Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/2/323830343a333234383a3a2f33322d3438203d3e203631353832.roa
File:                     323830343a333234383a3a2f33322d3438203d3e203631353832.roa (raw, json)
Hash identifier:          usXUbNmRsfuBrmg/70RP6+fvuCbBZK5XxxbzbAN3ghY=
Subject key identifier:   BA:91:CD:F4:66:E3:5E:D0:91:53:60:EB:41:5B:FC:08:C4:DD:08:E7
Certificate issuer:       /CN=2C08A631AAA7CB77C74E7E1D34A6895A1102D4CD
Certificate serial:       09358B862BC80C35C48FE0960D46CFE9908F8C62
Authority key identifier: 2C:08:A6:31:AA:A7:CB:77:C7:4E:7E:1D:34:A6:89:5A:11:02:D4:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C08A631AAA7CB77C74E7E1D34A6895A1102D4CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/2/323830343a333234383a3a2f33322d3438203d3e203631353832.roa
Signing time:             Thu 04 May 2023 14:24:00 +0000
ROA not before:           Thu 04 May 2023 14:19:00 +0000
ROA not after:            Thu 02 May 2024 14:24:00 +0000
asID:                     61582
IP address blocks:        2804:3248::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:35:8b:86:2b:c8:0c:35:c4:8f:e0:96:0d:46:cf:e9:90:8f:8c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C08A631AAA7CB77C74E7E1D34A6895A1102D4CD
        Validity
            Not Before: May  4 14:19:00 2023 GMT
            Not After : May  2 14:24:00 2024 GMT
        Subject: CN=3082010A0282010100F6AA0F9225BCD6FAAFB300F838AE09106CC82EB73C0629E627C1DA7E28E0EBC72EED7DD8880BBD4009994471E35C74DE5D9BE769836E792252F69D548EE2DC6926C15B97832AFFDEAA8CD3CD6307FBD9A32B544B5AE8D92849BC9DDB876E61B20E26567DB2BA7936E7FDA5A3519B1413F537429F3E78625CA91EE655B6CD88D1651FDDDC4150E55983C0B6CFEE80D3169714D6EA61B9A4E5ECD89993AC9FC68A2D20905CD3B48259B727CD463ABE587D7D58622FB6CD97AD80C8DF5C2DBD7374631D50A8165C41FA1A5F5CF5CDE1A08965C267FD04D85AFCCF70C32520CABA4866DB41AEDB632600A8A42FAB8BE776505125B97743765D10AE52DE251E83CB7F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:aa:0f:92:25:bc:d6:fa:af:b3:00:f8:38:ae:
                    09:10:6c:c8:2e:b7:3c:06:29:e6:27:c1:da:7e:28:
                    e0:eb:c7:2e:ed:7d:d8:88:0b:bd:40:09:99:44:71:
                    e3:5c:74:de:5d:9b:e7:69:83:6e:79:22:52:f6:9d:
                    54:8e:e2:dc:69:26:c1:5b:97:83:2a:ff:de:aa:8c:
                    d3:cd:63:07:fb:d9:a3:2b:54:4b:5a:e8:d9:28:49:
                    bc:9d:db:87:6e:61:b2:0e:26:56:7d:b2:ba:79:36:
                    e7:fd:a5:a3:51:9b:14:13:f5:37:42:9f:3e:78:62:
                    5c:a9:1e:e6:55:b6:cd:88:d1:65:1f:dd:dc:41:50:
                    e5:59:83:c0:b6:cf:ee:80:d3:16:97:14:d6:ea:61:
                    b9:a4:e5:ec:d8:99:93:ac:9f:c6:8a:2d:20:90:5c:
                    d3:b4:82:59:b7:27:cd:46:3a:be:58:7d:7d:58:62:
                    2f:b6:cd:97:ad:80:c8:df:5c:2d:bd:73:74:63:1d:
                    50:a8:16:5c:41:fa:1a:5f:5c:f5:cd:e1:a0:89:65:
                    c2:67:fd:04:d8:5a:fc:cf:70:c3:25:20:ca:ba:48:
                    66:db:41:ae:db:63:26:00:a8:a4:2f:ab:8b:e7:76:
                    50:51:25:b9:77:43:76:5d:10:ae:52:de:25:1e:83:
                    cb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:91:CD:F4:66:E3:5E:D0:91:53:60:EB:41:5B:FC:08:C4:DD:08:E7
            X509v3 Authority Key Identifier:
                keyid:2C:08:A6:31:AA:A7:CB:77:C7:4E:7E:1D:34:A6:89:5A:11:02:D4:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/2/2C08A631AAA7CB77C74E7E1D34A6895A1102D4CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C08A631AAA7CB77C74E7E1D34A6895A1102D4CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/2/323830343a333234383a3a2f33322d3438203d3e203631353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3248::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:75:2d:5c:b3:33:f6:a7:0f:51:16:33:c2:f8:f3:9f:27:22:
         51:41:ee:0d:15:7d:54:51:12:dc:16:4e:d0:f3:c7:91:10:d1:
         d8:83:83:a9:15:99:c9:52:b7:16:f6:f5:69:d2:d0:ea:63:fb:
         79:10:7f:a0:8b:9d:91:dc:18:5f:66:dc:bd:4a:c8:17:a8:05:
         0c:e4:9c:c3:18:4f:d1:64:a6:90:20:96:51:ae:ab:13:83:af:
         9b:3b:5d:1f:e3:f9:c9:55:3c:5c:83:ef:2e:51:9a:42:60:f3:
         14:0e:a6:58:8b:03:03:2c:97:9b:5a:25:8c:ef:25:ab:21:3c:
         8f:f4:2c:a2:7a:e6:0b:54:88:bf:ac:41:f7:a6:fb:d9:91:bd:
         12:11:40:d8:13:ba:28:26:d7:3a:eb:bc:bb:95:eb:95:0e:fc:
         5e:5c:87:da:d3:d4:df:47:96:3e:65:72:1e:08:0f:f6:31:d9:
         f3:1a:59:cd:8a:bd:5a:f2:eb:24:f0:ae:a9:07:f5:09:a0:f3:
         41:ec:6a:cb:64:c9:e4:a5:34:ed:86:d3:af:f3:e4:82:a0:b2:
         69:5b:3a:00:64:5a:4a:c5:45:b3:70:0a:7d:4d:32:f7:9b:29:
         24:e7:b5:a9:0e:24:2b:d7:8c:ce:2a:46:c3:55:b3:0a:50:d0:
         49:8f:91:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org