Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/1/323830343a336138343a3a2f33322d3332203d3e20323636303933.roa
File:                     323830343a336138343a3a2f33322d3332203d3e20323636303933.roa (raw, json)
Hash identifier:          vng1/Kdz8wnzsu0vHyW83C2Arbku9JYECV2koMk45yw=
Subject key identifier:   AC:19:F5:CF:B8:29:6B:26:E6:5F:15:DD:D1:55:8A:CA:63:B0:4B:2A
Certificate issuer:       /CN=2BA1450423003652CC20FD36A2AAD056FDA40D08
Certificate serial:       4367F76161FD6A02875505A0771B40943A01A11C
Authority key identifier: 2B:A1:45:04:23:00:36:52:CC:20:FD:36:A2:AA:D0:56:FD:A4:0D:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BA1450423003652CC20FD36A2AAD056FDA40D08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/1/323830343a336138343a3a2f33322d3332203d3e20323636303933.roa
Signing time:             Fri 05 Apr 2024 13:41:54 +0000
ROA not before:           Fri 05 Apr 2024 13:36:54 +0000
ROA not after:            Fri 04 Apr 2025 13:41:54 +0000
asID:                     266093
IP address blocks:        2804:3a84::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:67:f7:61:61:fd:6a:02:87:55:05:a0:77:1b:40:94:3a:01:a1:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BA1450423003652CC20FD36A2AAD056FDA40D08
        Validity
            Not Before: Apr  5 13:36:54 2024 GMT
            Not After : Apr  4 13:41:54 2025 GMT
        Subject: CN=AC19F5CFB8296B26E65F15DDD1558ACA63B04B2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:16:e7:33:48:eb:87:1a:41:e6:89:bd:f9:ad:
                    aa:49:a1:0c:9a:5b:43:d9:de:b6:31:12:3d:34:d8:
                    5a:3d:50:4d:bc:51:b4:cb:fc:a1:1f:cd:dd:01:6b:
                    f9:f2:a4:2a:43:9c:75:4e:9a:7c:9b:c2:33:9e:6f:
                    50:1e:f4:7a:6c:a1:12:35:2b:81:ae:7a:f8:53:15:
                    82:f5:7f:bb:27:39:b1:15:6b:1a:9b:62:b9:3a:42:
                    b3:70:e7:d0:78:03:33:36:3e:fa:34:fb:38:75:43:
                    35:37:37:74:2d:25:24:c2:b8:a4:77:18:d6:bf:e9:
                    6d:58:b6:66:5e:dc:83:a4:20:d4:c3:e6:9e:cf:a0:
                    d1:54:11:cd:9b:59:4a:4c:07:b6:36:f2:20:e6:c5:
                    31:80:b2:fa:dd:4d:a8:84:9d:50:98:4f:28:2d:af:
                    20:a4:21:58:53:4f:30:c0:83:5e:11:8d:89:8d:ac:
                    06:ac:4d:e3:f4:5f:d2:73:29:0d:cc:2a:b2:36:08:
                    bb:80:8e:c9:32:ec:7d:2e:9f:da:56:b9:25:68:65:
                    e1:0d:7d:75:f9:70:b0:39:d4:44:a8:47:8d:85:62:
                    76:b0:60:91:d2:bf:4d:1c:d7:25:63:81:1f:dc:ad:
                    6a:80:99:ed:d3:c6:ea:da:04:73:97:8f:3c:9d:43:
                    db:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:19:F5:CF:B8:29:6B:26:E6:5F:15:DD:D1:55:8A:CA:63:B0:4B:2A
            X509v3 Authority Key Identifier:
                keyid:2B:A1:45:04:23:00:36:52:CC:20:FD:36:A2:AA:D0:56:FD:A4:0D:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/1/2BA1450423003652CC20FD36A2AAD056FDA40D08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BA1450423003652CC20FD36A2AAD056FDA40D08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/1/323830343a336138343a3a2f33322d3332203d3e20323636303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a84::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:fa:57:bb:17:68:48:98:a1:8b:01:bc:f3:19:52:0e:13:5d:
         1a:8c:20:d4:1d:62:ba:4f:10:e4:0e:29:37:3a:44:a7:00:78:
         d6:34:89:c8:3e:c8:81:4a:f2:2b:7c:03:54:61:af:cf:b7:f3:
         4c:57:3e:10:18:17:c2:c3:f7:b2:01:93:ae:12:39:7d:f2:42:
         fc:a1:49:17:51:1f:76:cb:0b:28:7d:60:f9:85:8a:15:ef:01:
         ce:df:30:da:40:8e:7e:ae:4e:d8:88:c3:27:ee:7f:40:13:c3:
         dc:76:e2:af:e3:e6:b0:b4:1e:4c:d7:37:d8:c1:d1:6d:89:82:
         c6:56:8c:c0:d9:59:be:7b:98:ab:cf:0f:5a:b7:f5:45:05:71:
         54:bc:4e:b0:c0:1d:3e:c8:86:a6:4b:55:84:c9:f0:b0:e8:16:
         40:ad:7e:cd:ff:c5:df:73:17:80:4d:84:00:76:68:e2:4c:59:
         f0:57:1d:a5:ba:1e:22:a1:d1:44:27:7c:ab:bf:4c:b1:9e:61:
         4e:4b:c1:5c:5e:78:fb:aa:63:f5:0e:59:62:49:53:8a:4d:7b:
         7c:da:87:1d:75:d3:14:41:94:86:75:68:3a:e5:4c:3a:1e:5d:
         a3:d1:cd:fa:20:28:e5:e3:ca:e6:84:b8:b8:93:20:dc:e4:26:
         af:f4:4b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:42 2024 by rpki-client on console-ams.rpki-client.org