Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/323830343a326134303a3a2f33322d3438203d3e20323634303637.roa
File:                     323830343a326134303a3a2f33322d3438203d3e20323634303637.roa (raw, json)
Hash identifier:          WkwD83tBojgRczjk0VVYvA/mjYqlDB2m20LXjedQaTw=
Subject key identifier:   C8:CD:59:DB:8E:8D:34:07:41:70:33:D3:B6:96:8D:22:7E:F8:55:71
Certificate issuer:       /CN=4B4BC33D1FA392E2886CFF61072071FCB67D977E
Certificate serial:       3023D4EC9B66034AB9DA887CEE3B250E403B326E
Authority key identifier: 4B:4B:C3:3D:1F:A3:92:E2:88:6C:FF:61:07:20:71:FC:B6:7D:97:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B4BC33D1FA392E2886CFF61072071FCB67D977E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/323830343a326134303a3a2f33322d3438203d3e20323634303637.roa
Signing time:             Thu 03 Aug 2023 17:52:00 +0000
ROA not before:           Thu 03 Aug 2023 17:47:00 +0000
ROA not after:            Thu 01 Aug 2024 17:52:00 +0000
asID:                     264067
IP address blocks:        2804:2a40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:23:d4:ec:9b:66:03:4a:b9:da:88:7c:ee:3b:25:0e:40:3b:32:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B4BC33D1FA392E2886CFF61072071FCB67D977E
        Validity
            Not Before: Aug  3 17:47:00 2023 GMT
            Not After : Aug  1 17:52:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:84:44:68:15:ab:23:58:0f:59:9e:72:0a:6c:
                    3a:85:3e:df:96:4c:2d:db:08:1b:0a:a0:38:ef:1d:
                    c1:ac:1a:af:96:02:9e:8f:b4:fc:21:0d:04:18:db:
                    a0:5a:7e:19:57:91:76:b6:a5:c9:d3:8a:a0:9a:98:
                    be:ec:f2:1b:f5:28:22:f5:0a:0f:c7:48:50:4a:b7:
                    22:8a:17:19:40:69:c6:be:e7:ca:97:c4:a7:f6:f7:
                    1c:9e:90:46:3b:ed:27:6c:bb:91:de:5f:e6:93:a4:
                    55:6f:24:be:5c:d0:fa:8e:b3:68:56:00:3c:ed:10:
                    18:2b:92:a0:36:42:f8:73:84:b2:be:65:8d:84:6f:
                    8a:35:06:87:bc:23:00:e5:b2:eb:55:f6:d7:ef:42:
                    66:5f:81:9e:94:bd:6f:64:fe:c5:f7:7c:0e:77:03:
                    dc:d7:63:f2:d8:13:a5:12:c4:7b:bb:6e:f5:f7:3e:
                    78:dd:56:c3:3f:6a:43:8c:1e:4f:7f:0b:b0:56:6e:
                    03:9b:0c:f5:ac:eb:d8:21:3e:e0:e4:ee:9e:f5:ea:
                    11:27:90:4a:c7:2d:8a:e8:50:a7:d1:15:af:09:9a:
                    ab:9f:77:15:01:af:b3:92:b7:46:72:72:2b:6b:16:
                    63:11:cc:5f:8e:26:60:66:6e:f5:e5:6d:44:a2:32:
                    5a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CD:59:DB:8E:8D:34:07:41:70:33:D3:B6:96:8D:22:7E:F8:55:71
            X509v3 Authority Key Identifier:
                keyid:4B:4B:C3:3D:1F:A3:92:E2:88:6C:FF:61:07:20:71:FC:B6:7D:97:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/4B4BC33D1FA392E2886CFF61072071FCB67D977E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B4BC33D1FA392E2886CFF61072071FCB67D977E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/323830343a326134303a3a2f33322d3438203d3e20323634303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:81:29:68:94:c6:03:1d:6e:32:67:24:01:8e:0e:36:24:71:
         a3:32:ff:ed:59:b0:00:9c:b4:31:2f:e0:5a:6f:ab:8f:29:a0:
         75:b7:ed:71:bf:be:e8:27:6a:be:23:8d:46:7d:65:4a:45:5e:
         21:73:57:a4:6d:a0:45:fb:9d:bc:f6:4a:e0:d9:d2:64:b4:42:
         54:b7:bd:77:b2:2a:d9:a7:17:8c:ef:d0:e6:6b:b3:ff:27:31:
         ce:16:39:f6:c2:77:5b:ef:bd:2b:49:ad:f7:7d:e0:4d:de:59:
         d5:46:20:cf:f4:2d:2f:cf:80:cf:b2:ae:ab:d4:d8:43:ce:68:
         1d:85:67:6d:16:76:9c:d3:08:76:4a:63:2c:7c:d3:9e:64:86:
         d2:5e:e1:2f:8f:16:bb:f1:51:06:0e:14:93:13:a3:34:25:84:
         3c:48:eb:2f:aa:7c:b0:cc:88:6f:46:73:50:d5:5d:26:8b:2e:
         e9:60:43:da:56:f7:30:6f:b3:40:7e:8e:4e:fd:0b:19:4a:c2:
         90:64:f3:49:b5:29:61:e6:75:c8:81:8c:47:af:d7:2f:68:04:
         4a:cc:b1:1e:0c:4c:d1:4d:41:89:fc:f5:03:db:8e:cf:7a:e6:
         da:23:eb:33:6c:de:e1:88:14:6f:d5:64:52:68:b2:e0:e0:df:
         5e:7b:10:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org