Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/323830343a346133343a3a2f33322d3438203d3e20323637323234.roa
File:                     323830343a346133343a3a2f33322d3438203d3e20323637323234.roa (raw, json)
Hash identifier:          olWIyfq1GDmPTuOEi52K/nJRlZeNrFvD3dNNyLZwniA=
Subject key identifier:   11:BF:EC:8F:19:12:94:23:CA:84:4F:2D:FB:9D:9B:A0:3F:1E:5D:43
Certificate issuer:       /CN=63825675362B0D0D5859F8C69B1DB2C0F8A2DC10
Certificate serial:       4A18D580A3B8643B6E91A33FB113C2209E08180A
Authority key identifier: 63:82:56:75:36:2B:0D:0D:58:59:F8:C6:9B:1D:B2:C0:F8:A2:DC:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63825675362B0D0D5859F8C69B1DB2C0F8A2DC10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/323830343a346133343a3a2f33322d3438203d3e20323637323234.roa
Signing time:             Wed 10 Aug 2022 18:00:00 +0000
ROA not before:           Wed 10 Aug 2022 17:55:00 +0000
ROA not after:            Thu 10 Aug 2023 18:00:00 +0000
asID:                     267224
IP address blocks:        2804:4a34::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:18:d5:80:a3:b8:64:3b:6e:91:a3:3f:b1:13:c2:20:9e:08:18:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63825675362B0D0D5859F8C69B1DB2C0F8A2DC10
        Validity
            Not Before: Aug 10 17:55:00 2022 GMT
            Not After : Aug 10 18:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5d:8c:f5:2d:2a:2d:dc:36:e7:51:22:81:86:
                    2d:d6:85:73:33:97:02:38:18:83:b8:41:4d:49:5a:
                    ac:7c:8f:0c:53:6f:71:ba:8a:5b:1d:38:4a:1f:1e:
                    6e:36:e8:d5:d6:da:fd:0b:ed:1c:56:37:19:01:89:
                    1b:2c:e5:2c:81:1d:29:e9:58:ce:15:6b:7b:f5:08:
                    94:16:26:71:96:37:c5:4a:3f:3b:4a:2d:24:85:a7:
                    b1:40:0c:d5:2c:ea:6f:1f:83:f7:dd:85:0d:cd:7f:
                    01:47:e9:88:0c:0e:29:af:6d:39:b3:2d:7c:18:cd:
                    cc:7d:33:fc:09:fe:9a:6b:83:f9:4b:5e:8d:a1:05:
                    a3:98:57:71:57:3b:87:21:7c:c6:4d:b5:98:3f:e6:
                    bc:e7:a6:40:f5:cb:e2:59:e5:b4:b1:fc:74:c0:26:
                    28:c5:55:51:30:91:a3:62:6e:52:9c:78:4e:1d:49:
                    64:21:f3:ac:f2:13:49:c0:f3:c5:47:8a:00:4f:d0:
                    cc:b2:11:3b:ac:ca:ae:28:46:fb:3e:dc:a1:ea:77:
                    bf:17:ed:0e:e5:5f:cc:9a:38:af:9c:9c:a2:f2:3b:
                    48:f5:87:41:c6:c7:db:7f:bd:e8:59:b3:73:b7:c6:
                    79:c5:58:ed:af:c2:12:c7:24:72:6b:22:85:9a:ca:
                    45:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BF:EC:8F:19:12:94:23:CA:84:4F:2D:FB:9D:9B:A0:3F:1E:5D:43
            X509v3 Authority Key Identifier:
                keyid:63:82:56:75:36:2B:0D:0D:58:59:F8:C6:9B:1D:B2:C0:F8:A2:DC:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/63825675362B0D0D5859F8C69B1DB2C0F8A2DC10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63825675362B0D0D5859F8C69B1DB2C0F8A2DC10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/323830343a346133343a3a2f33322d3438203d3e20323637323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a34::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:94:be:9f:2e:88:0f:68:6f:c0:ad:0d:06:40:9c:f0:86:af:
         aa:a9:8d:2b:16:05:2f:53:98:3c:9e:55:a9:a4:75:fd:aa:eb:
         9b:89:1a:5a:f0:3c:a3:46:04:53:45:0b:13:c1:e0:d8:34:85:
         1d:01:80:89:b3:c0:80:b9:02:0a:61:c0:0a:a8:44:b5:98:ff:
         49:b4:4e:d8:ba:9f:7f:91:47:77:68:b6:07:54:08:60:a9:14:
         78:b9:0b:4a:28:a7:b2:af:c6:50:b8:7d:67:7a:f5:25:7f:42:
         7b:b5:a3:91:28:a3:b1:7d:1f:d1:47:e2:df:87:f2:d2:1e:65:
         b3:bc:88:3d:d1:e4:1f:f9:16:95:4f:53:71:f6:92:06:bf:f9:
         2d:93:0b:ed:5d:b1:dc:d5:61:22:8e:ff:55:88:7b:8e:d2:22:
         ac:20:1d:a9:78:d6:0b:ae:ff:0e:21:9d:a6:37:ec:92:60:09:
         9a:b3:4b:4b:21:64:ab:61:0f:f7:d2:b7:92:f3:11:ce:21:1c:
         28:0d:a8:d3:38:cf:00:21:44:2a:1e:59:56:65:2f:2a:12:92:
         1d:47:9b:76:36:93:57:6a:46:26:4a:a2:33:a5:27:a1:52:b8:
         83:04:e1:30:fb:c2:ba:95:8e:12:67:e2:99:a2:f3:f7:65:07:
         49:ff:eb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org