Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030333a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a323030333a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          Qh8CM4haHxSoU2HHlO/9hN1Fb2qhYQjni/kITymPnU4=
Subject key identifier:   32:E3:88:FB:B1:94:BE:BB:D4:24:B4:6D:92:75:A9:93:1E:44:0C:AF
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       347C36295D1D21E6DCEE1C08BCF8FAE8BE1876EA
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030333a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:34:43 +0000
ROA not before:           Thu 20 Jul 2023 14:29:43 +0000
ROA not after:            Thu 18 Jul 2024 14:34:43 +0000
asID:                     52706
IP address blocks:        2804:c70:2003::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:7c:36:29:5d:1d:21:e6:dc:ee:1c:08:bc:f8:fa:e8:be:18:76:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:29:43 2023 GMT
            Not After : Jul 18 14:34:43 2024 GMT
        Subject: CN=32E388FBB194BEBBD424B46D9275A9931E440CAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:59:cc:d1:fe:ce:7d:08:39:5f:ec:aa:49:a0:
                    cd:4e:6f:7a:87:7b:f2:5c:81:f1:ae:ea:b0:75:53:
                    45:3c:79:fe:d8:f8:39:11:8b:32:83:7c:f9:20:c4:
                    5f:cf:dc:35:8d:a6:80:e8:89:75:7e:d5:cc:b3:08:
                    1a:90:cc:22:67:8c:d6:b2:d5:95:4f:dd:39:73:c5:
                    7f:02:9b:70:5f:48:56:b8:2e:5b:90:ef:34:34:79:
                    ed:6e:73:09:6b:d1:34:bb:e3:82:30:3b:74:f2:d4:
                    3e:66:e0:5f:2e:b6:bd:eb:69:8f:1a:8e:49:90:42:
                    98:2d:e7:56:6f:9f:91:6b:1c:92:35:95:2d:1d:a6:
                    ed:5b:df:37:59:04:54:b9:69:d0:1f:7b:77:4f:fd:
                    55:2f:9e:a9:a3:11:86:1d:97:5f:6a:95:35:c8:96:
                    05:b7:e2:b4:3d:2a:c8:f7:61:e1:6f:45:39:92:f9:
                    81:5f:a3:70:bb:1a:e8:4d:10:fb:e3:48:8a:ac:d0:
                    5d:a6:89:48:96:f2:70:9b:41:87:8e:58:6a:87:df:
                    6e:f6:8f:e4:26:68:86:d3:35:b7:d7:88:c3:30:ef:
                    b3:b8:59:de:94:60:87:ba:da:bd:46:9e:05:35:f4:
                    cb:4b:7a:cf:43:4e:9e:7a:25:4b:be:ac:9a:13:ee:
                    3f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E3:88:FB:B1:94:BE:BB:D4:24:B4:6D:92:75:A9:93:1E:44:0C:AF
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030333a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:2003::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:6e:d1:01:17:52:bc:30:56:f3:b6:6c:fd:7b:1e:11:eb:30:
         9c:8a:f1:90:85:cb:74:64:a5:b0:ac:83:bd:a0:e1:8f:02:fb:
         c7:5e:55:e4:e8:05:5a:b0:83:15:df:f8:91:5d:b3:e3:e9:49:
         e7:fc:fb:12:45:1d:6c:a9:d0:ba:58:cc:04:96:16:54:a7:18:
         0f:7b:0f:75:39:b8:3b:1c:68:8c:22:01:48:07:1b:7b:eb:81:
         ee:e3:2f:0d:2a:3c:e8:92:b4:67:56:b9:b4:29:36:ab:04:65:
         19:12:f0:01:e6:14:7b:0b:16:a9:89:a6:20:aa:da:f0:63:c8:
         f4:e7:53:c9:5c:a0:66:13:ea:52:cd:b5:31:8f:78:1e:ab:45:
         ac:2a:fe:75:3f:1b:ba:a6:ec:57:29:ff:38:ed:14:57:9f:28:
         d6:2e:86:a1:a2:bc:c3:ac:eb:3c:df:ab:7d:46:bc:d7:2b:1b:
         ba:e5:7a:45:01:78:68:84:1c:59:cf:74:16:c8:34:cf:52:08:
         ff:d7:ab:d5:c9:a1:f6:27:de:c5:b7:ae:8b:f6:6f:53:b2:fe:
         2b:e7:39:68:a3:8e:b4:69:24:57:a9:ba:f6:a0:d9:74:af:89:
         90:94:df:f8:76:97:bf:66:cb:b8:a7:d8:77:c2:55:46:f3:fd:
         9c:d3:4b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org