Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a333030303a3a2f33362d3336203d3e203532373036.roa
File:                     323830343a6337303a333030303a3a2f33362d3336203d3e203532373036.roa (raw, json)
Hash identifier:          /5pPS+3dlm4JZAcx13XFF6QKOrBwe02UeqAraoaUw4Y=
Subject key identifier:   97:53:91:17:12:64:58:75:18:D4:F1:45:A0:9F:0C:81:26:A2:3C:9C
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       671ED40BFAB4DBA4D0DED4323557B715C9375A18
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a333030303a3a2f33362d3336203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:19:58 +0000
ROA not before:           Thu 20 Jul 2023 14:14:58 +0000
ROA not after:            Thu 18 Jul 2024 14:19:58 +0000
asID:                     52706
IP address blocks:        2804:c70:3000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:1e:d4:0b:fa:b4:db:a4:d0:de:d4:32:35:57:b7:15:c9:37:5a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:14:58 2023 GMT
            Not After : Jul 18 14:19:58 2024 GMT
        Subject: CN=975391171264587518D4F145A09F0C8126A23C9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3e:49:ac:5a:3c:ea:db:dc:a8:06:a7:21:50:
                    14:05:8a:33:ee:53:91:91:29:9b:71:25:6b:0f:6f:
                    c9:de:10:d0:b4:c7:55:58:91:4f:a7:62:da:da:a7:
                    82:4d:68:3d:08:a0:1b:4b:a6:59:66:27:33:99:a2:
                    91:cc:a5:ec:76:17:5b:98:98:97:91:0d:ff:b6:04:
                    9f:e1:1d:98:d7:61:98:33:e1:cb:df:1f:c8:65:b6:
                    25:b5:60:fc:ca:63:98:c9:36:f2:6d:f2:e2:b2:08:
                    13:ca:85:f8:e7:a2:6b:0f:7b:9a:8c:4c:7f:59:b1:
                    66:16:e1:05:6d:30:10:72:a3:fc:39:b7:5f:49:47:
                    3c:fc:bd:66:43:e3:ed:96:2f:76:4c:63:66:d3:48:
                    ad:8d:76:0f:2b:70:66:e2:03:bf:fd:7f:5f:6c:2a:
                    8a:b6:1c:fa:48:0f:bf:4a:e1:9e:65:f5:c1:8b:78:
                    ce:6c:63:5b:c6:1b:b4:d3:8a:7d:59:a4:76:77:aa:
                    52:af:a2:4c:f7:b8:a5:9e:fe:2c:33:0c:16:ec:9c:
                    30:c6:06:e9:01:f9:26:28:66:9a:6c:25:a3:d6:0a:
                    95:2b:dc:bb:8c:13:1e:47:e2:10:02:74:ba:9d:b3:
                    db:a6:60:74:59:70:8f:7f:55:e4:c1:3d:71:30:02:
                    c6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:53:91:17:12:64:58:75:18:D4:F1:45:A0:9F:0C:81:26:A2:3C:9C
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a333030303a3a2f33362d3336203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3e:96:64:08:0e:d3:f3:bf:91:f3:7b:00:f9:c4:c4:9d:d3:b6:
         7e:34:6f:a4:73:42:32:d0:54:0d:e9:02:01:f7:dd:1b:8b:ea:
         a0:cd:f7:10:8b:b4:9f:fe:c2:e7:60:f4:70:8c:c0:44:73:e2:
         c8:f6:99:33:3c:4e:6b:2e:7f:a3:9b:69:28:29:05:51:93:19:
         97:8e:d9:b4:d0:e7:23:c6:d9:12:a3:7d:b9:7a:af:aa:5d:3e:
         4e:2a:ed:9d:e0:54:85:fd:c7:0d:d1:4e:99:e7:62:c9:20:2a:
         30:54:ca:bf:f3:80:23:91:15:a3:82:bd:02:75:96:3f:fb:a1:
         16:70:bf:81:c0:00:37:96:91:35:97:ab:b5:b7:6b:aa:99:6b:
         a5:b9:cb:51:85:67:d0:19:3e:fd:0a:16:2a:6c:77:6e:fe:2e:
         cc:c0:0c:72:e8:1c:8d:80:4c:9c:a7:6b:c7:c9:15:1f:7f:9d:
         aa:2a:b0:ca:33:63:a5:c8:87:07:39:d9:7f:cc:3f:de:0b:77:
         dc:e6:46:7b:54:e4:dc:b0:a9:7d:9d:42:e3:cb:f9:60:2d:79:
         8f:e0:58:c0:8e:db:a3:48:8e:bf:7b:a0:8b:c3:e0:c2:9c:cb:
         58:96:3f:02:9d:50:64:af:c0:5c:f8:74:cd:44:97:cb:0b:28:
         ba:d8:94:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org