Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a316432303a3a2f34382d3438203d3e203631363738.roa
File:                     323830343a316364343a316432303a3a2f34382d3438203d3e203631363738.roa (raw, json)
Hash identifier:          RBH9VLox0PLh1Nl2jjUUiELmz6Dp/fmQJA0XqqJL+rY=
Subject key identifier:   8A:FF:CD:33:CB:76:FC:41:54:90:58:9A:66:9E:7E:A3:A5:01:21:37
Certificate issuer:       /CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Certificate serial:       182C7FD43FD3EED7EE7EDEA0F426EF89857AE484
Authority key identifier: 5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a316432303a3a2f34382d3438203d3e203631363738.roa
Signing time:             Tue 24 Oct 2023 12:43:38 +0000
ROA not before:           Tue 24 Oct 2023 12:38:38 +0000
ROA not after:            Tue 22 Oct 2024 12:43:38 +0000
asID:                     61678
IP address blocks:        2804:1cd4:1d20::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:2c:7f:d4:3f:d3:ee:d7:ee:7e:de:a0:f4:26:ef:89:85:7a:e4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
        Validity
            Not Before: Oct 24 12:38:38 2023 GMT
            Not After : Oct 22 12:43:38 2024 GMT
        Subject: CN=8AFFCD33CB76FC415490589A669E7EA3A5012137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b4:6d:aa:12:fa:86:83:07:ea:33:9c:86:e0:
                    02:03:41:d9:ed:fa:4f:c4:75:59:b8:d5:30:33:63:
                    59:9c:11:46:31:b2:49:9a:22:c2:d7:bd:fa:03:c2:
                    10:84:1f:70:0e:3e:f5:d0:3a:ac:07:15:ec:a6:ce:
                    0d:ca:de:7a:08:03:04:9d:69:e0:73:6c:a9:b6:34:
                    67:cf:3d:fc:c1:93:c7:4d:85:3a:a2:20:f0:09:73:
                    49:9e:d2:cc:11:81:41:b1:a2:ed:06:c6:98:4e:65:
                    37:a2:f8:43:1d:3b:eb:67:87:15:73:57:63:07:2b:
                    8d:85:a4:ba:5f:23:3f:38:70:94:14:ef:bd:61:61:
                    c8:db:8f:5a:2c:d8:8c:93:89:cf:f9:73:60:0e:22:
                    42:4d:d9:7c:7d:18:75:1d:8b:b4:9e:f8:0a:2e:75:
                    98:27:31:a1:91:bc:46:8a:68:0b:ac:d1:94:70:cf:
                    dd:ee:ac:7a:9a:98:e3:37:dd:57:2d:22:1c:bc:f6:
                    77:22:8b:08:32:09:cf:97:d1:8a:dc:47:44:49:ff:
                    80:55:ef:99:48:8b:cf:cf:f9:a2:dd:51:19:e5:ee:
                    ca:a8:06:b5:9e:7d:4b:18:65:c8:4a:ea:81:0f:08:
                    11:92:86:de:e4:8e:2e:a0:42:8c:e2:8c:4d:84:f3:
                    e8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FF:CD:33:CB:76:FC:41:54:90:58:9A:66:9E:7E:A3:A5:01:21:37
            X509v3 Authority Key Identifier:
                keyid:5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a316432303a3a2f34382d3438203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd4:1d20::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:2f:f8:52:c3:80:80:a8:b1:eb:a5:2f:80:4a:52:ee:65:11:
         5a:64:0a:cc:d5:1a:7d:33:df:2d:b5:15:22:f2:7a:70:39:7d:
         31:36:6a:92:65:f3:3f:66:a9:d0:b0:6e:71:32:0c:72:22:dd:
         89:85:ec:4b:4b:c4:d9:ad:a3:c8:19:e2:72:7a:e7:d0:0d:e4:
         c8:b1:99:1f:c9:a9:7a:ef:5a:f6:ae:06:20:56:4e:b3:0d:a9:
         30:03:be:6c:00:17:16:44:80:75:44:fd:0a:f9:c9:ba:48:9a:
         9f:46:4e:9e:e0:37:34:35:5d:1f:25:26:da:36:e2:80:c0:30:
         c6:a9:77:c6:f0:05:ea:d0:8b:6f:91:f8:6c:f9:bd:b1:a9:68:
         77:6c:92:c3:86:94:b7:2f:84:32:b6:a4:f3:38:92:97:6f:b9:
         18:a1:ff:a1:6c:b3:76:9a:e9:b2:67:85:60:5c:52:a1:eb:c2:
         49:51:18:1b:13:fc:40:58:4c:83:bd:ae:6c:8f:03:db:c7:ef:
         7a:2a:32:06:16:d5:62:bc:d9:05:ff:e1:32:88:48:61:ce:e0:
         dd:f6:3d:dd:09:3a:7d:32:51:2d:96:33:ec:51:f4:1f:af:20:
         e9:86:fc:87:97:5a:a3:d1:79:3d:0f:14:1c:97:38:18:aa:19:
         f3:88:6c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org