Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/0/323830343a323161303a3a2f33322d3438203d3e20323634353635.roa
File:                     323830343a323161303a3a2f33322d3438203d3e20323634353635.roa (raw, json)
Hash identifier:          dGvf0GR7Itse/g8tKm6RXiwFN4ycjpSMWqUbU5QkdIU=
Subject key identifier:   24:E4:68:56:1F:E0:8A:C0:DB:27:C0:39:B7:4C:13:BE:DF:22:32:AC
Certificate issuer:       /CN=71D7A8219CD2E4A732B4D5C8EDF0F163A5072EDB
Certificate serial:       726B82C532D94A768E9A0E19D91ECCC5ABFCC243
Authority key identifier: 71:D7:A8:21:9C:D2:E4:A7:32:B4:D5:C8:ED:F0:F1:63:A5:07:2E:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71D7A8219CD2E4A732B4D5C8EDF0F163A5072EDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/0/323830343a323161303a3a2f33322d3438203d3e20323634353635.roa
Signing time:             Wed 03 Apr 2024 12:38:59 +0000
ROA not before:           Wed 03 Apr 2024 12:33:59 +0000
ROA not after:            Wed 02 Apr 2025 12:38:59 +0000
asID:                     264565
IP address blocks:        2804:21a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:6b:82:c5:32:d9:4a:76:8e:9a:0e:19:d9:1e:cc:c5:ab:fc:c2:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71D7A8219CD2E4A732B4D5C8EDF0F163A5072EDB
        Validity
            Not Before: Apr  3 12:33:59 2024 GMT
            Not After : Apr  2 12:38:59 2025 GMT
        Subject: CN=24E468561FE08AC0DB27C039B74C13BEDF2232AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7f:b4:ed:d7:42:c8:00:9b:81:1f:4e:4b:4e:
                    65:05:b3:89:3a:1b:31:c0:b3:31:33:d6:38:67:e2:
                    52:f6:06:02:f9:3a:85:64:d7:aa:54:63:9d:1c:3f:
                    e5:25:25:c5:b3:de:e5:4a:88:61:20:e4:9d:53:b4:
                    55:10:47:88:b4:54:08:87:a3:b5:20:a6:a7:05:f9:
                    2d:16:a5:54:f5:34:11:e9:9f:f6:2a:1d:62:65:88:
                    9a:43:a0:bc:59:ff:48:2c:ae:86:c1:3a:bb:f7:59:
                    2a:d6:84:e2:c5:6e:4e:c5:c6:ba:d0:34:ce:26:c0:
                    64:34:ea:6f:5e:f7:c1:df:2e:01:66:de:90:f8:39:
                    a2:52:c8:10:ba:ab:7a:31:0e:a6:2a:6e:99:94:d9:
                    98:31:fc:3b:34:d9:7d:93:1f:5b:c1:59:e5:e3:83:
                    8c:7d:92:69:22:64:b6:c6:df:c0:6e:30:cf:63:cf:
                    96:d6:99:a1:23:a3:3a:59:67:9f:5a:ab:00:51:6e:
                    bd:44:0e:40:49:00:67:10:33:c4:aa:37:45:57:7f:
                    98:80:7e:9c:4a:99:64:92:41:3e:93:52:79:fd:55:
                    a6:f5:9b:c7:35:ee:cd:67:23:25:2a:49:36:4d:af:
                    5f:08:ea:5c:70:32:1d:88:72:82:fb:61:50:54:c9:
                    73:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E4:68:56:1F:E0:8A:C0:DB:27:C0:39:B7:4C:13:BE:DF:22:32:AC
            X509v3 Authority Key Identifier:
                keyid:71:D7:A8:21:9C:D2:E4:A7:32:B4:D5:C8:ED:F0:F1:63:A5:07:2E:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/0/71D7A8219CD2E4A732B4D5C8EDF0F163A5072EDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71D7A8219CD2E4A732B4D5C8EDF0F163A5072EDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/0/323830343a323161303a3a2f33322d3438203d3e20323634353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:6a:fc:29:a8:68:87:8e:08:d9:9b:14:ac:5b:61:95:c7:bb:
         18:9b:35:0e:af:0a:01:73:aa:95:87:31:31:fe:24:3a:b1:67:
         c8:03:8d:cd:ae:31:48:6d:a6:db:f8:c0:dc:52:d7:94:ad:d4:
         c2:4d:fd:1d:e0:71:a5:60:53:66:5b:25:3a:cb:f8:45:20:b0:
         42:0d:76:30:6e:b6:81:d2:38:eb:5e:06:03:bd:b9:62:83:97:
         f4:f5:ba:e1:71:81:89:4c:02:38:c9:fb:4b:48:0f:0d:11:ba:
         c7:2b:ed:2e:53:78:c6:58:a9:63:ed:26:b4:f5:3a:9b:02:ac:
         8b:c2:4a:4d:d3:68:1f:be:72:52:9d:bd:42:03:d2:1e:bb:cc:
         ee:31:0b:f2:6b:0a:20:22:49:b5:33:f8:b0:e5:00:b6:a1:ac:
         40:5b:1e:0f:d6:99:01:24:ea:5c:db:3a:e8:9b:04:6e:63:7d:
         6c:e4:8d:2c:bb:83:f3:7b:f6:c5:52:6e:65:b8:49:48:a6:78:
         79:3e:70:43:a2:a7:17:c4:1f:47:39:9d:21:da:92:a5:6b:e4:
         9c:44:fa:98:67:81:d5:4f:7d:be:08:0b:0b:12:1e:b8:79:26:
         1d:dd:46:5a:71:28:51:f3:23:82:5d:74:2c:c3:1f:59:28:57:
         75:09:db:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org