Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/0/323830343a363337343a3a2f33322d3334203d3e20323639333632.roa
File:                     323830343a363337343a3a2f33322d3334203d3e20323639333632.roa (raw, json)
Hash identifier:          XRHtjmxs/0vxioL3xW0A1Ahb7wHZCEPAm3cqj+8z6kY=
Subject key identifier:   A2:3B:66:ED:BB:E7:52:5D:C1:E5:FC:7D:22:E7:50:52:E8:7A:E9:09
Certificate issuer:       /CN=82DAF5D14F902F8E9F28B1DCF3D990C0F6844033
Certificate serial:       49B3543FF476F42C37FD6F17AC7A66861B478E41
Authority key identifier: 82:DA:F5:D1:4F:90:2F:8E:9F:28:B1:DC:F3:D9:90:C0:F6:84:40:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82DAF5D14F902F8E9F28B1DCF3D990C0F6844033.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/0/323830343a363337343a3a2f33322d3334203d3e20323639333632.roa
Signing time:             Tue 02 Jan 2024 16:53:40 +0000
ROA not before:           Tue 02 Jan 2024 16:48:40 +0000
ROA not after:            Tue 31 Dec 2024 16:53:40 +0000
asID:                     269362
IP address blocks:        2804:6374::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b3:54:3f:f4:76:f4:2c:37:fd:6f:17:ac:7a:66:86:1b:47:8e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82DAF5D14F902F8E9F28B1DCF3D990C0F6844033
        Validity
            Not Before: Jan  2 16:48:40 2024 GMT
            Not After : Dec 31 16:53:40 2024 GMT
        Subject: CN=A23B66EDBBE7525DC1E5FC7D22E75052E87AE909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b8:22:72:a4:8d:c7:ca:3e:f8:03:d8:25:82:
                    54:0e:8b:94:8f:95:3c:2b:57:bc:4a:da:c6:79:59:
                    93:5c:ed:79:a1:72:9f:be:e7:45:29:90:d1:f1:04:
                    40:28:0d:52:91:6e:f5:61:22:42:90:f1:d6:73:fa:
                    53:65:7d:6e:aa:3f:e4:0d:c1:cf:1a:95:29:42:c7:
                    0c:1a:e3:73:7a:ea:34:72:37:83:f5:df:d9:10:22:
                    85:dd:05:33:8a:54:08:1c:12:b6:c5:22:5f:f7:72:
                    62:ef:86:40:c6:64:88:91:33:e4:b0:6f:c1:22:72:
                    32:56:e9:d3:7b:2e:3a:a7:51:ed:e7:c1:8e:1f:bf:
                    22:75:19:63:06:03:e4:c4:26:b3:11:9a:d2:65:77:
                    0d:aa:3f:f9:d7:b0:85:20:1b:cf:0e:39:ef:0b:cb:
                    7e:4d:5d:16:7b:b4:75:3d:78:50:c2:c8:ec:53:5f:
                    4a:49:05:53:7b:ce:d9:d9:2f:42:98:14:c9:ce:96:
                    3a:0e:6b:7c:6e:7c:f4:be:c4:8a:86:44:42:78:7d:
                    6b:21:f1:9b:8a:b8:19:09:ab:49:95:58:de:1a:e6:
                    5c:0c:40:a7:53:06:b8:d8:e2:05:af:e8:09:06:15:
                    1f:c9:8c:b9:74:2a:de:13:87:a0:89:7b:7b:e8:4d:
                    87:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3B:66:ED:BB:E7:52:5D:C1:E5:FC:7D:22:E7:50:52:E8:7A:E9:09
            X509v3 Authority Key Identifier:
                keyid:82:DA:F5:D1:4F:90:2F:8E:9F:28:B1:DC:F3:D9:90:C0:F6:84:40:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/0/82DAF5D14F902F8E9F28B1DCF3D990C0F6844033.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82DAF5D14F902F8E9F28B1DCF3D990C0F6844033.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/0/323830343a363337343a3a2f33322d3334203d3e20323639333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6374::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:99:32:79:41:95:ba:c9:db:7a:89:74:63:90:cf:cf:eb:bc:
         8d:74:04:75:08:df:11:56:31:a1:0e:0b:c1:ca:de:3d:e4:fa:
         f9:f6:4f:e1:39:20:5f:d8:38:3f:e4:a8:99:a5:f9:1a:02:04:
         1e:13:d7:4a:a8:cd:73:cb:bb:b9:03:d2:97:7b:b3:ee:02:92:
         0c:f8:47:c1:6f:50:67:9f:2d:64:08:be:58:1c:25:4e:e4:91:
         f8:e6:57:95:ee:41:3a:cb:56:3e:06:e1:84:0b:9f:23:7d:3c:
         ed:13:55:d8:e4:aa:02:49:be:75:9f:f1:99:15:1c:c3:7f:e4:
         a3:db:27:35:6b:64:51:dc:de:79:09:5a:44:3b:94:17:f2:eb:
         26:7c:e5:9c:3d:87:3a:5e:b9:4d:ff:79:94:b9:35:6d:ac:6b:
         60:81:7c:e6:20:7f:6e:60:cd:b5:5d:b9:00:01:e7:23:48:83:
         28:1f:84:56:c7:73:a2:7c:aa:f6:96:b5:67:be:7f:b1:78:bf:
         c7:49:dd:f8:ec:e0:bc:63:fb:3a:c8:03:a7:76:be:bb:09:b6:
         f9:f4:af:59:24:c8:6c:aa:85:f4:fa:2d:7a:16:91:33:4c:c6:
         12:bc:49:9c:1c:08:2c:dd:a0:6a:f4:2f:36:ea:70:14:1f:b1:
         b7:0d:d7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org