Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a383030313a3a2f34382d3438203d3e203631363738.roa
File:                     323830343a316364343a383030313a3a2f34382d3438203d3e203631363738.roa (raw, json)
Hash identifier:          A5cgx5o2EtP/HYZgHg0cq0LuCBfpXO7DPlbEIERAuiQ=
Subject key identifier:   CB:08:B5:B7:CF:9D:94:15:93:59:8D:6F:BF:8A:8E:84:9D:C9:82:4D
Certificate issuer:       /CN=780522B472F71205BBA4B3297526858181869281
Certificate serial:       01170CD740D6814BAEA3565C07DC0160E68A50D7
Authority key identifier: 78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a383030313a3a2f34382d3438203d3e203631363738.roa
Signing time:             Wed 03 Apr 2024 21:46:15 +0000
ROA not before:           Wed 03 Apr 2024 21:41:15 +0000
ROA not after:            Wed 02 Apr 2025 21:46:15 +0000
asID:                     61678
IP address blocks:        2804:1cd4:8001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:17:0c:d7:40:d6:81:4b:ae:a3:56:5c:07:dc:01:60:e6:8a:50:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780522B472F71205BBA4B3297526858181869281
        Validity
            Not Before: Apr  3 21:41:15 2024 GMT
            Not After : Apr  2 21:46:15 2025 GMT
        Subject: CN=CB08B5B7CF9D941593598D6FBF8A8E849DC9824D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bb:a5:a3:78:3b:aa:f7:e9:06:10:b4:ec:cf:
                    c9:46:fc:c6:6a:42:44:70:45:96:f2:63:5f:de:a3:
                    ff:76:d7:f8:02:4f:78:55:a3:85:e9:cc:25:7c:7b:
                    7d:d4:ac:89:26:6e:7f:fb:21:37:46:4a:f7:2b:45:
                    70:d0:ee:41:43:f2:c4:6b:75:15:7e:8d:e1:c0:11:
                    52:83:c2:64:f8:7c:12:3b:89:9d:27:d5:6c:ed:a5:
                    1d:68:d7:97:37:fb:a6:14:f0:4a:70:d9:99:17:d5:
                    d6:4f:8e:73:ad:4e:1e:69:03:7b:97:7c:50:78:88:
                    58:55:05:5d:38:56:1d:85:43:fb:6c:1a:12:6c:d0:
                    35:6d:50:33:e9:27:5a:8a:c7:2d:26:ba:55:2e:57:
                    19:e6:71:eb:d4:5e:85:f2:dc:b2:c8:7e:dc:3c:d6:
                    5a:91:a4:9d:d8:31:e4:b2:e3:aa:c2:32:23:71:5a:
                    1d:31:04:ed:98:e3:3d:ba:ef:0f:37:9f:3c:09:44:
                    4b:90:e6:5c:a2:30:5e:1d:80:9b:cb:55:9d:7a:d1:
                    16:84:a7:dc:95:d0:cb:06:ef:2c:3c:80:6b:00:93:
                    9d:1c:3a:42:c3:fd:73:08:5f:d5:b9:d1:ff:71:bc:
                    62:ec:98:b6:6a:6e:cd:93:cc:9d:c4:4a:c5:f4:8c:
                    61:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:08:B5:B7:CF:9D:94:15:93:59:8D:6F:BF:8A:8E:84:9D:C9:82:4D
            X509v3 Authority Key Identifier:
                keyid:78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/780522B472F71205BBA4B3297526858181869281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a383030313a3a2f34382d3438203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd4:8001::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:f2:fc:3e:7a:4e:cd:28:3c:ec:ab:97:50:02:60:f7:c1:f6:
         a5:86:01:1a:e3:d1:05:77:ac:b4:5e:fd:e1:10:9e:b5:20:f1:
         aa:75:ce:29:4b:d3:12:e6:12:ff:28:48:f6:1b:26:88:9c:2a:
         05:fc:c4:d3:cb:da:4a:6c:73:73:c0:c7:40:4e:60:c1:35:25:
         d2:9a:b5:18:d0:f3:7e:fc:45:5d:f5:1a:46:25:41:94:da:22:
         3b:a8:76:95:34:bb:41:b1:ba:e7:02:d4:d8:7e:e7:a9:33:a5:
         34:ff:68:6e:50:eb:f2:d1:85:77:3d:bb:27:ac:51:68:5b:12:
         84:e1:6e:9f:76:15:87:0d:79:6d:73:43:d8:9e:c7:e9:bb:2e:
         ee:86:59:b4:55:c9:b3:8c:96:c7:12:df:92:1e:e0:5c:8a:aa:
         f3:8b:44:21:63:d9:67:b1:27:71:78:a2:74:37:d2:df:ab:b4:
         52:3f:a3:76:6d:e6:10:83:66:f9:96:8a:82:6d:8f:1b:b8:ab:
         2f:93:08:a6:2c:76:c1:3b:0c:12:3c:3c:03:db:8b:78:5b:47:
         c4:e1:59:a0:a4:a8:0d:17:cd:b8:38:66:2c:b9:a2:77:14:de:
         69:c8:c8:58:30:1c:9b:a6:5e:ee:1f:7e:23:35:af:40:0f:58:
         a7:35:3a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 00:40:07 2024 by rpki-client on console-fra.rpki-client.org