Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/0/323830343a333764383a3a2f33322d3337203d3e20323636343339.roa
File:                     323830343a333764383a3a2f33322d3337203d3e20323636343339.roa (raw, json)
Hash identifier:          wqNLd2aIY6YsOYMFKv+ZA8P0iRFnT9uuEkHC92dkWcA=
Subject key identifier:   11:6A:99:55:F1:F9:3D:D3:5C:C6:B8:D6:BE:C2:4A:65:C9:41:DC:4D
Certificate issuer:       /CN=323408F4A08085567D2BEEC5D6976D62865EE349
Certificate serial:       2788806A431C862AFFEC78E38C150751E3C6EC05
Authority key identifier: 32:34:08:F4:A0:80:85:56:7D:2B:EE:C5:D6:97:6D:62:86:5E:E3:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/323408F4A08085567D2BEEC5D6976D62865EE349.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/0/323830343a333764383a3a2f33322d3337203d3e20323636343339.roa
Signing time:             Thu 28 Mar 2024 12:09:03 +0000
ROA not before:           Thu 28 Mar 2024 12:04:03 +0000
ROA not after:            Thu 27 Mar 2025 12:09:03 +0000
asID:                     266439
IP address blocks:        2804:37d8::/32 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:88:80:6a:43:1c:86:2a:ff:ec:78:e3:8c:15:07:51:e3:c6:ec:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=323408F4A08085567D2BEEC5D6976D62865EE349
        Validity
            Not Before: Mar 28 12:04:03 2024 GMT
            Not After : Mar 27 12:09:03 2025 GMT
        Subject: CN=116A9955F1F93DD35CC6B8D6BEC24A65C941DC4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8f:55:8c:e6:ad:a3:b9:52:da:54:2f:16:f1:
                    3f:73:aa:b5:0f:eb:aa:cf:3d:0d:b1:e9:cb:af:08:
                    c4:cf:07:58:42:21:74:53:c1:76:83:9d:6e:27:25:
                    fd:92:7f:e3:6d:db:f0:f5:77:0d:af:01:b2:02:57:
                    92:32:73:a1:97:10:3d:b5:d2:d6:22:17:5d:6c:c9:
                    61:1b:4b:e3:c7:30:4a:ad:05:80:6f:4d:53:6e:01:
                    49:fe:1e:d0:8c:31:ef:63:17:f7:10:5b:52:14:05:
                    0b:54:88:be:f8:c2:24:d2:45:2b:d0:50:6c:5a:b4:
                    41:95:c9:79:f0:9c:4c:26:85:4d:e4:64:57:5c:38:
                    d0:48:7c:45:a0:5f:b5:9b:cf:76:32:97:8d:dd:61:
                    ac:97:04:fb:c9:5e:38:b0:99:87:86:f1:f6:fc:c4:
                    48:01:b2:97:31:9c:2e:83:7f:3c:6c:ad:f5:f3:fe:
                    1a:5f:9b:75:ee:61:4d:43:bb:b0:f5:68:1c:a0:6f:
                    ab:c0:03:4a:e6:2a:c0:0e:74:f7:99:f0:9b:44:a3:
                    bd:da:8a:b6:29:aa:fb:07:73:96:68:2c:06:42:ac:
                    45:dd:a1:11:56:c3:94:62:ee:6e:86:d8:cc:ca:a7:
                    be:4d:98:b3:90:f4:b6:15:d1:98:a2:d2:1f:71:03:
                    22:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:6A:99:55:F1:F9:3D:D3:5C:C6:B8:D6:BE:C2:4A:65:C9:41:DC:4D
            X509v3 Authority Key Identifier:
                keyid:32:34:08:F4:A0:80:85:56:7D:2B:EE:C5:D6:97:6D:62:86:5E:E3:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/0/323408F4A08085567D2BEEC5D6976D62865EE349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/323408F4A08085567D2BEEC5D6976D62865EE349.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/0/323830343a333764383a3a2f33322d3337203d3e20323636343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:f6:96:e2:1d:f8:de:4e:c5:a3:65:39:ab:1c:f0:9c:c4:86:
         8f:63:aa:00:61:b8:58:4f:4e:11:d5:e3:fe:54:0f:e0:89:6f:
         8f:a0:fb:ff:13:8e:fa:dc:41:37:0c:b6:49:b5:42:2c:8f:39:
         38:0f:c6:1f:b8:8c:81:44:5d:75:4b:da:1a:71:5e:72:5f:dd:
         d5:15:7b:48:2d:c3:7c:16:93:8f:06:c3:a0:71:ce:3c:3b:81:
         f4:13:93:3d:ee:b8:88:f2:0d:d9:fb:20:92:ba:0a:95:08:b8:
         8b:a9:8a:e9:42:49:8b:bd:49:0d:b3:6a:8d:d5:7a:25:8f:1b:
         ee:84:12:6d:fb:43:bd:f0:48:32:43:a2:e3:15:e7:d3:6a:f3:
         08:7f:2a:40:99:b0:d3:56:15:80:39:b4:9b:4d:8f:d8:18:3e:
         11:b7:05:80:80:f9:db:96:f6:9f:ee:51:ce:3c:ae:92:12:c1:
         f3:bb:ac:ff:f1:3b:46:3e:32:1f:c2:af:60:b0:df:11:e1:52:
         9c:f7:e3:cd:21:15:86:47:f4:82:f0:4e:15:8d:c6:7f:a1:46:
         53:68:79:af:14:01:e3:25:7f:80:a8:08:95:28:0f:30:aa:ed:
         39:a9:d9:7c:1a:e7:7f:64:8a:e8:ea:a3:bc:72:0d:18:16:ce:
         33:df:ca:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org