Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/323830343a343431303a383030303a3a2f33342d3334203d3e20323637363139.roa
File:                     323830343a343431303a383030303a3a2f33342d3334203d3e20323637363139.roa (raw, json)
Hash identifier:          0n3ZHlhcptFAcW329wOwI9txzkw1avrXF3JG3L+udxY=
Subject key identifier:   48:8D:E1:65:66:B4:B0:20:5E:AD:18:1F:1C:BD:39:A5:7A:83:99:75
Certificate issuer:       /CN=1D007750345D71D7262F4B5A9298B728EDDBB40A
Certificate serial:       2EF50B8924788D09189A512DDC55292D2CB560D5
Authority key identifier: 1D:00:77:50:34:5D:71:D7:26:2F:4B:5A:92:98:B7:28:ED:DB:B4:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D007750345D71D7262F4B5A9298B728EDDBB40A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/323830343a343431303a383030303a3a2f33342d3334203d3e20323637363139.roa
Signing time:             Wed 13 Jul 2022 16:00:03 +0000
ROA not before:           Wed 13 Jul 2022 15:55:03 +0000
ROA not after:            Thu 13 Jul 2023 16:00:03 +0000
asID:                     267619
IP address blocks:        2804:4410:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f5:0b:89:24:78:8d:09:18:9a:51:2d:dc:55:29:2d:2c:b5:60:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D007750345D71D7262F4B5A9298B728EDDBB40A
        Validity
            Not Before: Jul 13 15:55:03 2022 GMT
            Not After : Jul 13 16:00:03 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:df:7a:8b:63:3a:a0:74:00:6d:53:09:44:21:
                    9f:7b:28:81:e1:ff:e6:3d:cb:2a:02:4b:cb:ec:1a:
                    cf:03:ea:4c:bb:c9:bf:bd:86:91:88:4d:49:46:46:
                    06:1d:8a:41:57:01:7a:51:63:48:fa:4a:ac:32:35:
                    7c:ff:6d:69:b0:e6:11:95:c3:ca:32:55:e4:4e:4c:
                    e2:ba:ef:f9:cf:2a:a7:42:92:98:9f:d5:29:89:98:
                    25:14:90:54:73:99:9d:60:2c:be:50:2d:a9:6e:a9:
                    e1:48:98:39:ee:ab:d7:c6:40:d0:a7:f3:c5:c5:b8:
                    e0:8c:86:e0:77:2d:73:ec:0a:5e:b6:48:78:71:70:
                    87:65:59:65:a0:6a:97:5f:c5:a7:47:d5:b5:cf:27:
                    7d:13:46:d4:f3:d5:c0:76:74:e1:2d:3e:15:fb:11:
                    08:2f:5d:6e:76:39:65:25:27:65:32:37:0e:c8:62:
                    50:af:03:e3:29:5a:04:c7:6c:ef:0d:75:21:5b:4a:
                    51:28:70:f7:a0:93:0a:e1:2d:a9:01:de:85:7b:01:
                    40:ad:49:86:86:44:95:ae:65:15:06:f7:2b:c9:6b:
                    7f:71:40:81:e7:29:d9:5a:0a:8a:d9:1c:9e:dd:f7:
                    9f:46:2e:b2:a1:e7:ba:a8:50:5b:36:ae:0c:e3:35:
                    5e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8D:E1:65:66:B4:B0:20:5E:AD:18:1F:1C:BD:39:A5:7A:83:99:75
            X509v3 Authority Key Identifier:
                keyid:1D:00:77:50:34:5D:71:D7:26:2F:4B:5A:92:98:B7:28:ED:DB:B4:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/1D007750345D71D7262F4B5A9298B728EDDBB40A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D007750345D71D7262F4B5A9298B728EDDBB40A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/323830343a343431303a383030303a3a2f33342d3334203d3e20323637363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4410:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         cc:9e:96:c1:a6:18:46:cd:99:7b:9f:7a:34:d0:18:0d:13:9d:
         5a:5b:00:ab:56:9a:99:29:91:8b:93:09:35:fd:a9:47:18:8e:
         91:d6:5d:2e:e9:e4:9f:1d:7d:da:20:c6:91:fc:88:2b:6b:00:
         50:bd:5d:3a:d4:5e:35:19:8f:6b:b6:bc:cc:07:39:91:3e:bb:
         16:13:27:8d:de:22:4a:01:ab:53:08:40:5a:a1:74:cd:b0:9c:
         55:fc:b6:f4:49:f5:08:62:2f:2f:31:65:ea:6a:91:01:69:06:
         67:73:9b:5f:05:c8:30:3b:6b:77:db:1a:6a:58:16:f3:87:a3:
         fd:8a:dd:2a:24:e0:cd:88:9c:1a:a3:8f:9d:6d:ed:0e:7c:d0:
         d2:d3:27:bd:31:03:cf:bc:7f:85:52:cc:3b:af:89:5e:b1:a6:
         7b:b6:c1:3c:68:b0:48:b9:53:11:7f:ef:a5:f3:ae:f3:79:2a:
         dd:7a:24:ad:f8:44:5d:06:d2:84:c8:87:12:7e:a3:8b:4d:90:
         c8:ad:cf:91:1c:4b:a9:f2:2e:dd:e6:ce:eb:57:ab:f9:d4:e3:
         f4:aa:dc:c4:43:c7:89:eb:a8:73:dd:49:1d:dc:af:b5:4f:2a:
         4e:58:a2:5c:46:db:f6:0e:15:f2:7e:a8:ac:77:35:2b:80:98:
         75:b3:2c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org