Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/0/323830343a363931343a3a2f33322d3438203d3e20323730323437.roa
File:                     323830343a363931343a3a2f33322d3438203d3e20323730323437.roa (raw, json)
Hash identifier:          +q0LyvSDCPH7cc7wyNazpdF2jT3giAMSFlPDwfWzQXo=
Subject key identifier:   28:C4:FD:40:D8:9A:F7:21:2C:F0:7D:31:08:F1:E5:AA:D0:B1:3D:CD
Certificate issuer:       /CN=A17E1666B400764AAB84BF876124DB6CB1EB0DC3
Certificate serial:       1D5D7892DCA96E3235BF9CB7357B610D5FAB464A
Authority key identifier: A1:7E:16:66:B4:00:76:4A:AB:84:BF:87:61:24:DB:6C:B1:EB:0D:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A17E1666B400764AAB84BF876124DB6CB1EB0DC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/0/323830343a363931343a3a2f33322d3438203d3e20323730323437.roa
Signing time:             Wed 10 Apr 2024 13:19:27 +0000
ROA not before:           Wed 10 Apr 2024 13:14:27 +0000
ROA not after:            Wed 09 Apr 2025 13:19:27 +0000
asID:                     270247
IP address blocks:        2804:6914::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:5d:78:92:dc:a9:6e:32:35:bf:9c:b7:35:7b:61:0d:5f:ab:46:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A17E1666B400764AAB84BF876124DB6CB1EB0DC3
        Validity
            Not Before: Apr 10 13:14:27 2024 GMT
            Not After : Apr  9 13:19:27 2025 GMT
        Subject: CN=28C4FD40D89AF7212CF07D3108F1E5AAD0B13DCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b4:bc:c3:95:25:79:f0:c3:82:e1:ee:31:93:
                    74:97:ce:7b:8e:07:69:85:01:6c:70:f0:7e:57:1d:
                    5d:77:6b:bf:93:07:b8:f0:dd:c8:95:63:50:3b:1f:
                    b2:61:c7:e3:42:6f:f2:76:3b:3e:9e:a5:86:dc:ad:
                    05:8b:d7:82:fe:ec:ed:58:10:0d:b9:1a:2c:bd:b0:
                    e4:21:50:15:ca:b1:93:7f:d1:ef:c0:0e:a8:24:9c:
                    a9:02:49:8a:74:2d:cd:50:00:db:be:d1:30:ed:f1:
                    65:3c:23:d1:8e:eb:bf:e6:f6:7b:99:ed:42:78:d3:
                    1e:5b:46:bf:a3:16:0a:5b:3a:9f:05:05:2d:1a:2b:
                    a7:1f:84:49:b3:b7:86:6d:07:6a:36:18:c0:22:f7:
                    60:27:46:ab:ba:72:48:e5:d7:cb:e7:4a:a4:d3:51:
                    7a:3b:90:54:80:b9:01:58:0e:a5:c7:ea:45:91:eb:
                    52:d3:3d:7a:e2:69:9e:94:a6:f0:74:e0:23:57:32:
                    cd:45:c2:23:d4:e3:32:dc:38:d2:b4:9b:ee:b8:cf:
                    86:fd:37:8b:0a:3e:40:a8:2a:68:59:84:27:1a:22:
                    33:63:ff:da:eb:d1:86:0f:45:e1:eb:4a:92:f2:a2:
                    27:a8:58:c4:84:01:2b:b9:f1:be:f8:cd:07:35:b3:
                    34:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C4:FD:40:D8:9A:F7:21:2C:F0:7D:31:08:F1:E5:AA:D0:B1:3D:CD
            X509v3 Authority Key Identifier:
                keyid:A1:7E:16:66:B4:00:76:4A:AB:84:BF:87:61:24:DB:6C:B1:EB:0D:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/0/A17E1666B400764AAB84BF876124DB6CB1EB0DC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A17E1666B400764AAB84BF876124DB6CB1EB0DC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/0/323830343a363931343a3a2f33322d3438203d3e20323730323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6914::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:0d:ce:ea:2e:fe:46:8a:4a:34:c3:4a:6b:19:e3:34:3a:8a:
         15:39:ce:c0:b6:b5:02:53:34:c5:75:27:8f:f0:f5:8a:26:3d:
         76:2c:49:ab:fe:e3:af:b6:15:dd:5f:1f:aa:dd:94:82:d0:5a:
         84:19:4a:ba:7c:da:ea:3c:b2:c5:50:f7:61:ad:08:00:98:c8:
         50:a8:27:11:2f:6d:8f:e8:38:28:89:37:ae:04:60:3a:2d:31:
         96:8b:32:11:46:5b:1c:57:be:22:ea:8d:fa:28:55:cf:62:32:
         95:ae:db:93:c5:c9:8b:db:e1:32:08:ba:f7:9a:c4:53:8e:3f:
         6a:37:15:62:38:49:1e:91:eb:45:99:c8:39:dd:98:08:6a:3e:
         00:c5:eb:6f:55:0b:28:1f:4b:27:bb:24:02:52:81:ec:cd:21:
         da:ca:ff:fd:00:02:10:53:02:cf:0c:21:5e:b3:43:13:a7:54:
         e5:0b:09:32:2f:b9:48:7d:74:30:be:3f:75:6a:f3:3c:3f:eb:
         31:04:84:87:f7:20:37:0a:66:a4:f5:55:94:70:d3:c2:f1:ce:
         05:13:95:67:c3:99:b6:c1:20:97:50:b6:e6:44:3e:bb:26:af:
         e9:ad:6b:2b:81:25:52:88:ba:b6:de:68:a4:a9:5c:dc:21:26:
         ec:bc:41:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org