Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a3a2f33322d3332203d3e20323632363837.roa
File:                     323830343a333835633a3a2f33322d3332203d3e20323632363837.roa (raw, json)
Hash identifier:          B/WmGahTy4Q0b67Du+Ub9q7T9kzYCd6vwQnnhDqOa5w=
Subject key identifier:   72:75:4C:B1:1B:81:23:DE:0D:2C:B1:8F:6C:74:89:5F:50:60:24:D7
Certificate issuer:       /CN=D4043FF361E9F3F8626E866CD52D1D952930B170
Certificate serial:       461AD145BBE656F28CCBBA40D016C6F323886BFB
Authority key identifier: D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a3a2f33322d3332203d3e20323632363837.roa
Signing time:             Thu 12 May 2022 02:00:00 +0000
ROA not before:           Thu 12 May 2022 01:55:00 +0000
ROA not after:            Thu 11 May 2023 02:00:00 +0000
asID:                     262687
IP address blocks:        2804:385c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:1a:d1:45:bb:e6:56:f2:8c:cb:ba:40:d0:16:c6:f3:23:88:6b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4043FF361E9F3F8626E866CD52D1D952930B170
        Validity
            Not Before: May 12 01:55:00 2022 GMT
            Not After : May 11 02:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fb:c5:b1:57:a9:af:c4:47:ed:2f:95:1a:1d:
                    86:a7:4c:9c:49:b3:c5:b8:57:de:6c:f6:95:c7:4f:
                    27:b8:d8:28:6f:42:18:b0:91:f4:9b:a3:d1:cb:57:
                    7e:aa:11:f6:61:9f:81:60:95:6f:54:a8:d9:e3:e0:
                    0b:cc:56:9c:43:86:dc:7b:be:10:34:b5:15:2d:c6:
                    e8:69:66:df:fb:e9:47:ab:44:37:5a:c0:b4:35:d0:
                    61:19:18:fb:da:5a:f4:69:96:02:36:3c:5e:bd:c4:
                    5a:71:44:0e:ff:17:a4:df:d9:6f:2f:0e:37:a5:6f:
                    d9:94:06:26:bc:38:aa:b9:8c:bf:99:28:08:a2:4a:
                    6e:af:1c:8e:57:ef:52:7e:da:eb:ef:cd:10:2e:76:
                    98:9a:27:8a:f1:e4:8d:af:af:39:18:05:61:98:d8:
                    8d:46:ba:fc:91:9e:98:25:6e:64:b5:3a:12:6a:55:
                    39:94:23:64:de:ac:aa:f8:14:8b:7c:28:22:53:26:
                    ae:15:49:64:c8:25:c7:a5:42:96:2e:6c:21:d3:0f:
                    3c:08:cc:ac:20:2d:97:df:56:a6:cb:74:e1:8f:69:
                    cd:f9:09:fc:4d:96:4a:6c:a3:82:35:0b:31:bd:ae:
                    4a:c8:f5:e0:9a:2c:03:d8:22:2d:f4:99:5e:3b:f9:
                    40:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:75:4C:B1:1B:81:23:DE:0D:2C:B1:8F:6C:74:89:5F:50:60:24:D7
            X509v3 Authority Key Identifier:
                keyid:D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D4043FF361E9F3F8626E866CD52D1D952930B170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a3a2f33322d3332203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:a0:ac:c7:aa:66:c6:7f:f5:25:4b:ea:a8:05:85:37:18:30:
         fb:a7:34:be:3a:cf:99:68:bf:44:9a:4f:f3:23:e4:c5:c2:80:
         b8:cc:3a:b1:e8:47:d0:39:1a:7e:24:28:b9:47:02:40:06:ed:
         57:99:54:23:5c:a0:c2:ae:c6:52:67:a9:e8:76:d2:aa:48:20:
         bd:08:e7:bc:65:6f:78:ec:df:65:76:35:22:fa:1e:23:32:94:
         30:62:17:82:35:a4:3f:cb:2a:36:fb:fe:54:67:67:d5:5b:a3:
         ab:bc:82:e4:ca:81:63:bc:9b:bc:d8:1e:30:4f:a3:e4:a4:bb:
         d4:f5:b3:d4:85:69:16:52:60:f0:4a:89:cf:df:95:66:36:34:
         00:56:e2:fe:85:6b:e5:e5:69:82:06:12:40:ff:bf:57:c6:37:
         34:e5:cd:ad:50:5e:fa:2b:54:ce:89:9f:57:d6:29:6a:4b:d1:
         e2:bb:77:76:03:74:cd:55:3a:46:3a:46:6a:03:2a:e9:f5:5f:
         a3:1a:d5:12:93:2e:44:b2:0f:88:22:4e:9d:9f:9b:12:e2:c9:
         c1:13:70:51:e7:83:f9:09:bd:2c:be:77:85:81:3e:39:aa:88:
         a8:7e:2c:cc:85:fe:10:35:00:fa:3c:54:15:59:16:72:a1:7f:
         a3:27:44:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:28 2024 by rpki-client on console-ams.rpki-client.org