Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/1/323830343a336361303a3a2f33322d3438203d3e203631353939.roa
File:                     323830343a336361303a3a2f33322d3438203d3e203631353939.roa (raw, json)
Hash identifier:          gjMb3SLN3UyOUE3Cl1eRrMXiYPsbHK8oqu/K6HtQ498=
Subject key identifier:   52:49:82:2F:02:8D:E4:95:E7:C3:C5:B7:23:91:3E:4C:B5:57:6B:C1
Certificate issuer:       /CN=42DC11A6099FD286F81D6C471E47FFD8469A91E7
Certificate serial:       51F15E3C9CA4261B03921855B3184478B1471452
Authority key identifier: 42:DC:11:A6:09:9F:D2:86:F8:1D:6C:47:1E:47:FF:D8:46:9A:91:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42DC11A6099FD286F81D6C471E47FFD8469A91E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/1/323830343a336361303a3a2f33322d3438203d3e203631353939.roa
Signing time:             Thu 04 Apr 2024 06:04:37 +0000
ROA not before:           Thu 04 Apr 2024 05:59:37 +0000
ROA not after:            Thu 03 Apr 2025 06:04:37 +0000
asID:                     61599
IP address blocks:        2804:3ca0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f1:5e:3c:9c:a4:26:1b:03:92:18:55:b3:18:44:78:b1:47:14:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42DC11A6099FD286F81D6C471E47FFD8469A91E7
        Validity
            Not Before: Apr  4 05:59:37 2024 GMT
            Not After : Apr  3 06:04:37 2025 GMT
        Subject: CN=5249822F028DE495E7C3C5B723913E4CB5576BC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:18:47:6d:c8:3f:b8:71:b1:b0:c7:d6:13:63:
                    8b:7a:ce:61:67:af:ed:75:b1:6a:34:dc:b2:45:11:
                    5d:52:f7:f4:41:ea:a8:3b:52:eb:56:2d:b6:25:4d:
                    9d:da:9f:02:e9:b9:eb:90:f1:6d:7a:32:0c:56:57:
                    1b:ff:83:d3:1d:98:52:bf:55:88:b5:57:ff:e1:52:
                    bd:75:50:7e:3e:7b:53:be:2b:a4:9b:3b:37:7c:02:
                    64:33:da:8b:81:a9:33:6f:fb:b6:dc:aa:68:b0:6c:
                    c4:eb:72:b9:5f:17:08:49:1a:ad:04:76:20:b8:b7:
                    05:01:dc:c2:7f:11:7c:31:8e:4f:0f:3b:27:f3:95:
                    c6:1f:5d:f1:f5:0e:78:29:60:ae:0c:57:44:70:b4:
                    9d:63:67:7c:f8:d2:ff:ef:fc:7d:b3:bd:ec:27:e1:
                    ae:63:e6:fb:fd:ba:4e:a8:58:c3:88:95:d4:f4:0f:
                    00:65:d6:54:13:9b:23:23:5c:24:51:c2:ab:a6:f7:
                    6f:c4:21:87:4b:b6:06:44:c8:28:74:e4:70:36:62:
                    35:eb:2e:53:c9:e1:2a:94:66:3d:ff:96:cc:02:08:
                    73:17:e0:6a:db:f9:28:d8:48:02:db:05:f1:af:44:
                    e5:2f:6b:5f:44:78:b6:5f:de:11:23:0b:d1:84:cd:
                    e9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:49:82:2F:02:8D:E4:95:E7:C3:C5:B7:23:91:3E:4C:B5:57:6B:C1
            X509v3 Authority Key Identifier:
                keyid:42:DC:11:A6:09:9F:D2:86:F8:1D:6C:47:1E:47:FF:D8:46:9A:91:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/1/42DC11A6099FD286F81D6C471E47FFD8469A91E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42DC11A6099FD286F81D6C471E47FFD8469A91E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/1/323830343a336361303a3a2f33322d3438203d3e203631353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:fa:3a:2c:24:57:1d:70:f1:bf:87:d1:61:9e:ef:a7:d5:b5:
         16:db:f0:0e:d0:41:a4:c2:01:ed:d8:09:9f:9e:9f:b5:3a:c7:
         d2:4e:b7:17:94:a6:b0:46:2b:91:b8:c3:3e:05:f3:11:91:6b:
         18:f3:6d:c2:cc:26:f3:78:33:5e:55:d4:62:27:6a:d2:7f:5d:
         c6:b6:22:d7:9b:bb:76:b4:1e:ed:73:a2:ae:4b:fe:6d:b3:8a:
         4f:cc:30:02:7a:15:67:a2:fb:15:b9:3a:ec:43:c1:65:3e:1b:
         9c:56:69:45:41:6f:d9:f8:01:d3:36:35:26:c2:00:bf:a9:e4:
         64:ff:33:b7:00:e5:89:9a:9e:21:cd:ea:13:8d:c2:06:59:8b:
         9d:95:27:75:aa:b3:11:da:7e:3d:47:c1:75:56:8c:a5:c4:15:
         3c:b6:f6:e6:73:59:e7:55:38:e1:77:65:fa:d6:0e:2a:90:1b:
         9d:d9:67:3c:d0:bd:64:21:74:27:ec:91:be:0d:ea:bd:52:c3:
         08:d9:54:4d:5e:8e:ef:25:dc:1a:12:55:e6:25:ea:a2:04:4f:
         46:1b:f9:ce:74:d4:00:d9:d7:eb:6c:c0:38:d1:49:01:2a:87:
         93:65:a3:19:34:c8:3c:d7:86:7d:b9:e0:5c:a7:05:4b:81:e3:
         6d:ca:aa:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org