Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/323830343a323537303a393030303a3a2f34342d3434203d3e20323634323831.roa
File:                     323830343a323537303a393030303a3a2f34342d3434203d3e20323634323831.roa (raw, json)
Hash identifier:          w9h7A5KTJBqMKGgEXbzMfSlZxvdbt2j35xkeulbsMCI=
Subject key identifier:   D1:1B:91:1C:66:2F:71:F6:55:56:E4:07:47:D6:B3:FF:C6:32:50:29
Certificate issuer:       /CN=4C284B298BD83B2CD795241085A51344CAAA6914
Certificate serial:       51248BE7938E6794A8636163C892C1692FB0DF9F
Authority key identifier: 4C:28:4B:29:8B:D8:3B:2C:D7:95:24:10:85:A5:13:44:CA:AA:69:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C284B298BD83B2CD795241085A51344CAAA6914.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/323830343a323537303a393030303a3a2f34342d3434203d3e20323634323831.roa
Signing time:             Sat 08 Apr 2023 14:04:51 +0000
ROA not before:           Sat 08 Apr 2023 13:59:51 +0000
ROA not after:            Sat 06 Apr 2024 14:04:51 +0000
asID:                     264281
IP address blocks:        2804:2570:9000::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:24:8b:e7:93:8e:67:94:a8:63:61:63:c8:92:c1:69:2f:b0:df:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C284B298BD83B2CD795241085A51344CAAA6914
        Validity
            Not Before: Apr  8 13:59:51 2023 GMT
            Not After : Apr  6 14:04:51 2024 GMT
        Subject: CN=D11B911C662F71F65556E40747D6B3FFC6325029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7a:47:b8:88:2e:ab:8e:75:0b:04:38:57:2d:
                    cb:7a:88:cf:2e:f8:5c:59:d2:5d:d9:93:fc:6a:ad:
                    e8:af:e0:5c:31:36:d9:37:4b:e8:e9:37:8b:2f:ad:
                    09:3b:70:9f:02:d5:d1:70:e3:38:c4:b7:4f:75:e4:
                    28:08:77:a0:5c:96:dd:ab:ed:d1:46:fa:d7:b4:2d:
                    0f:d4:1d:18:3c:60:00:f8:8d:65:cb:dc:ab:02:01:
                    11:54:89:48:fa:e7:89:bd:89:1b:b7:81:85:a3:fb:
                    11:7c:03:9f:fc:55:11:0d:cf:3b:8d:f2:f5:b0:4a:
                    9e:40:aa:2e:16:d3:07:58:9c:80:7b:a7:26:1b:f8:
                    43:86:85:64:e8:ed:a9:09:06:b8:06:e3:b9:cb:07:
                    8f:4b:1c:13:c9:b3:0a:97:42:f0:17:0f:28:9b:ba:
                    43:0d:0d:8f:53:01:ec:20:70:3f:9f:f8:30:11:cd:
                    53:f5:95:28:d9:bf:34:63:49:97:b2:1c:2a:48:81:
                    17:d6:aa:a7:13:14:be:33:2b:6d:5c:dd:93:ea:41:
                    bc:85:67:57:ec:05:e2:22:49:e2:b1:96:6b:6f:31:
                    fb:b4:a1:51:16:aa:aa:20:38:30:5e:44:04:47:1b:
                    ab:49:be:7c:58:56:a4:6f:cf:d9:06:f6:2d:06:28:
                    3a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:1B:91:1C:66:2F:71:F6:55:56:E4:07:47:D6:B3:FF:C6:32:50:29
            X509v3 Authority Key Identifier:
                keyid:4C:28:4B:29:8B:D8:3B:2C:D7:95:24:10:85:A5:13:44:CA:AA:69:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/4C284B298BD83B2CD795241085A51344CAAA6914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C284B298BD83B2CD795241085A51344CAAA6914.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/323830343a323537303a393030303a3a2f34342d3434203d3e20323634323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2570:9000::/44

    Signature Algorithm: sha256WithRSAEncryption
         48:fd:9f:aa:ba:32:f4:10:89:9b:5e:96:37:3a:33:39:b1:13:
         45:fd:a2:d3:c5:4c:b2:68:8b:d7:0a:fc:ad:b1:d7:26:2b:22:
         cc:eb:e7:46:39:d9:53:22:c8:e0:20:2a:02:0b:10:1d:4c:c2:
         99:5b:9c:98:6b:b0:d2:5a:8f:a9:cd:1e:5a:a0:96:38:d9:ce:
         23:74:31:79:b2:7b:5a:c7:22:09:db:89:32:cc:5c:0f:7f:a8:
         a0:a5:bc:f9:a8:7d:79:48:df:b2:ff:95:c0:26:95:6c:10:ba:
         1c:14:73:ca:08:01:40:29:7d:f6:72:67:a2:87:07:6b:d1:d4:
         d6:4c:68:a7:a3:43:b0:9b:c9:87:f6:75:a5:ae:da:35:26:17:
         b4:44:cc:15:5f:67:3b:cb:2f:cf:f0:4e:0c:28:c6:85:5b:55:
         3e:b9:74:d4:23:d8:92:fc:07:93:8b:ee:93:20:de:df:9e:59:
         94:8c:d0:6b:8f:7e:9e:57:68:4d:2b:44:a7:01:39:1f:5f:1b:
         64:a9:73:5b:58:70:9c:41:54:6d:e2:01:45:0a:98:a3:4b:5e:
         68:c8:60:ed:fe:a7:97:6b:74:3f:30:5f:9d:b3:a2:b6:73:61:
         7d:d1:37:4a:78:69:16:58:a6:fd:51:be:c6:e8:6c:b3:af:d6:
         96:b4:4c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org