Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a316330303a3a2f34302d3430203d3e203631363738.roa
File:                     323830343a316364343a316330303a3a2f34302d3430203d3e203631363738.roa (raw, json)
Hash identifier:          pdB3ZW8uqKBt1dB7nXMpeTaxok0ZzpL1uiIQASrWQoM=
Subject key identifier:   D1:BD:42:C9:50:32:4F:05:84:3A:A3:E9:84:16:07:AC:8A:5C:F9:99
Certificate issuer:       /CN=780522B472F71205BBA4B3297526858181869281
Certificate serial:       09C6443250C5C8D920C0CF8C668D54AA0E0C0F26
Authority key identifier: 78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a316330303a3a2f34302d3430203d3e203631363738.roa
Signing time:             Wed 03 Apr 2024 21:46:17 +0000
ROA not before:           Wed 03 Apr 2024 21:41:17 +0000
ROA not after:            Wed 02 Apr 2025 21:46:17 +0000
asID:                     61678
IP address blocks:        2804:1cd4:1c00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c6:44:32:50:c5:c8:d9:20:c0:cf:8c:66:8d:54:aa:0e:0c:0f:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780522B472F71205BBA4B3297526858181869281
        Validity
            Not Before: Apr  3 21:41:17 2024 GMT
            Not After : Apr  2 21:46:17 2025 GMT
        Subject: CN=D1BD42C950324F05843AA3E9841607AC8A5CF999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:39:7b:0c:84:ed:ba:67:be:a0:06:6a:0d:ef:
                    cc:d9:92:a6:17:d9:1f:f1:c0:ce:0b:b8:e2:6a:b9:
                    8e:e8:de:0e:e9:00:41:02:93:9c:a4:ed:ec:24:ec:
                    17:37:39:d4:94:31:df:61:a9:5f:cb:e9:05:6e:c1:
                    b3:14:eb:5b:2e:e7:ca:49:91:3e:3f:cf:94:8b:4f:
                    ee:12:ca:2e:81:e1:bc:95:37:6c:24:e5:d7:f0:d7:
                    c4:9a:de:30:1f:b5:2c:06:6e:3d:2f:3d:5b:dd:11:
                    94:80:b8:a9:9e:bf:f4:f3:0d:6c:d3:b4:1b:5f:df:
                    bd:7f:85:9a:10:24:0f:89:2f:e0:88:4a:67:99:2e:
                    3f:ae:42:34:b1:71:d9:eb:df:48:5d:3e:5f:0c:19:
                    6c:19:8b:90:45:be:6a:aa:62:64:46:69:ea:9f:0e:
                    31:2f:3e:eb:04:e7:d0:11:4d:f3:37:19:73:28:5c:
                    98:c5:a6:26:ba:1f:74:e9:12:05:e7:2e:95:b5:d8:
                    21:29:26:b1:18:12:81:98:2d:26:5f:15:4e:ff:11:
                    c8:1e:58:11:62:e8:0d:2d:59:70:08:b6:27:0d:6f:
                    03:46:0f:8c:35:7f:f5:0d:b6:20:0b:82:8b:62:79:
                    27:c4:a7:b8:8f:a1:02:61:a0:eb:49:72:5c:7f:a2:
                    14:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BD:42:C9:50:32:4F:05:84:3A:A3:E9:84:16:07:AC:8A:5C:F9:99
            X509v3 Authority Key Identifier:
                keyid:78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/780522B472F71205BBA4B3297526858181869281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a316330303a3a2f34302d3430203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd4:1c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         47:e9:6b:16:72:8a:db:60:d5:8e:fd:c8:97:1b:4b:4f:65:d0:
         fc:e7:62:3b:b4:c9:14:12:16:4f:49:09:71:73:92:ac:f7:41:
         99:67:6c:1a:09:bd:11:e2:0e:cb:a6:7b:3d:17:2c:8b:9a:ac:
         de:76:a6:ce:48:7d:a3:96:19:21:d2:41:7e:32:3f:23:c9:9e:
         0d:e4:01:3a:3f:97:2a:ee:8d:2b:fe:ab:90:76:6d:b6:a5:a8:
         37:64:be:46:3a:ac:e2:74:f4:c1:3e:7b:01:2c:60:71:fe:0b:
         bf:a2:10:b9:cc:55:dd:ee:9c:60:6c:41:72:a3:74:8a:73:e6:
         e1:f1:8d:22:a3:9f:ee:7e:27:7a:1c:ef:d4:f3:6c:c7:73:06:
         93:4c:b7:65:db:79:4f:b2:53:6b:55:e9:b9:1c:36:6a:fb:2b:
         1c:34:43:a3:99:3b:4e:dc:76:c4:93:00:be:82:a7:29:29:7d:
         4e:6b:dd:92:09:e4:a9:c9:4d:77:20:77:21:61:27:94:6f:cd:
         23:96:b1:c8:73:46:dd:91:a6:c0:7a:a2:d5:8e:ce:d4:d8:3b:
         a8:4f:1e:c3:f3:01:cf:b0:c8:16:58:36:84:a5:91:15:53:24:
         72:6d:13:f5:dd:12:5f:5b:3f:2b:44:10:f6:37:28:94:c4:4c:
         67:16:e3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 00:32:57 2024 by rpki-client on console-ams.rpki-client.org