Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/323830343a3663343a393030303a3a2f33362d313238203d3e20323632383933.roa
File:                     323830343a3663343a393030303a3a2f33362d313238203d3e20323632383933.roa (raw, json)
Hash identifier:          A7PtiQeqsWPxntB28d7y5xc24wI4Y3pUhDcHrg2dfFQ=
Subject key identifier:   4E:D9:E1:F5:34:38:7A:EB:E1:24:37:C1:67:AE:95:B6:06:F8:A9:9C
Certificate issuer:       /CN=4502CD1B49644F16402D764130FC71B676EC91F0
Certificate serial:       72CE98B8F4A0216F42C5359B1E52A6657340D3AA
Authority key identifier: 45:02:CD:1B:49:64:4F:16:40:2D:76:41:30:FC:71:B6:76:EC:91:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4502CD1B49644F16402D764130FC71B676EC91F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/323830343a3663343a393030303a3a2f33362d313238203d3e20323632383933.roa
Signing time:             Wed 31 Jan 2024 12:36:50 +0000
ROA not before:           Wed 31 Jan 2024 12:31:50 +0000
ROA not after:            Wed 29 Jan 2025 12:36:50 +0000
asID:                     262893
IP address blocks:        2804:6c4:9000::/36 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ce:98:b8:f4:a0:21:6f:42:c5:35:9b:1e:52:a6:65:73:40:d3:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502CD1B49644F16402D764130FC71B676EC91F0
        Validity
            Not Before: Jan 31 12:31:50 2024 GMT
            Not After : Jan 29 12:36:50 2025 GMT
        Subject: CN=4ED9E1F534387AEBE12437C167AE95B606F8A99C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f4:1c:3a:86:27:bf:da:60:81:25:c3:08:0e:
                    5b:51:e2:7e:eb:c4:f1:05:be:00:15:c0:98:b7:83:
                    33:3e:bd:f8:7c:41:fa:34:25:50:44:ee:36:65:39:
                    ba:2d:4d:65:a0:d6:5f:6e:a4:ac:eb:f0:ad:13:67:
                    c5:f3:d2:a1:b9:61:f7:07:76:af:bd:52:33:d2:83:
                    4e:da:79:e7:53:3c:03:90:5e:09:56:00:0c:74:d8:
                    6e:87:0d:8e:fd:dd:0c:a5:22:5c:6d:16:e3:7d:7c:
                    2f:10:7b:78:2b:87:b6:2b:05:ba:54:fb:f8:ba:76:
                    95:1f:f1:57:b2:77:1a:84:39:f0:5e:74:68:60:c5:
                    e2:e5:ef:8a:55:74:6d:27:23:04:fb:07:8c:74:5b:
                    ec:34:eb:ee:59:fb:b8:9d:f7:e6:91:a0:34:1a:7f:
                    62:09:e2:c0:64:6b:d1:fe:43:6f:81:6a:2c:33:91:
                    52:f9:9c:45:93:f3:d4:52:80:2b:9c:c1:fb:57:18:
                    fc:eb:fc:ed:69:3f:27:51:b2:ca:54:52:ad:7a:a3:
                    41:7e:40:f5:0b:57:d0:5f:48:92:0d:0c:f9:45:44:
                    d1:f4:88:d5:ab:6d:eb:a9:2b:c4:70:23:2a:62:98:
                    87:a0:e3:d4:39:ff:c8:f2:5c:d5:c9:56:01:43:d7:
                    a8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D9:E1:F5:34:38:7A:EB:E1:24:37:C1:67:AE:95:B6:06:F8:A9:9C
            X509v3 Authority Key Identifier:
                keyid:45:02:CD:1B:49:64:4F:16:40:2D:76:41:30:FC:71:B6:76:EC:91:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/4502CD1B49644F16402D764130FC71B676EC91F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4502CD1B49644F16402D764130FC71B676EC91F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/323830343a3663343a393030303a3a2f33362d313238203d3e20323632383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c4:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4c:33:f2:7f:f5:ea:f5:3e:89:8a:a1:4b:4e:b9:3c:61:4d:1a:
         9a:01:86:71:e0:08:2a:4c:1e:4a:d1:5e:1a:31:2b:b9:c7:ba:
         c8:03:d8:c5:b8:b5:32:62:94:96:30:09:4c:05:25:94:06:10:
         fc:24:0c:18:0f:de:4c:14:b5:2b:37:45:80:87:21:25:d6:81:
         ce:bf:8f:9b:27:41:6e:1b:08:e1:d4:f2:99:4f:34:5c:2f:3d:
         91:27:d7:5f:ba:18:1b:dd:0e:66:3f:ae:86:22:6a:70:dd:cd:
         67:50:6b:ef:5d:76:a0:5c:3a:44:f8:5b:05:65:44:f5:ea:26:
         50:3e:23:a5:34:e9:db:90:8f:f8:d6:e4:78:47:3e:e9:9e:b2:
         73:7a:0f:a1:54:fe:12:6c:a8:bc:26:4f:14:18:cd:d5:5b:e8:
         26:8d:b0:06:7c:53:a5:2c:6a:62:12:eb:0c:9e:4d:52:86:15:
         59:af:13:d8:fc:c2:d5:af:98:10:7a:30:d2:a4:92:32:2f:4e:
         bd:71:fc:f6:7e:69:72:d1:ab:be:f3:b7:1a:36:b3:b7:c8:01:
         50:5c:9d:b2:2d:21:f3:ea:3e:b8:4a:ea:d1:dc:52:c2:c8:d4:
         88:8c:c4:e4:08:3b:74:0d:73:24:8a:90:f6:51:0a:39:03:16:
         3c:ee:dc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:54 2024 by rpki-client on console-fra.rpki-client.org