Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a313a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a313a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          6OC3pbXF4edLAcM9bJrEzQa+r4PXuHhpvUnQINCAEoA=
Subject key identifier:   42:55:5D:C7:59:E3:4C:C0:82:A6:21:C3:22:DF:C7:64:16:77:B9:21
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       4A4328A68595DB87817F1631FA52D9AE6DA74FFB
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a313a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:21:58 +0000
ROA not before:           Thu 20 Jul 2023 14:16:58 +0000
ROA not after:            Thu 18 Jul 2024 14:21:58 +0000
asID:                     52706
IP address blocks:        2804:c70:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:43:28:a6:85:95:db:87:81:7f:16:31:fa:52:d9:ae:6d:a7:4f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:16:58 2023 GMT
            Not After : Jul 18 14:21:58 2024 GMT
        Subject: CN=42555DC759E34CC082A621C322DFC7641677B921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a2:16:3d:d3:5b:a0:0c:9a:f8:17:6c:a3:55:
                    59:57:a5:ea:88:63:fd:3c:ad:30:1e:d1:b9:b1:73:
                    6b:0c:55:b4:01:e8:8d:61:77:8c:8e:5c:88:67:3a:
                    e0:e1:3e:f8:4a:38:f7:90:82:2c:67:04:ff:19:f7:
                    10:3f:db:db:5d:77:ca:8f:8f:c8:2e:72:72:e7:c8:
                    1b:a8:3f:40:02:88:f5:96:0d:c3:be:57:62:e8:47:
                    6f:4b:d4:58:c5:05:37:9a:0b:28:73:ee:81:c9:32:
                    5d:af:19:e6:9f:11:5a:ce:fb:a8:7f:04:e1:ae:35:
                    d3:1a:24:36:4b:d0:6d:59:66:12:65:8d:28:8f:68:
                    c4:57:54:58:43:4c:bc:95:f8:34:99:a7:23:43:da:
                    5f:e8:43:a6:ad:6a:68:11:52:f2:66:6a:d7:4d:5a:
                    91:0e:b1:7e:88:f7:7a:20:be:b0:6b:33:84:2b:08:
                    5b:79:10:62:54:2f:df:5e:c3:d6:fb:27:28:2f:a9:
                    7c:0a:bd:b4:ed:cd:cb:ae:ab:65:9c:00:59:0e:23:
                    c7:c7:7b:92:a2:14:c7:3c:cf:c1:c7:2b:e1:af:cf:
                    0f:b5:b5:e4:04:f8:a9:0e:10:47:15:27:3c:07:c2:
                    22:4f:c4:82:e9:20:48:c2:6e:ed:44:8b:ca:98:d6:
                    71:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:55:5D:C7:59:E3:4C:C0:82:A6:21:C3:22:DF:C7:64:16:77:B9:21
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a313a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:5b:52:04:d1:0c:d1:1c:19:08:5b:82:79:19:fc:da:e1:57:
         0d:e1:ff:e8:f9:40:11:ec:d8:13:17:e9:dd:77:1d:9f:c4:19:
         eb:5c:f3:33:56:50:6b:d5:10:ce:5e:74:3c:64:3c:f4:df:bb:
         19:d6:9f:f8:7a:ff:08:ff:c4:fd:73:8a:b6:13:8f:4c:21:fd:
         b5:85:40:dc:15:1f:68:af:9b:91:4a:47:1f:23:fa:2d:e4:90:
         61:94:80:48:0f:a8:5a:ac:f5:e2:3e:6e:63:3a:14:37:c8:7e:
         3a:0e:ec:d4:fe:0e:87:9f:11:78:bf:f3:53:af:e3:27:08:d3:
         40:bd:b4:f8:74:6a:10:e5:75:25:e2:de:46:aa:25:79:24:cc:
         5f:89:33:f2:c8:00:23:a9:b8:ae:2a:5e:55:01:4e:e8:86:74:
         ae:24:ee:14:48:af:e8:22:c8:ea:04:e9:0d:98:9d:41:ca:1c:
         d7:10:ab:37:a2:d4:48:76:ee:fa:35:be:ff:81:9b:93:7d:4a:
         7a:44:3a:12:44:dd:6c:a0:2f:ab:32:04:08:2d:9e:e0:f4:2c:
         c8:3b:7f:15:4a:c6:6b:18:ee:87:9e:87:cb:22:ce:75:97:a4:
         5d:2c:59:6d:6d:b2:22:3e:4e:ae:31:e9:39:5c:9f:78:23:3b:
         5a:f9:c1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org