Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a316430313a3a2f34382d3438203d3e203631363738.roa
File:                     323830343a316364343a316430313a3a2f34382d3438203d3e203631363738.roa (raw, json)
Hash identifier:          S9pKIM4Bw5Mt2HDm+wnSMCuVmgXrffZFQRoFwZB7dbw=
Subject key identifier:   80:E1:8A:DC:FF:4F:B0:0C:54:FB:7A:D0:45:F2:CF:DF:14:BE:FF:9D
Certificate issuer:       /CN=780522B472F71205BBA4B3297526858181869281
Certificate serial:       21947629BF5A1E824E1294A12712BB9533AD73A9
Authority key identifier: 78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a316430313a3a2f34382d3438203d3e203631363738.roa
Signing time:             Wed 03 Apr 2024 21:46:17 +0000
ROA not before:           Wed 03 Apr 2024 21:41:17 +0000
ROA not after:            Wed 02 Apr 2025 21:46:17 +0000
asID:                     61678
IP address blocks:        2804:1cd4:1d01::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:94:76:29:bf:5a:1e:82:4e:12:94:a1:27:12:bb:95:33:ad:73:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780522B472F71205BBA4B3297526858181869281
        Validity
            Not Before: Apr  3 21:41:17 2024 GMT
            Not After : Apr  2 21:46:17 2025 GMT
        Subject: CN=80E18ADCFF4FB00C54FB7AD045F2CFDF14BEFF9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c5:a1:c7:8d:52:f8:ac:97:a1:4e:ac:35:59:
                    f8:88:ac:a8:30:80:e5:14:9c:5a:d9:e2:c4:8a:50:
                    00:fd:2b:69:b9:f4:a7:0a:e0:15:bb:da:41:98:fd:
                    b5:2b:05:25:e4:1c:c2:20:e9:f5:1b:86:fb:b5:5b:
                    59:4d:0c:fa:bf:59:3b:fd:a1:d3:cb:74:93:a7:23:
                    ca:6e:eb:ab:31:8d:7c:40:0d:b8:a6:21:a7:e0:87:
                    36:b3:bc:a7:01:00:27:af:2b:fc:b4:44:45:8b:42:
                    36:ce:5d:f3:03:d3:1b:37:ed:d6:23:74:97:42:ca:
                    80:02:64:b8:5e:a2:1b:cb:31:51:02:58:02:18:b6:
                    d7:76:68:48:9e:90:52:1e:12:fe:be:85:4c:ba:e6:
                    80:d2:3a:ef:30:14:1a:4a:96:a2:a0:37:d7:99:58:
                    a8:9e:ae:a8:fd:0f:52:eb:ed:f8:76:bd:c3:76:af:
                    94:b2:fd:70:dd:f2:f8:9f:cd:17:65:3f:c6:3a:1f:
                    e4:fb:f0:e4:25:3d:39:df:f0:33:81:54:87:15:f9:
                    21:96:4d:66:eb:d4:63:70:11:c9:56:ec:52:4b:ef:
                    0d:d8:a9:54:82:2f:54:80:32:d8:41:4c:c9:31:00:
                    ed:ca:30:cd:38:85:ba:6e:47:7d:0a:33:96:ca:75:
                    c1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E1:8A:DC:FF:4F:B0:0C:54:FB:7A:D0:45:F2:CF:DF:14:BE:FF:9D
            X509v3 Authority Key Identifier:
                keyid:78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/780522B472F71205BBA4B3297526858181869281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a316430313a3a2f34382d3438203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd4:1d01::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:cc:50:da:f6:c9:69:c6:6f:27:1c:a2:e6:27:cf:71:a2:e7:
         3b:54:2f:39:8c:ed:a4:22:c4:b2:56:6c:0b:94:00:ae:a6:2a:
         98:ff:f2:9a:10:ac:7b:1f:ff:63:04:ee:4a:cd:e4:ba:20:7f:
         87:32:04:74:2d:64:41:76:71:f5:a6:4a:f9:bc:b0:6c:40:41:
         d1:4c:3e:df:28:0a:a4:fd:7f:3b:11:2a:22:29:cf:f2:16:4a:
         40:92:e2:2f:aa:77:43:5e:94:09:66:7b:5f:83:1e:87:ca:06:
         da:f4:ae:bf:52:8d:c4:d7:4b:e0:d2:d6:5e:d2:56:72:66:9d:
         a5:90:71:ea:4b:77:4c:54:78:8c:f2:ab:95:18:8e:0c:2e:07:
         f4:b0:f1:06:06:e3:58:68:ed:01:4c:4f:db:05:9f:cf:21:84:
         89:d5:dc:a4:73:58:a9:f9:07:ea:6a:0c:02:8a:91:53:ac:e0:
         7f:a7:9b:e4:7b:72:00:b3:71:32:94:0e:ee:02:58:6c:60:1a:
         fd:0e:6b:fd:90:f4:d0:21:96:14:e4:54:e3:ea:3b:ac:e3:8b:
         ee:8c:4a:d0:df:1d:6d:a0:65:9a:19:6a:16:b8:d1:0d:87:66:
         b0:29:ad:ba:ac:85:17:6d:7f:3e:b2:fd:53:75:1b:0c:ed:7b:
         7c:46:de:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 00:40:07 2024 by rpki-client on console-fra.rpki-client.org