Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a343030303a3a2f33342d3334203d3e203631363738.roa
File:                     323830343a316364343a343030303a3a2f33342d3334203d3e203631363738.roa (raw, json)
Hash identifier:          6vFXA5n6X1f2uhTffYrkIs18qPZTDbvRjFjpruZMSqE=
Subject key identifier:   54:8D:29:D3:9E:F8:44:6A:7D:2C:0B:92:C0:C3:B6:AA:C7:74:23:91
Certificate issuer:       /CN=780522B472F71205BBA4B3297526858181869281
Certificate serial:       2CF8B72E658B7365BBA55070364F7CF00E0CE1EF
Authority key identifier: 78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a343030303a3a2f33342d3334203d3e203631363738.roa
Signing time:             Wed 03 Apr 2024 21:46:17 +0000
ROA not before:           Wed 03 Apr 2024 21:41:17 +0000
ROA not after:            Wed 02 Apr 2025 21:46:17 +0000
asID:                     61678
IP address blocks:        2804:1cd4:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f8:b7:2e:65:8b:73:65:bb:a5:50:70:36:4f:7c:f0:0e:0c:e1:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780522B472F71205BBA4B3297526858181869281
        Validity
            Not Before: Apr  3 21:41:17 2024 GMT
            Not After : Apr  2 21:46:17 2025 GMT
        Subject: CN=548D29D39EF8446A7D2C0B92C0C3B6AAC7742391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:14:f8:56:ed:3e:63:21:1c:2d:ea:3a:a9:80:
                    7d:da:11:71:11:fb:0e:53:7c:81:f1:be:9c:5b:2d:
                    9d:25:28:52:48:99:bd:aa:09:df:3d:05:f5:e0:87:
                    ca:6d:6b:23:25:a7:8f:6a:d3:df:88:f2:19:22:54:
                    c5:80:86:41:0e:e2:59:f1:32:2a:03:33:08:19:6b:
                    5d:f8:c1:6c:2d:a3:87:1f:5d:69:77:78:01:7a:2c:
                    d3:3b:2c:5a:8b:44:dd:29:9f:b1:5e:98:49:e5:7b:
                    29:0f:5e:b9:38:14:fc:9b:ea:4a:51:53:5f:7e:af:
                    8e:c2:49:5c:98:19:fc:9a:0e:c0:42:ef:33:e3:86:
                    49:99:19:d1:82:66:5c:9a:f1:c5:27:1e:c3:b1:ec:
                    38:68:26:64:35:fa:a6:41:26:61:66:29:2b:96:42:
                    40:d4:f3:4c:de:39:cf:96:36:66:9e:0c:2e:d3:12:
                    8a:1e:88:f9:bf:ec:52:13:1e:81:5d:82:6a:94:cc:
                    7b:08:e8:4d:3f:42:0d:df:4e:72:39:78:35:4a:df:
                    72:ba:89:fa:c6:4f:90:76:27:ab:fb:e0:1e:f5:25:
                    e1:a6:20:96:5c:d9:fb:dc:6b:68:49:f6:d8:96:d0:
                    74:d1:f6:b8:b1:ba:7e:32:b0:4c:00:f5:9d:57:00:
                    64:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8D:29:D3:9E:F8:44:6A:7D:2C:0B:92:C0:C3:B6:AA:C7:74:23:91
            X509v3 Authority Key Identifier:
                keyid:78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/780522B472F71205BBA4B3297526858181869281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a343030303a3a2f33342d3334203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         78:05:29:c7:fa:40:ec:8c:19:80:07:54:f9:6d:1b:04:42:eb:
         1d:56:3d:03:75:75:9b:0f:8f:d7:97:12:47:f4:cf:5a:32:ee:
         89:7b:47:86:97:fd:29:5a:02:d5:fe:3e:8a:9e:8e:5f:45:dd:
         7d:dc:ff:a9:45:57:c2:2d:17:49:4c:12:cb:60:0d:9f:04:d4:
         4c:76:23:47:fe:76:c8:6a:d2:a1:a4:85:cc:94:6a:c0:55:7a:
         74:ea:7f:f9:ca:55:cb:d9:49:7e:63:f9:14:be:b0:05:d9:a4:
         ee:f2:7f:d3:c2:75:b8:82:e7:d5:e7:b3:35:c8:33:0b:99:08:
         68:09:c0:e5:97:ac:d0:e1:62:de:71:7d:12:ec:ed:5b:73:05:
         26:7b:d6:cb:13:f2:c7:7c:ca:f8:46:1f:ed:bf:f4:dd:49:2f:
         f8:6b:77:24:d5:e4:62:84:86:be:b2:f9:a9:a8:06:fa:60:06:
         cc:1b:6d:ce:83:91:db:f2:64:09:e2:64:99:f1:6f:43:3f:aa:
         bd:84:0b:3a:00:4d:17:e6:a3:e4:3c:32:9b:31:f3:86:7d:23:
         9f:14:39:67:d2:82:6b:8e:ea:78:4d:b3:e6:0e:1d:4d:d0:ec:
         4b:28:ec:64:a4:bf:b4:b4:63:d9:7d:c9:45:b3:24:d4:6c:98:
         12:d1:7c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 00:32:57 2024 by rpki-client on console-ams.rpki-client.org