Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/1/323830343a6139633a3a2f33322d3332203d3e203532383938.roa
File:                     323830343a6139633a3a2f33322d3332203d3e203532383938.roa (raw, json)
Hash identifier:          J2+VP6043RgtqZy3BYm77ICt8oq9FVObcSCU9jeHE7E=
Subject key identifier:   29:37:91:B4:50:DF:EF:30:50:F8:07:17:C7:BC:09:F9:C1:2F:27:A5
Certificate issuer:       /CN=A4A2147C826AA09BEB6579775A08DAC3E4E9DBDC
Certificate serial:       3ED412DE9BF2D2AB691547EA3F06EC604CB31C87
Authority key identifier: A4:A2:14:7C:82:6A:A0:9B:EB:65:79:77:5A:08:DA:C3:E4:E9:DB:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4A2147C826AA09BEB6579775A08DAC3E4E9DBDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/1/323830343a6139633a3a2f33322d3332203d3e203532383938.roa
Signing time:             Thu 18 Jan 2024 13:12:13 +0000
ROA not before:           Thu 18 Jan 2024 13:07:13 +0000
ROA not after:            Thu 16 Jan 2025 13:12:13 +0000
asID:                     52898
IP address blocks:        2804:a9c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d4:12:de:9b:f2:d2:ab:69:15:47:ea:3f:06:ec:60:4c:b3:1c:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4A2147C826AA09BEB6579775A08DAC3E4E9DBDC
        Validity
            Not Before: Jan 18 13:07:13 2024 GMT
            Not After : Jan 16 13:12:13 2025 GMT
        Subject: CN=293791B450DFEF3050F80717C7BC09F9C12F27A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8e:24:e0:47:38:a4:48:9c:e7:c1:51:12:5f:
                    30:19:bc:e1:c7:de:fe:d3:38:df:75:4a:29:b9:a1:
                    77:fa:b6:7b:7d:96:ff:99:4c:08:99:e5:d3:87:4a:
                    c0:47:a5:d4:0c:a1:69:78:7d:f5:18:cb:0e:bb:5c:
                    ba:05:1f:a4:70:f1:cc:9f:07:27:25:61:a6:6f:4a:
                    fb:2e:48:e4:40:16:dc:2b:56:de:ff:51:2a:7e:1d:
                    f3:c7:56:7b:40:ce:23:4f:0a:79:91:18:03:e1:c9:
                    49:d2:d2:09:70:a8:d1:8e:57:73:59:c8:fc:c4:a8:
                    4e:64:ae:c5:3f:d8:1c:6a:76:0c:0f:76:8f:e2:9f:
                    ba:a1:2d:45:c5:be:a2:aa:26:7e:15:58:80:21:01:
                    01:1e:af:b8:25:1a:3e:e2:e9:d8:68:6e:2f:e8:7a:
                    27:51:ea:b2:d7:e8:b0:7a:54:bf:0c:7d:95:09:ca:
                    47:1f:a2:ca:56:2d:3e:69:21:08:7a:e8:1e:bb:af:
                    e4:bd:ae:fc:74:20:44:47:32:f6:53:51:7f:82:d5:
                    df:05:75:29:c1:d2:cb:dc:59:fd:0f:d2:08:bb:12:
                    ac:0f:69:18:a6:a7:4f:72:fe:f4:fd:dc:c5:2c:be:
                    5a:5c:90:84:09:69:b2:6a:82:4e:6b:2e:06:22:13:
                    53:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:37:91:B4:50:DF:EF:30:50:F8:07:17:C7:BC:09:F9:C1:2F:27:A5
            X509v3 Authority Key Identifier:
                keyid:A4:A2:14:7C:82:6A:A0:9B:EB:65:79:77:5A:08:DA:C3:E4:E9:DB:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/1/A4A2147C826AA09BEB6579775A08DAC3E4E9DBDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4A2147C826AA09BEB6579775A08DAC3E4E9DBDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/1/323830343a6139633a3a2f33322d3332203d3e203532383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a9c::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:69:91:d7:f6:0b:9d:2d:61:22:eb:ea:16:1b:e8:3a:f8:1c:
         55:d0:cd:ee:57:5f:cd:d7:50:97:22:4e:95:f6:5c:20:88:55:
         80:88:15:df:c1:f9:a1:0a:bc:f2:1b:28:7e:2a:1f:fb:54:43:
         20:65:a0:46:a4:60:12:4b:95:19:68:ea:86:bd:d0:a7:40:12:
         0e:60:b6:41:25:cf:84:ec:b3:5c:ec:51:b3:4f:fa:eb:f2:83:
         60:23:05:26:fb:eb:27:30:de:90:9d:ee:f3:41:28:22:7e:49:
         6d:c2:ad:19:49:15:1c:9d:89:22:a4:11:de:98:f5:9f:1d:f2:
         19:42:83:43:bc:87:70:3e:8d:84:4b:4d:9b:a9:70:e7:81:39:
         dd:90:23:85:39:52:22:38:14:4e:d2:75:c0:0a:98:b4:24:b7:
         19:b0:b4:75:7c:cb:ff:b3:35:a2:58:c0:97:90:41:39:fa:95:
         19:0c:b1:b6:5e:d2:0a:c3:38:d1:ea:77:5f:e2:50:34:54:86:
         6b:6f:8d:aa:77:9d:82:8d:4e:97:d1:7f:99:5a:dc:e1:15:05:
         70:1f:d0:d2:c9:77:83:3c:db:10:c4:ec:b4:1b:c9:17:38:a1:
         2f:23:8f:e5:25:02:9e:47:d8:6f:19:9a:1c:5d:dc:25:d8:51:
         47:d9:d7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org