Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/0/323830343a333764383a3a2f33322d313238203d3e20323636343339.roa
File:                     323830343a333764383a3a2f33322d313238203d3e20323636343339.roa (raw, json)
Hash identifier:          9O7aMV5fsZnSGL3zclMz0wuvQ5tzm71Cjgg5STlkMDU=
Subject key identifier:   B9:50:D8:A5:70:98:40:83:0A:5D:F8:FC:32:E6:AE:EA:66:10:81:30
Certificate issuer:       /CN=323408F4A08085567D2BEEC5D6976D62865EE349
Certificate serial:       01930D5987BF1C11C7FE61F930FEE21C6D0B94E3
Authority key identifier: 32:34:08:F4:A0:80:85:56:7D:2B:EE:C5:D6:97:6D:62:86:5E:E3:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/323408F4A08085567D2BEEC5D6976D62865EE349.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/0/323830343a333764383a3a2f33322d313238203d3e20323636343339.roa
Signing time:             Thu 14 Dec 2023 16:13:01 +0000
ROA not before:           Thu 14 Dec 2023 16:08:01 +0000
ROA not after:            Thu 12 Dec 2024 16:13:01 +0000
asID:                     266439
IP address blocks:        2804:37d8::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:0d:59:87:bf:1c:11:c7:fe:61:f9:30:fe:e2:1c:6d:0b:94:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=323408F4A08085567D2BEEC5D6976D62865EE349
        Validity
            Not Before: Dec 14 16:08:01 2023 GMT
            Not After : Dec 12 16:13:01 2024 GMT
        Subject: CN=B950D8A5709840830A5DF8FC32E6AEEA66108130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4f:d8:31:f5:35:f0:63:6b:f0:64:11:bd:cb:
                    81:16:38:28:02:b4:6a:f4:f5:a6:df:53:5d:b6:0d:
                    0e:40:c0:e4:b5:0c:c9:af:97:57:e6:d0:24:44:30:
                    e2:25:6a:87:6e:08:b0:bf:fb:51:ab:ac:51:fc:32:
                    95:94:de:98:6a:29:f5:53:dd:6b:a0:b1:5b:ec:27:
                    07:02:d9:bb:15:5f:97:08:5c:4d:7f:df:55:70:ac:
                    b0:fa:c4:c0:8d:34:db:a1:4f:80:8b:65:51:26:d0:
                    cb:d2:97:47:7c:6a:07:cd:c5:43:42:25:37:08:ea:
                    76:3e:b0:f3:6c:96:e5:50:23:22:0e:e5:d1:7e:24:
                    a6:96:41:07:18:2a:4e:99:a9:98:63:9a:1c:51:f5:
                    39:cf:27:f0:f7:75:4e:af:4e:59:e3:1b:db:d2:44:
                    e5:fc:fc:b8:ce:50:11:a1:b6:08:97:2d:16:46:c4:
                    2e:bd:fe:63:04:48:03:f1:93:77:0d:68:00:de:2d:
                    35:8b:95:8a:4a:1b:93:5e:8e:3f:b0:6f:39:e7:ee:
                    98:f4:49:70:4f:0f:62:1f:09:e2:e4:80:f7:fe:d5:
                    4e:45:96:49:a6:72:47:99:a6:42:f9:1d:ec:59:cd:
                    9f:8e:ae:4f:87:45:19:a3:eb:20:f1:74:d6:8e:a7:
                    13:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:50:D8:A5:70:98:40:83:0A:5D:F8:FC:32:E6:AE:EA:66:10:81:30
            X509v3 Authority Key Identifier:
                keyid:32:34:08:F4:A0:80:85:56:7D:2B:EE:C5:D6:97:6D:62:86:5E:E3:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/0/323408F4A08085567D2BEEC5D6976D62865EE349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/323408F4A08085567D2BEEC5D6976D62865EE349.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/0/323830343a333764383a3a2f33322d313238203d3e20323636343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:9f:3c:ee:a0:4a:5a:d3:e1:71:bd:a0:52:89:83:16:00:e0:
         6e:e9:00:83:5d:37:77:4c:55:9c:97:86:9e:fe:33:e2:dd:8b:
         da:30:f3:f0:05:05:fd:b3:f5:96:8d:ec:8a:bb:86:69:04:6d:
         1b:28:32:93:64:57:78:f9:89:05:bb:b2:53:49:23:20:e1:fc:
         84:61:b0:12:b9:4b:bf:f9:0c:2c:45:78:af:50:3e:fa:6b:8f:
         82:09:66:a0:07:2e:ff:4b:02:85:9b:44:24:e9:52:7c:9a:88:
         83:2d:3c:70:10:b2:6a:93:62:4f:7a:27:d0:dd:0f:39:4a:89:
         93:85:29:05:53:8f:be:6d:7e:1c:37:9b:94:4f:8a:56:25:00:
         66:08:f7:9b:37:00:1a:26:f7:ca:9d:cc:48:8d:76:62:bb:fc:
         29:71:b3:ce:a0:55:c7:5f:51:99:43:de:22:61:07:d3:38:86:
         cb:35:a0:4e:92:4b:27:42:3f:e4:0b:64:25:f0:2b:9f:0c:f9:
         09:a2:7d:85:2c:12:64:d1:f0:1b:d6:9c:0a:cb:ac:66:c3:54:
         b8:41:87:f0:97:19:95:32:0b:9d:68:ed:b1:1e:3c:64:2e:e2:
         f8:b1:d4:64:28:88:10:8b:58:37:9b:83:a0:2f:8a:a9:34:5c:
         32:4b:e4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org