Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a3a2f33322d3332203d3e203631363738.roa
File:                     323830343a316364343a3a2f33322d3332203d3e203631363738.roa (raw, json)
Hash identifier:          eHpIarbBM8raYwwOv1kDcTJWgVaAbY9tTa8dNzTx8zQ=
Subject key identifier:   DF:96:FC:22:4E:7F:06:F6:0A:D3:3C:61:AF:72:21:57:C6:2F:F0:E0
Certificate issuer:       /CN=780522B472F71205BBA4B3297526858181869281
Certificate serial:       30321E4378F2B5436BA255236A20A8E35DE47BF6
Authority key identifier: 78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a3a2f33322d3332203d3e203631363738.roa
Signing time:             Wed 03 Apr 2024 21:46:17 +0000
ROA not before:           Wed 03 Apr 2024 21:41:17 +0000
ROA not after:            Wed 02 Apr 2025 21:46:17 +0000
asID:                     61678
IP address blocks:        2804:1cd4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:32:1e:43:78:f2:b5:43:6b:a2:55:23:6a:20:a8:e3:5d:e4:7b:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780522B472F71205BBA4B3297526858181869281
        Validity
            Not Before: Apr  3 21:41:17 2024 GMT
            Not After : Apr  2 21:46:17 2025 GMT
        Subject: CN=DF96FC224E7F06F60AD33C61AF722157C62FF0E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:7c:08:df:87:a3:cb:c1:b1:a3:fb:a7:3e:02:
                    24:24:f5:de:3c:ff:bf:10:e2:c0:41:11:56:dc:fc:
                    a8:a3:79:59:64:2f:31:01:c1:8f:7b:22:eb:9c:19:
                    15:1d:78:b6:0d:95:2a:9d:15:5c:09:3f:22:99:cf:
                    d3:98:1b:9d:bb:28:35:b3:96:c7:33:5c:7b:a0:c1:
                    76:24:a7:6d:e1:5c:41:f7:54:29:1b:b9:4b:96:d7:
                    b1:13:17:14:cf:f3:60:00:12:fd:a0:d9:ed:cc:f5:
                    b1:48:0c:9e:8d:d9:ad:b8:87:eb:c4:96:cf:ca:4d:
                    32:ac:e5:98:b9:27:91:fb:bf:d7:4b:ac:a6:1a:3d:
                    ee:c2:3f:22:5c:03:f1:bd:f9:71:14:7c:56:58:fd:
                    66:bd:9c:4e:1b:b8:6d:d8:bf:31:f3:5f:46:2d:a3:
                    f3:02:28:45:af:be:28:01:85:4c:27:b0:34:0a:49:
                    c4:72:18:b4:bb:ab:63:d5:e5:fe:8e:43:c5:5b:9c:
                    07:d1:c0:d8:88:60:3e:dc:fa:01:85:37:03:27:52:
                    bc:79:05:7c:6f:d8:3b:29:2b:6e:fa:fa:ea:12:55:
                    99:69:38:e1:cb:93:e6:19:7b:5c:31:3e:4d:d3:ad:
                    b4:75:51:25:84:72:d6:0b:1f:1d:8a:a7:d6:1c:33:
                    38:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:96:FC:22:4E:7F:06:F6:0A:D3:3C:61:AF:72:21:57:C6:2F:F0:E0
            X509v3 Authority Key Identifier:
                keyid:78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/780522B472F71205BBA4B3297526858181869281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a3a2f33322d3332203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd4::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:7e:0a:48:bd:e1:a4:0d:7f:18:ad:75:eb:00:04:26:de:a7:
         45:3c:63:31:0f:c6:11:1f:c9:94:1a:dc:97:b6:f2:77:74:6f:
         ac:28:f8:c6:cb:dd:64:9a:0c:e1:12:27:5d:8c:a3:91:23:43:
         3f:6c:4c:b3:67:cf:02:27:47:32:40:e5:32:6c:c9:ef:ca:19:
         20:95:87:32:af:7a:48:d4:10:bf:91:94:b9:46:ce:e3:eb:c6:
         85:65:5d:ba:ef:3b:46:15:02:00:33:d9:72:27:7f:b0:c5:7a:
         e9:30:72:07:bd:05:11:e6:a6:86:9f:39:9b:5e:24:62:d6:fb:
         95:7a:bb:78:c5:d0:74:dc:b9:bf:59:b9:b2:66:d8:54:cc:2d:
         6e:c3:f9:b1:4f:1d:ba:1a:57:f5:e1:e9:0d:2d:61:ed:fd:7c:
         a4:d2:e2:66:05:68:f2:67:3b:d3:e6:88:46:96:3d:50:c5:d2:
         3b:da:02:5c:ce:85:46:1d:f6:c2:e7:27:ca:3f:2c:2b:1e:d0:
         12:1c:52:08:19:fc:38:2f:d8:b7:da:08:08:06:cd:b3:a8:b2:
         41:6c:c9:3a:5b:f5:95:d8:48:34:f2:fe:d1:b8:76:4e:42:4b:
         51:d6:4c:55:fb:15:f7:86:c9:3d:2e:75:05:5b:06:89:8b:83:
         80:02:0c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 00:32:57 2024 by rpki-client on console-ams.rpki-client.org