Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/323830343a3935633a3a2f33322d3332203d3e203238363534.roa
File:                     323830343a3935633a3a2f33322d3332203d3e203238363534.roa (raw, json)
Hash identifier:          QV8+ss0at2Dw4IQCLWV1FxW+6vWitvVuf0ayAwdG2e4=
Subject key identifier:   A3:70:C8:3E:11:57:1A:21:EB:9A:F7:13:65:41:61:D1:60:AE:1A:D9
Certificate issuer:       /CN=B2F546D977681365BAAE07D71B317920DAAA3A47
Certificate serial:       2C9BA668A65083DB355083A225FACE48B0F7D54B
Authority key identifier: B2:F5:46:D9:77:68:13:65:BA:AE:07:D7:1B:31:79:20:DA:AA:3A:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2F546D977681365BAAE07D71B317920DAAA3A47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/323830343a3935633a3a2f33322d3332203d3e203238363534.roa
Signing time:             Thu 22 Sep 2022 14:36:56 +0000
ROA not before:           Thu 22 Sep 2022 14:31:56 +0000
ROA not after:            Thu 21 Sep 2023 14:36:56 +0000
asID:                     28654
IP address blocks:        2804:95c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:9b:a6:68:a6:50:83:db:35:50:83:a2:25:fa:ce:48:b0:f7:d5:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2F546D977681365BAAE07D71B317920DAAA3A47
        Validity
            Not Before: Sep 22 14:31:56 2022 GMT
            Not After : Sep 21 14:36:56 2023 GMT
        Subject: CN=A370C83E11571A21EB9AF713654161D160AE1AD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:39:62:39:0e:aa:1e:3a:42:bc:33:ce:9a:42:
                    f2:3f:91:f3:ca:cf:16:a7:d8:4e:33:a4:c0:65:05:
                    01:40:11:d2:2c:00:21:e7:79:52:3d:29:b4:81:07:
                    7c:53:c2:d3:88:87:bf:d2:7b:68:2c:58:f3:14:f7:
                    af:c5:cb:d9:1b:bd:a9:af:b5:48:ab:66:1b:81:b1:
                    1d:9d:05:af:e8:90:79:56:53:6e:a5:83:11:7c:7e:
                    a0:02:48:f0:a3:4b:df:66:7e:a3:90:1e:fe:e2:3c:
                    ff:3d:cc:f9:6b:09:b2:c5:da:eb:bb:93:ae:0e:64:
                    ee:6d:4f:1c:19:80:19:72:2f:bf:f2:83:68:c2:e5:
                    c5:65:56:3d:59:ea:47:94:29:a3:ba:93:d2:ee:f5:
                    b8:a2:29:7b:fa:64:cd:57:d6:17:c1:9e:67:42:96:
                    f9:8c:4b:92:b3:da:a0:5a:82:7d:b5:cd:30:45:b4:
                    8e:2b:e6:49:87:03:01:17:ae:41:48:7b:67:f1:b5:
                    1c:96:6a:17:76:a0:66:47:09:6d:12:75:73:69:9b:
                    97:b7:d7:98:63:80:2c:77:df:83:fc:82:dd:a0:2a:
                    4a:f6:35:fb:49:c4:b6:89:e7:06:bf:81:9e:1d:a3:
                    eb:5d:4c:29:d7:c2:74:c9:a0:b5:42:8a:43:11:8c:
                    c9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:70:C8:3E:11:57:1A:21:EB:9A:F7:13:65:41:61:D1:60:AE:1A:D9
            X509v3 Authority Key Identifier:
                keyid:B2:F5:46:D9:77:68:13:65:BA:AE:07:D7:1B:31:79:20:DA:AA:3A:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/B2F546D977681365BAAE07D71B317920DAAA3A47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2F546D977681365BAAE07D71B317920DAAA3A47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/323830343a3935633a3a2f33322d3332203d3e203238363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:95c::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:65:30:dc:b6:79:f9:d6:30:8e:37:b1:3f:7c:7e:ee:fa:61:
         43:33:5b:4a:fa:4b:84:41:12:ce:ef:40:d9:c7:96:fa:4d:31:
         ae:39:65:14:29:23:e7:86:58:0a:14:37:a3:c3:95:e6:48:bf:
         e3:73:2d:31:d5:c2:b6:50:8b:9b:0b:37:8d:38:99:ec:b0:32:
         db:5d:ca:d2:e0:bf:6c:d2:e4:9e:53:98:76:55:a0:e7:c9:d9:
         dc:00:6d:1d:73:7a:22:e6:55:db:28:5f:56:1e:89:0b:f4:e1:
         e2:7a:79:18:94:ee:e4:1a:39:5f:a9:2e:d5:61:23:72:3b:a7:
         03:a8:60:2d:28:73:0d:12:9a:d1:2a:6c:e0:3a:1b:b9:56:13:
         ce:96:21:55:3f:5a:24:3c:e2:82:7e:b5:f5:56:aa:95:6d:61:
         e5:f5:74:ff:4f:74:09:cb:46:91:a8:a0:92:de:d2:32:0b:29:
         68:37:81:bd:b8:63:69:10:94:35:0d:00:13:7f:82:2d:aa:cc:
         b7:8d:46:54:4b:20:f8:ec:12:6b:cf:75:2c:0f:0f:0a:c3:33:
         7a:c9:82:d8:3f:09:8b:e0:da:f9:f1:e4:75:9d:c9:28:cd:60:
         59:9e:b8:3c:b9:7d:a3:30:9f:a2:b4:95:44:24:57:42:a1:94:
         93:ac:43:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org