Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/323830343a333832383a633030303a3a2f33342d3334203d3e20323636343630.roa
File:                     323830343a333832383a633030303a3a2f33342d3334203d3e20323636343630.roa (raw, json)
Hash identifier:          8DwmdDQxjmk+JPH904gf1V1k9Q1zRnfQ6PsWG9hl9a8=
Subject key identifier:   54:FE:13:2E:38:43:43:DE:53:C6:76:E8:4C:C0:EB:A3:68:68:82:42
Certificate issuer:       /CN=997803E7A2CCE603DA65F15F6AFC1C56EC37B08D
Certificate serial:       44E9B89300EDB75A5DC6EAC232248675C897B069
Authority key identifier: 99:78:03:E7:A2:CC:E6:03:DA:65:F1:5F:6A:FC:1C:56:EC:37:B0:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/997803E7A2CCE603DA65F15F6AFC1C56EC37B08D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/323830343a333832383a633030303a3a2f33342d3334203d3e20323636343630.roa
Signing time:             Wed 22 Mar 2023 18:52:04 +0000
ROA not before:           Wed 22 Mar 2023 18:47:04 +0000
ROA not after:            Wed 20 Mar 2024 18:52:04 +0000
asID:                     266460
IP address blocks:        2804:3828:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e9:b8:93:00:ed:b7:5a:5d:c6:ea:c2:32:24:86:75:c8:97:b0:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=997803E7A2CCE603DA65F15F6AFC1C56EC37B08D
        Validity
            Not Before: Mar 22 18:47:04 2023 GMT
            Not After : Mar 20 18:52:04 2024 GMT
        Subject: CN=54FE132E384343DE53C676E84CC0EBA368688242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:56:a7:34:1b:d5:09:6b:e8:63:f5:46:c4:12:
                    39:51:a4:02:63:60:7c:4c:6e:fd:75:b3:82:fd:67:
                    c4:f1:5c:65:43:de:75:24:59:72:7e:ba:78:69:35:
                    56:25:3e:54:6a:4a:ad:18:de:d2:04:4d:3c:cf:f2:
                    ec:42:a3:93:eb:73:e8:cf:64:8e:41:76:21:5e:26:
                    98:d0:3c:57:e3:78:22:dd:26:81:6a:da:38:e6:a9:
                    a1:cc:62:af:1e:e7:c6:07:a4:21:d3:f0:72:f0:14:
                    87:4e:53:49:58:d0:89:fd:13:4c:19:39:68:b4:f8:
                    71:4d:13:b7:45:bd:ac:4e:af:37:15:15:a1:f0:ae:
                    dc:f6:21:c1:53:ec:3f:a4:28:03:25:ba:a7:b5:05:
                    30:7b:a1:d1:cd:64:61:a8:91:83:87:2a:ba:ba:03:
                    b4:28:17:33:bb:4d:10:31:0e:6b:66:c8:b7:27:df:
                    f1:ec:cf:a5:4d:fd:61:0f:3d:46:9c:04:d2:2d:cf:
                    5b:f7:09:20:2b:f1:a5:53:33:90:1a:b1:ee:0b:1e:
                    0d:85:28:e8:36:4c:66:9a:3d:4e:fe:96:2f:7b:63:
                    a0:ce:61:10:50:5b:d5:f8:88:bc:af:1a:3b:ad:b4:
                    c2:9f:65:89:5e:f4:bd:3a:04:71:a1:11:25:6e:5d:
                    e6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FE:13:2E:38:43:43:DE:53:C6:76:E8:4C:C0:EB:A3:68:68:82:42
            X509v3 Authority Key Identifier:
                keyid:99:78:03:E7:A2:CC:E6:03:DA:65:F1:5F:6A:FC:1C:56:EC:37:B0:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/997803E7A2CCE603DA65F15F6AFC1C56EC37B08D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/997803E7A2CCE603DA65F15F6AFC1C56EC37B08D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/323830343a333832383a633030303a3a2f33342d3334203d3e20323636343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3828:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         54:08:24:ec:57:26:5b:62:03:d4:ec:56:4e:0b:e2:a5:66:23:
         f4:76:5d:d7:4a:33:0e:4a:26:3c:7a:40:49:b7:d6:71:05:8a:
         d5:56:3a:a3:79:9c:27:34:7b:3d:b7:97:74:b3:28:7a:8d:3e:
         db:28:0c:3b:25:ad:f7:e0:ae:da:1f:9e:da:06:a8:79:08:51:
         aa:51:7a:0c:cf:aa:17:51:60:c3:d6:f8:37:a3:2a:3a:54:40:
         cc:08:65:7c:e8:31:2b:60:e4:c2:41:1d:33:2c:c1:0e:3e:6e:
         a3:0d:f3:af:f0:eb:c8:ac:ae:db:e6:61:08:93:bb:bb:fd:aa:
         9f:67:1a:b5:68:be:df:c9:5d:0f:21:ba:c3:3c:34:8a:e8:c9:
         6b:64:98:1a:85:bb:46:f2:cb:02:3d:9c:ce:0c:27:11:71:69:
         a9:ab:9b:6f:d3:de:c8:94:7a:9c:0c:d3:ec:ec:09:e9:57:70:
         e0:c4:8e:50:e6:e8:36:64:d6:79:f5:32:21:6e:e6:01:75:a6:
         57:af:e8:b1:87:23:fb:29:6f:8e:ae:78:01:0c:75:f2:0a:29:
         d7:6a:20:23:99:08:7d:61:27:96:90:4d:57:95:90:21:f2:47:
         97:d4:d2:d2:84:a8:15:43:57:49:d0:06:ed:a0:93:5d:39:e0:
         7f:77:4b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org