Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/323830343a3137303a343030303a3a2f33362d3336203d3e203238313331.roa
File:                     323830343a3137303a343030303a3a2f33362d3336203d3e203238313331.roa (raw, json)
Hash identifier:          lshOIwVuk9KkKvzrDrq1YzwoSlWtro4kfllU4XdynoU=
Subject key identifier:   1D:36:24:1A:A5:53:68:1F:5E:B1:04:B5:47:25:DF:02:5D:05:A2:2C
Certificate issuer:       /CN=71C5C4E632B7A76B4E137F2B3E64580950B3A16D
Certificate serial:       2517B10E46347295355FBD4C9A661FDBE8FBB8ED
Authority key identifier: 71:C5:C4:E6:32:B7:A7:6B:4E:13:7F:2B:3E:64:58:09:50:B3:A1:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/323830343a3137303a343030303a3a2f33362d3336203d3e203238313331.roa
Signing time:             Tue 17 Oct 2023 17:58:50 +0000
ROA not before:           Tue 17 Oct 2023 17:53:50 +0000
ROA not after:            Tue 15 Oct 2024 17:58:50 +0000
asID:                     28131
IP address blocks:        2804:170:4000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:17:b1:0e:46:34:72:95:35:5f:bd:4c:9a:66:1f:db:e8:fb:b8:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C5C4E632B7A76B4E137F2B3E64580950B3A16D
        Validity
            Not Before: Oct 17 17:53:50 2023 GMT
            Not After : Oct 15 17:58:50 2024 GMT
        Subject: CN=1D36241AA553681F5EB104B54725DF025D05A22C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:31:b6:ce:53:b5:48:a0:b7:44:dd:97:8f:32:
                    aa:53:56:59:bf:4a:ab:64:92:a5:05:26:20:96:55:
                    ce:4d:62:fa:43:b5:05:45:da:7c:fd:ce:de:b5:91:
                    ec:5c:3d:a7:4d:40:38:ca:f7:d4:9e:37:90:a8:c4:
                    59:a0:d8:01:02:4b:ee:16:43:8c:64:1e:42:44:04:
                    11:df:01:d1:37:40:5a:56:8f:63:07:ed:76:3b:df:
                    4a:44:7d:1e:7a:75:92:a9:74:86:08:88:30:43:ed:
                    8d:50:35:77:8d:b6:92:16:8d:7e:6c:09:93:db:3c:
                    d9:bb:ef:e9:53:c8:60:01:ad:6d:3f:bf:5a:b2:48:
                    d1:11:fa:69:8b:ff:b4:a9:82:8c:5f:25:0e:28:3a:
                    ec:8a:08:de:6f:ee:de:14:cf:66:fa:5b:6c:8a:b2:
                    04:8a:d4:aa:c8:a6:73:7a:ff:20:69:dc:c2:70:69:
                    06:a4:37:17:7e:4f:76:c4:f4:d1:43:b9:c8:f8:f6:
                    04:38:b3:1c:2f:1d:0b:9a:1a:bf:5f:4e:41:3b:97:
                    1b:d4:c2:c2:50:af:78:4d:11:bc:57:f5:ef:d1:85:
                    9a:85:54:09:a7:75:2a:13:ec:74:97:ad:25:74:06:
                    e0:28:bb:a2:37:b5:86:a2:81:8f:82:2f:ab:cb:34:
                    71:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:36:24:1A:A5:53:68:1F:5E:B1:04:B5:47:25:DF:02:5D:05:A2:2C
            X509v3 Authority Key Identifier:
                keyid:71:C5:C4:E6:32:B7:A7:6B:4E:13:7F:2B:3E:64:58:09:50:B3:A1:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/323830343a3137303a343030303a3a2f33362d3336203d3e203238313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:170:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         56:34:f3:5b:6e:44:da:a8:99:22:f2:1c:5c:4b:17:b0:cb:a9:
         d9:19:a1:ee:d6:06:a0:7f:ab:f3:c1:42:ed:4a:66:de:a9:57:
         a5:93:0b:f2:94:28:b6:76:fa:ed:0f:39:f2:3e:3f:77:28:2c:
         74:e3:36:55:9d:8e:28:04:49:77:b7:ce:93:28:cb:5c:9a:1a:
         e0:d3:1b:17:9f:20:7d:57:65:fc:36:10:6c:e9:f6:fb:2b:7b:
         6a:02:82:99:7b:1f:4c:80:83:17:08:36:07:fe:06:76:ef:dd:
         db:3f:f5:57:72:d8:0a:9e:db:7a:b2:7b:e6:c6:69:b4:e4:6a:
         95:56:61:d8:f3:83:cf:10:02:c3:e9:4b:bd:46:61:42:87:30:
         60:26:13:c1:1f:ff:64:ee:e9:aa:9e:8a:1f:f6:cb:48:3c:b3:
         95:0c:b2:b5:ae:cf:e9:e4:72:3f:05:a4:bc:d3:a2:19:72:cc:
         9a:c2:1a:ad:44:5f:6f:e5:29:d7:37:bb:38:17:41:ba:ae:7a:
         c7:8d:ab:9b:ce:af:da:65:b3:0e:38:8e:26:85:92:ae:11:e7:
         00:ba:35:ec:38:1e:90:92:25:09:18:f3:3a:42:17:05:04:2d:
         49:d4:d7:d3:22:4a:f8:87:70:2f:fc:27:ee:e4:f4:e6:8a:17:
         e4:05:2d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org