Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/323830343a366163383a3a2f33322d3334203d3e20323730333538.roa
File:                     323830343a366163383a3a2f33322d3334203d3e20323730333538.roa (raw, json)
Hash identifier:          vBlxTsRTo06+Y0HUjVBjzqwLEJxGaXZ1bJhLQ5+GsR0=
Subject key identifier:   7D:B1:87:C3:53:D6:81:AC:92:51:C9:CE:80:D0:C7:D0:49:FC:E7:69
Certificate issuer:       /CN=61F4874E6474A8E5CE242BD1FB7854FA15297D85
Certificate serial:       55B726B513EE33BB6B3D2D6C772AE6C459A44F57
Authority key identifier: 61:F4:87:4E:64:74:A8:E5:CE:24:2B:D1:FB:78:54:FA:15:29:7D:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F4874E6474A8E5CE242BD1FB7854FA15297D85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/323830343a366163383a3a2f33322d3334203d3e20323730333538.roa
Signing time:             Fri 24 Mar 2023 01:47:12 +0000
ROA not before:           Fri 24 Mar 2023 01:42:12 +0000
ROA not after:            Fri 22 Mar 2024 01:47:12 +0000
asID:                     270358
IP address blocks:        2804:6ac8::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:b7:26:b5:13:ee:33:bb:6b:3d:2d:6c:77:2a:e6:c4:59:a4:4f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61F4874E6474A8E5CE242BD1FB7854FA15297D85
        Validity
            Not Before: Mar 24 01:42:12 2023 GMT
            Not After : Mar 22 01:47:12 2024 GMT
        Subject: CN=7DB187C353D681AC9251C9CE80D0C7D049FCE769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:37:63:43:0f:42:92:3e:65:8c:36:b8:ff:a8:
                    1c:45:06:07:58:1a:9e:2c:71:a9:36:f6:6a:8f:0b:
                    d2:77:03:6a:42:77:32:10:8f:13:c2:2f:ad:8b:4c:
                    61:b3:28:f2:93:10:bb:3b:b8:d9:8d:7b:0b:66:42:
                    01:67:55:ab:8d:a8:73:ad:cb:9b:5b:a2:db:1e:5b:
                    04:30:74:e4:c5:df:9a:c3:4a:29:37:f2:f8:2e:3f:
                    ff:59:c3:36:bb:fd:5f:6b:e9:76:dc:9f:47:d2:98:
                    2c:55:78:5d:25:ec:2b:c7:1d:ce:f6:d4:a3:8f:1c:
                    31:5d:af:a6:2b:dc:d2:4b:eb:2c:27:34:10:72:3a:
                    f9:b2:c3:d6:2e:c5:b9:c8:f7:e2:78:c8:cd:41:8b:
                    60:ec:68:ff:48:0b:73:e6:7e:37:78:27:23:8e:2f:
                    2b:38:82:dd:60:08:ec:6a:05:d4:71:8d:2d:1b:52:
                    73:2d:ac:ab:94:dd:f3:a7:c9:e3:9d:b3:37:fa:3d:
                    06:4d:98:45:88:d6:e8:99:95:be:73:46:fc:39:c0:
                    5b:3b:a8:66:2c:6f:3a:b0:ff:d6:4f:d8:00:30:61:
                    a5:51:0f:38:02:19:e8:c7:b3:c2:54:b1:aa:14:bc:
                    13:b8:71:64:ae:52:77:62:22:d2:7e:0a:88:7a:fc:
                    e1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B1:87:C3:53:D6:81:AC:92:51:C9:CE:80:D0:C7:D0:49:FC:E7:69
            X509v3 Authority Key Identifier:
                keyid:61:F4:87:4E:64:74:A8:E5:CE:24:2B:D1:FB:78:54:FA:15:29:7D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/61F4874E6474A8E5CE242BD1FB7854FA15297D85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F4874E6474A8E5CE242BD1FB7854FA15297D85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/323830343a366163383a3a2f33322d3334203d3e20323730333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ac8::/32

    Signature Algorithm: sha256WithRSAEncryption
         c8:bc:99:20:d4:b3:a6:30:3b:56:41:80:f5:64:06:38:a7:3c:
         87:ec:db:83:3b:b1:d2:e1:20:90:78:34:97:03:b8:94:d0:90:
         82:8f:ce:66:a7:a4:d2:ea:8b:e3:52:e0:45:68:ea:59:f5:a0:
         cc:15:e8:b8:ec:43:84:fb:83:1e:38:53:c7:db:28:56:42:85:
         fc:39:f3:2a:fb:70:f1:65:ae:d3:a1:58:3b:9b:95:26:db:1c:
         04:8b:81:e3:5e:21:e0:17:56:e8:80:58:c6:76:cb:b9:a5:8b:
         06:f3:2d:e3:80:88:14:c3:39:bd:5d:4f:0a:80:3f:84:1f:8a:
         89:0e:2e:2b:41:76:16:32:af:76:13:09:32:d0:9b:78:f5:1d:
         31:a9:57:b0:a8:6b:94:f4:af:b6:9f:5b:5a:38:a3:d7:0f:79:
         58:20:d7:8a:58:ca:84:b0:ed:6e:de:b0:04:65:79:48:18:36:
         bf:12:7b:d1:c0:de:4c:fa:75:10:eb:9c:85:98:28:4f:aa:6d:
         21:bf:30:6e:05:cc:4c:c9:bf:01:96:65:f0:5d:f7:1e:0f:e0:
         c1:24:db:ec:03:78:3e:4c:e4:2a:b2:dd:50:d6:b5:fa:95:c9:
         a7:86:80:12:2b:e4:63:6e:44:5a:14:28:bb:0d:bd:be:b2:14:
         59:ee:3e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org