Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a613230303a3a2f34302d3430203d3e20323632363837.roa
File:                     323830343a333835633a613230303a3a2f34302d3430203d3e20323632363837.roa (raw, json)
Hash identifier:          nqkw1J0xhbjPghbijiEQTuAmkqQo374E0QfGjZSWbDo=
Subject key identifier:   B4:0B:0B:EE:98:15:1A:67:09:B5:CA:BA:D3:B4:58:2E:A3:D5:C8:79
Certificate issuer:       /CN=D4043FF361E9F3F8626E866CD52D1D952930B170
Certificate serial:       2B945DE7E2B31340432D84DF8482C27EBB09D5E8
Authority key identifier: D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a613230303a3a2f34302d3430203d3e20323632363837.roa
Signing time:             Wed 24 Jan 2024 12:09:55 +0000
ROA not before:           Wed 24 Jan 2024 12:04:55 +0000
ROA not after:            Wed 22 Jan 2025 12:09:55 +0000
asID:                     262687
IP address blocks:        2804:385c:a200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:94:5d:e7:e2:b3:13:40:43:2d:84:df:84:82:c2:7e:bb:09:d5:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4043FF361E9F3F8626E866CD52D1D952930B170
        Validity
            Not Before: Jan 24 12:04:55 2024 GMT
            Not After : Jan 22 12:09:55 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:72:21:fa:1b:2e:4e:e0:86:32:1f:e3:4c:69:
                    29:2a:c7:df:be:6b:3f:ca:22:fc:ce:86:e7:75:99:
                    80:90:c7:48:98:e3:be:27:ab:96:58:cb:1d:b8:2d:
                    8c:34:0d:ad:d7:01:ee:cb:6e:a4:68:5f:2f:d0:77:
                    88:40:65:0c:28:e6:f3:d6:71:a9:56:4b:fe:da:f9:
                    bb:9d:6e:34:7a:82:32:21:a2:22:91:e4:cc:92:47:
                    a0:75:11:1c:75:78:5e:52:c4:2b:2d:06:4a:48:8e:
                    9e:c6:85:27:5b:34:b8:aa:61:e5:fd:41:84:cd:d2:
                    14:74:c2:80:f4:39:53:7e:af:78:89:56:27:a6:76:
                    9b:e8:c4:97:8a:9f:1d:3b:36:c3:8e:ad:31:23:73:
                    bd:7b:16:92:73:65:0a:be:f2:30:5e:0b:4a:ef:3a:
                    c2:e4:96:77:68:83:fb:80:ab:32:1c:6c:dc:bf:25:
                    5b:18:90:87:7f:1b:88:01:72:57:4c:f6:02:ad:aa:
                    16:3a:2f:56:6e:b6:1b:c8:a5:77:58:ad:66:db:d1:
                    13:80:aa:2c:33:22:b7:71:5b:32:5c:78:dd:42:39:
                    b8:b1:62:9c:0a:c2:d3:9e:88:05:9d:30:98:ba:6f:
                    3a:73:05:7e:a0:3b:00:6c:81:c3:fb:59:92:97:81:
                    09:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0B:0B:EE:98:15:1A:67:09:B5:CA:BA:D3:B4:58:2E:A3:D5:C8:79
            X509v3 Authority Key Identifier:
                keyid:D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D4043FF361E9F3F8626E866CD52D1D952930B170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a613230303a3a2f34302d3430203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:a200::/40

    Signature Algorithm: sha256WithRSAEncryption
         29:3f:3e:84:b3:54:7a:fe:ca:66:f8:24:de:f9:5b:ac:3d:72:
         b5:79:e4:e0:5e:05:69:eb:e8:2d:b9:87:09:4e:99:4b:75:f8:
         e9:47:57:e6:0e:e7:6a:db:89:44:a1:40:e4:a6:d9:03:c6:2e:
         f3:c3:72:d4:92:dc:f3:fd:ff:85:58:7f:97:ae:09:78:c2:92:
         5a:8a:8e:b6:bc:51:c8:c7:db:95:26:d9:ed:f7:ce:d9:68:71:
         6e:aa:f4:ff:e5:f9:47:5e:f4:c5:bd:23:02:b0:b7:d0:a6:00:
         b0:9c:d6:0d:e1:9a:8b:c3:7c:4a:2b:0f:74:0d:10:3d:d9:47:
         8c:46:ba:48:26:3b:5d:98:4d:40:a9:7a:97:af:d7:a1:48:97:
         72:26:16:d7:75:5f:a5:5f:e0:db:3d:06:5b:f4:eb:4d:95:33:
         7c:62:0c:39:e4:12:84:0e:db:82:07:46:8a:52:08:be:3a:64:
         44:d0:60:80:96:1e:3e:5e:c4:37:b4:c3:d7:65:6e:c0:6a:3c:
         a7:6c:24:3b:02:a7:bf:98:91:60:0a:a3:1b:38:cc:3c:5e:f5:
         12:04:40:9f:98:2b:36:b9:38:6a:00:ad:88:b7:1e:9c:0a:b1:
         e1:86:32:e0:d2:a8:44:0f:e4:af:5d:f5:39:8c:94:d9:39:f5:
         b3:86:dd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org