Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a383030343a3a2f34382d3438203d3e203631363738.roa
File:                     323830343a316364343a383030343a3a2f34382d3438203d3e203631363738.roa (raw, json)
Hash identifier:          FvAhOGHoSlWTbqbnepi0WY4nZIhryyKPFz+JngoAeas=
Subject key identifier:   F3:07:36:9B:4C:C2:4C:75:81:B4:08:CA:48:4A:34:B8:88:1F:8A:42
Certificate issuer:       /CN=780522B472F71205BBA4B3297526858181869281
Certificate serial:       200154C7961D629A3F56854588A618A5CAA44F96
Authority key identifier: 78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a383030343a3a2f34382d3438203d3e203631363738.roa
Signing time:             Wed 03 Apr 2024 21:46:16 +0000
ROA not before:           Wed 03 Apr 2024 21:41:16 +0000
ROA not after:            Wed 02 Apr 2025 21:46:16 +0000
asID:                     61678
IP address blocks:        2804:1cd4:8004::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:01:54:c7:96:1d:62:9a:3f:56:85:45:88:a6:18:a5:ca:a4:4f:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780522B472F71205BBA4B3297526858181869281
        Validity
            Not Before: Apr  3 21:41:16 2024 GMT
            Not After : Apr  2 21:46:16 2025 GMT
        Subject: CN=F307369B4CC24C7581B408CA484A34B8881F8A42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:db:93:70:6e:c3:c9:52:10:dd:ea:2e:41:e8:
                    f5:d8:88:79:79:c5:49:41:55:36:ac:63:53:f6:0d:
                    6f:d5:08:5c:dd:29:3b:d1:d5:5b:7f:30:49:dc:d9:
                    9f:9f:b9:12:13:95:cb:ac:ba:0f:be:bc:ed:44:89:
                    5b:c8:93:04:e7:a6:5e:fa:e1:ce:16:fd:d5:80:fd:
                    70:bb:51:59:13:60:b0:1a:78:c9:76:b5:e5:11:14:
                    5a:38:1d:0e:1b:8c:84:0b:73:7b:25:bc:e8:82:6d:
                    95:29:b8:2d:b4:1a:f5:e9:e8:42:ca:96:3f:39:a3:
                    0a:20:1f:04:55:16:d8:b2:8c:af:99:d8:b2:6c:b9:
                    2a:33:e8:b9:f2:1e:9d:48:a6:67:21:8c:2f:a6:af:
                    35:99:84:f4:e1:4d:ce:da:16:bd:c5:ce:e0:c1:71:
                    d0:ec:ec:08:7e:e1:6e:05:bf:d2:73:b0:35:c2:f9:
                    81:c4:31:91:c0:6b:13:e4:4e:29:3b:a2:b3:29:6e:
                    6c:6e:ab:6b:1d:1f:9d:2e:a9:66:71:e3:bd:02:38:
                    c7:19:a2:af:db:3a:53:a2:25:6c:b9:bf:b2:3a:8c:
                    f2:47:56:61:0d:77:e8:c3:4d:1f:56:af:9f:09:c5:
                    6f:70:cf:1e:a1:5a:6f:ed:a9:b9:32:4e:3b:09:bd:
                    2d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:07:36:9B:4C:C2:4C:75:81:B4:08:CA:48:4A:34:B8:88:1F:8A:42
            X509v3 Authority Key Identifier:
                keyid:78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/780522B472F71205BBA4B3297526858181869281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a383030343a3a2f34382d3438203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd4:8004::/48

    Signature Algorithm: sha256WithRSAEncryption
         bf:2c:fc:bf:e9:2f:d1:0b:40:76:89:1d:fc:c0:b4:03:81:ef:
         93:d8:35:c0:0d:c9:2e:18:3c:37:66:be:73:f4:f1:c0:aa:62:
         a3:88:ab:9c:e9:7c:d4:1b:31:33:19:b8:05:f4:3d:7e:79:df:
         2f:bb:ff:35:b4:d1:d2:52:73:e4:98:81:8c:eb:e3:8b:7f:6f:
         30:e5:fd:0f:ad:77:03:a2:ca:5d:57:85:e3:a6:9f:7f:69:9f:
         d6:88:24:5a:63:7d:7a:f5:1d:ca:b4:82:f5:38:ac:38:f2:ee:
         38:ae:fd:b2:42:33:6a:0e:0f:28:1d:68:ac:c7:3c:8e:52:f1:
         db:5f:8f:ca:4e:ce:41:1e:c6:2c:bc:10:9a:55:75:86:13:ba:
         b2:53:e8:f3:c5:e4:92:bf:06:07:cd:92:71:4e:1a:82:42:36:
         80:71:9a:4c:1e:63:11:e9:eb:f8:77:01:e4:d7:c6:d7:10:66:
         13:1c:2d:cb:74:49:9e:ec:00:9d:ea:f8:9c:72:22:3c:e6:10:
         8a:cb:6d:fb:ad:63:6d:be:b2:77:71:33:67:6e:36:31:99:06:
         18:e3:35:c2:a9:5c:f0:47:3b:27:9c:ee:94:fc:f3:32:f5:30:
         46:8b:76:b6:04:b3:7d:8e:7c:f2:98:bc:06:78:85:c9:b0:a5:
         15:95:cd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 00:32:57 2024 by rpki-client on console-ams.rpki-client.org