Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a313030303a3a2f33362d3336203d3e203532373036.roa
File:                     323830343a6337303a313030303a3a2f33362d3336203d3e203532373036.roa (raw, json)
Hash identifier:          vi2nAJE/iCojKWtGwAc9a4Sym4KSqVuVYDpOtF2DSfQ=
Subject key identifier:   67:52:F7:5E:2F:DD:AA:BF:B7:2D:BA:22:6A:45:B0:B4:30:58:0E:04
Certificate issuer:       /CN=D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B
Certificate serial:       1E57F32A8E94E44F25D743447395ACCF0FA6DCE6
Authority key identifier: D9:61:AB:15:52:8E:D9:EF:FC:F0:F0:DD:A2:FE:0C:7D:0C:B9:93:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a313030303a3a2f33362d3336203d3e203532373036.roa
Signing time:             Mon 19 Dec 2022 18:24:03 +0000
ROA not before:           Mon 19 Dec 2022 18:19:03 +0000
ROA not after:            Mon 18 Dec 2023 18:24:03 +0000
asID:                     52706
IP address blocks:        2804:c70:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:57:f3:2a:8e:94:e4:4f:25:d7:43:44:73:95:ac:cf:0f:a6:dc:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B
        Validity
            Not Before: Dec 19 18:19:03 2022 GMT
            Not After : Dec 18 18:24:03 2023 GMT
        Subject: CN=6752F75E2FDDAABFB72DBA226A45B0B430580E04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:07:6b:9f:11:64:b9:07:67:57:8e:aa:c3:6b:
                    5e:8c:5d:3f:61:b9:e3:20:fd:8e:d0:94:7e:d4:55:
                    2e:69:cb:f2:0a:80:a1:22:68:11:3e:23:89:ff:dc:
                    30:13:e9:81:e9:aa:c8:ef:4f:d5:b0:47:cc:e0:d4:
                    66:b5:d4:24:46:b3:8f:59:63:92:b7:96:01:d9:2e:
                    45:a0:eb:8a:e7:e8:f4:ba:8f:59:8e:d4:31:8e:24:
                    56:ce:c3:2e:4c:d6:63:f4:5a:b8:9f:85:93:c7:f1:
                    2a:44:6c:af:d2:cb:6c:85:f3:39:0e:55:28:09:73:
                    3d:1d:9d:a2:85:24:5c:84:e2:86:0c:75:ac:c0:69:
                    d7:21:bf:db:57:c7:39:36:59:31:22:22:8b:ed:62:
                    83:ca:67:10:2d:cd:0f:59:e1:0e:79:e6:a6:42:ab:
                    97:3d:82:60:29:10:94:c4:b2:e5:17:bc:fe:50:f5:
                    51:09:4c:1a:59:70:0a:d5:f1:b4:fe:75:c5:d4:9a:
                    73:34:9a:0a:3c:06:33:62:71:f0:9a:b8:8e:42:28:
                    15:41:ab:47:52:5f:b2:be:9a:bc:cc:0d:42:3f:b0:
                    73:67:43:ef:80:aa:8c:00:d8:6a:98:be:7e:b5:63:
                    46:ab:c4:96:62:eb:62:a5:61:37:b6:77:a2:2e:63:
                    3d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:52:F7:5E:2F:DD:AA:BF:B7:2D:BA:22:6A:45:B0:B4:30:58:0E:04
            X509v3 Authority Key Identifier:
                keyid:D9:61:AB:15:52:8E:D9:EF:FC:F0:F0:DD:A2:FE:0C:7D:0C:B9:93:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a313030303a3a2f33362d3336203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5b:cb:47:2e:97:1a:c6:53:ba:9d:32:4d:29:d2:4b:24:37:c5:
         aa:7a:a6:7b:1a:26:10:27:fd:2a:7f:18:c4:b4:d4:de:25:84:
         f0:d8:35:f4:94:69:7f:8c:d3:b6:52:48:7b:6d:56:83:92:57:
         e1:83:d1:f5:ef:45:b8:2d:7d:7f:2b:9a:46:41:9f:12:06:7e:
         36:ea:54:c7:c2:9c:cf:77:00:0f:73:56:cb:df:f6:34:4a:00:
         8a:a6:53:f0:f3:1d:f2:d5:c2:b3:d4:ea:f8:63:3a:60:82:c1:
         3c:cc:db:92:94:71:7c:da:1c:52:68:d0:2d:78:92:c3:e9:df:
         a0:69:13:0a:82:44:d6:32:8b:8d:60:a5:ac:18:96:f1:d8:72:
         41:cc:0c:1c:d9:6b:0b:d3:69:b3:05:eb:19:32:7f:59:20:5a:
         5a:2d:b2:83:75:85:0e:de:1a:b0:0d:0d:2e:94:0b:d9:59:e6:
         8e:81:27:52:6c:32:7f:22:aa:09:fe:3e:ff:d5:7c:0d:e7:f8:
         dc:4d:a0:0a:e9:43:d0:ac:70:e0:87:ff:8a:1a:bb:f6:55:34:
         40:fd:4f:85:cc:80:e4:ff:1c:80:02:66:16:77:ad:0e:9c:33:
         9e:95:5d:6b:4f:53:aa:02:34:65:88:8b:cd:61:bf:82:86:c4:
         d1:79:5a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org