Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/323830343a316137303a383030303a3a2f33332d3333203d3e203631383539.roa
File:                     323830343a316137303a383030303a3a2f33332d3333203d3e203631383539.roa (raw, json)
Hash identifier:          YvY/O9t9LF+VbgQTzhZkZgbGhWzBfXIhbmwOE3XNbQQ=
Subject key identifier:   73:B6:91:D8:03:FD:78:53:27:C0:C8:F4:86:36:D9:66:37:78:40:88
Certificate issuer:       /CN=4A3AD02DD5CCFE1CD249C617730EF4878B516334
Certificate serial:       21C279EB9F1A96E9B9547FD4B8A461525D96935A
Authority key identifier: 4A:3A:D0:2D:D5:CC:FE:1C:D2:49:C6:17:73:0E:F4:87:8B:51:63:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A3AD02DD5CCFE1CD249C617730EF4878B516334.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/323830343a316137303a383030303a3a2f33332d3333203d3e203631383539.roa
Signing time:             Wed 07 Jun 2023 13:50:59 +0000
ROA not before:           Wed 07 Jun 2023 13:45:59 +0000
ROA not after:            Wed 05 Jun 2024 13:50:59 +0000
asID:                     61859
IP address blocks:        2804:1a70:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c2:79:eb:9f:1a:96:e9:b9:54:7f:d4:b8:a4:61:52:5d:96:93:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A3AD02DD5CCFE1CD249C617730EF4878B516334
        Validity
            Not Before: Jun  7 13:45:59 2023 GMT
            Not After : Jun  5 13:50:59 2024 GMT
        Subject: CN=73B691D803FD785327C0C8F48636D96637784088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1e:54:03:32:f7:25:f2:60:af:3d:92:84:e9:
                    c7:07:74:38:fb:8f:97:d8:1a:49:e9:39:96:fd:7d:
                    bb:11:8c:a3:fb:7f:ad:2c:fb:71:0d:45:3d:2f:0b:
                    44:95:d7:67:ed:26:2a:40:29:a6:64:0a:29:36:50:
                    df:c6:6b:31:55:de:75:64:e1:be:d4:8f:63:13:86:
                    e6:33:46:03:5d:72:61:c0:f9:51:33:1d:2a:98:3c:
                    60:aa:ed:26:ff:e1:28:df:d5:f4:fd:77:ab:3b:77:
                    32:8a:68:26:7d:17:5b:c2:f2:8b:dc:df:16:29:c6:
                    79:46:7b:e1:47:f7:cb:c6:da:e0:3c:a2:84:9d:39:
                    2a:d5:6f:2e:15:fd:a6:a5:cc:9b:48:61:1a:81:29:
                    97:ec:c8:59:ac:bb:8d:f0:55:d6:d3:9d:85:61:3f:
                    84:8a:8b:24:dc:38:8b:34:09:0c:0f:85:c0:e0:bf:
                    77:f0:20:8a:41:44:45:0d:8e:49:e8:75:51:8f:f4:
                    f7:a0:fa:09:03:0b:a7:0d:cb:f3:be:61:55:5a:41:
                    dc:98:f9:f0:33:0d:6c:c4:0e:48:3f:6e:34:6f:56:
                    35:38:cf:1f:c5:b3:82:e7:9a:86:08:bf:91:41:8d:
                    a7:db:2a:3f:86:43:da:60:1c:ee:16:ca:b1:a9:c7:
                    5b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B6:91:D8:03:FD:78:53:27:C0:C8:F4:86:36:D9:66:37:78:40:88
            X509v3 Authority Key Identifier:
                keyid:4A:3A:D0:2D:D5:CC:FE:1C:D2:49:C6:17:73:0E:F4:87:8B:51:63:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/4A3AD02DD5CCFE1CD249C617730EF4878B516334.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A3AD02DD5CCFE1CD249C617730EF4878B516334.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/323830343a316137303a383030303a3a2f33332d3333203d3e203631383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a70:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         1a:61:7b:b5:fd:6f:84:e9:b1:f9:ce:9d:22:b5:f8:79:cd:d9:
         84:6e:bc:e4:ee:62:eb:cf:81:ac:09:ef:81:0a:2c:2b:ae:c7:
         ce:72:01:3f:55:d5:37:ce:66:ac:b9:ee:3e:7f:7b:e1:24:2e:
         a4:df:10:1d:f3:86:11:7d:9d:66:60:30:c9:05:72:f3:2a:71:
         da:44:8b:63:2e:74:9e:f7:df:45:b4:7e:75:57:66:41:f8:79:
         a1:30:ec:ff:a7:e4:1c:5b:98:b6:a7:22:db:af:63:c7:c9:0d:
         0c:1b:ca:1e:15:17:9f:34:68:33:69:82:42:29:09:94:a9:d7:
         bb:46:08:62:81:7f:8a:2e:9e:ff:a1:e6:7f:fa:27:cb:b6:95:
         c1:fd:16:4f:c0:b6:dc:4d:a0:4f:bc:ff:56:c7:41:a6:37:3d:
         52:e4:8a:da:4a:19:3f:d7:c1:6a:bd:2b:6b:85:2e:27:92:19:
         34:2a:10:d9:1b:b6:92:9f:d9:47:f6:c2:f8:1e:69:db:e1:47:
         8b:70:c8:ed:db:e2:32:ee:d4:1e:95:5a:36:b0:55:45:c3:ae:
         de:63:c7:97:22:de:24:c4:e0:8d:a1:d9:3d:f9:43:6e:14:25:
         3c:58:26:7b:73:ef:3b:14:2e:ce:70:d4:d0:42:b4:dc:a4:3b:
         09:d5:57:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org