:b0:28:3b:a9:de:f4:9b:07:44:de:45:48:b5:
                    51:78:d3:52:1b:90:5d:3e:9d:b8:61:f3:9a:3f:95:
                    f7:8e:a5:cb:8c:6f:31:c3:48:e9:51:5f:8f:ff:ae:
                    46:c4:bb:19:c3:dd:0b:27:e4:6b:b1:9c:34:79:5d:
                    2c:de:e6:8e:22:de:93:28:a1:57:45:3d:da:68:69:
                    4e:81:0a:27:d6:ec:1e:1e:6c:0b:4b:c6:04:75:61:
                    9d:d9:f9:4a:a8:a8:08:db:0d:1e:be:9f:af:70:04:
                    cb:ca:64:ba:1f:38:77:92:6c:f5:c2:b5:35:4d:4b:
                    2f:fb:12:32:98:73:c5:ec:dc:b7:bf:1c:e9:ce:c4:
                    0e:fb:d2:c1:13:1f:a7:f5:70:06:56:08:e5:19:59:
                    74:ee:60:16:5c:13:52:76:d6:9a:cb:12:db:45:ca:
                    0c:43:fc:14:93:40:27:77:23:d9:42:04:ec:b5:cd:
                    22:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:54:2D:9C:AA:EA:E4:5B:7B:FC:D5:0F:23:2B:54:38:F2:17:74:5A
            X509v3 Authority Key Identifier:
                keyid:D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D4043FF361E9F3F8626E866CD52D1D952930B170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a33303a3a2f34382d3438203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:30::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:ee:3e:55:ff:0f:1f:a6:e7:56:96:ae:40:63:34:30:df:4d:
         e5:45:c9:08:59:56:60:dd:3c:e4:1a:88:c5:08:95:1b:e6:75:
         7a:ae:11:56:30:3b:76:11:4c:b0:24:0f:73:20:97:56:2d:ab:
         a6:0e:23:a6:19:d1:d6:9a:0e:63:fa:1a:9f:26:3e:63:7f:a3:
         2a:ec:e2:b1:a1:3b:35:14:11:0f:2a:04:db:8f:c1:6a:df:7a:
         4f:78:74:c7:f8:06:3d:86:99:78:fb:26:0f:8f:d3:7c:ef:bf:
         14:ae:f7:bc:b2:82:e1:da:fc:0d:08:42:45:4b:45:93:09:e0:
         39:5f:34:40:ee:c0:8d:8e:8d:ac:b5:29:1c:4f:e0:b2:f5:1e:
         3d:b8:1f:27:31:ad:6c:e9:66:58:44:13:cd:07:de:db:03:65:
         22:6d:c3:63:fc:51:18:fd:4f:05:7a:e0:45:63:08:a3:32:bc:
         f9:23:5c:f9:60:bd:29:88:c5:0f:9e:bb:bc:36:ef:84:96:4c:
         56:f1:82:06:4c:db:5d:31:89:50:ff:3f:23:53:08:9b:01:4b:
         72:ae:21:a8:c2:e2:15:83:34:cd:a0:f1:8b:6b:99:7d:a2:9e:
         d2:37:55:04:de:a2:2c:14:03:cd:7e:76:1a:db:ae:ee:13:88:
         eb:ca:09:56
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org