Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4WYdztp2BNLun9XZfbxszWMQwJCsJ38Mj4NXvJvxZydn/1/323830343a333939633a653030323a3a2f34382d3438203d3e20323636303339.roa
File:                     323830343a333939633a653030323a3a2f34382d3438203d3e20323636303339.roa (raw, json)
Hash identifier:          WIaQE9oMbnmXVrN2Y/DyM5+oRxSYsUgiWsBKt5Aq3xc=
Subject key identifier:   64:5B:27:91:50:6B:00:22:C4:5C:AA:3C:AE:08:17:AF:85:33:3B:2F
Certificate issuer:       /CN=10968BD5A3F23304B30A228DAF88BF92B5DC5B23
Certificate serial:       3210F94C807433ABF97974EDC3A60F895BA529BC
Authority key identifier: 10:96:8B:D5:A3:F2:33:04:B3:0A:22:8D:AF:88:BF:92:B5:DC:5B:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10968BD5A3F23304B30A228DAF88BF92B5DC5B23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4WYdztp2BNLun9XZfbxszWMQwJCsJ38Mj4NXvJvxZydn/1/323830343a333939633a653030323a3a2f34382d3438203d3e20323636303339.roa
Signing time:             Mon 04 Jul 2022 14:25:50 +0000
ROA not before:           Mon 04 Jul 2022 14:20:50 +0000
ROA not after:            Mon 03 Jul 2023 14:25:50 +0000
asID:                     266039
IP address blocks:        2804:399c:e002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:10:f9:4c:80:74:33:ab:f9:79:74:ed:c3:a6:0f:89:5b:a5:29:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10968BD5A3F23304B30A228DAF88BF92B5DC5B23
        Validity
            Not Before: Jul  4 14:20:50 2022 GMT
            Not After : Jul  3 14:25:50 2023 GMT
        Subject: CN=645B2791506B0022C45CAA3CAE0817AF85333B2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:21:8e:a2:34:4d:bc:b6:b1:fc:4e:e1:1b:0d:
                    90:06:f4:a2:dc:b9:db:15:fe:f2:31:06:92:52:03:
                    c7:49:44:08:b5:4d:3a:2b:2f:b1:88:c7:98:9b:4c:
                    84:a2:c7:5b:1f:59:fb:b0:fb:75:6c:7b:17:5f:a1:
                    d4:53:ea:7d:0b:76:4a:ef:aa:d1:fb:5c:0d:f5:0d:
                    f0:ae:d9:ad:28:cc:05:6b:41:53:33:72:5e:8a:56:
                    6e:fa:3c:6b:f9:2d:ae:38:30:a9:e3:67:57:1a:cd:
                    28:d2:14:28:de:64:f3:1d:9b:6e:1a:5a:4d:52:9f:
                    2d:f7:f8:d3:c4:f6:d9:b3:79:14:71:42:b9:5d:c9:
                    30:e7:75:3d:56:45:ed:26:1a:cb:f4:7e:6e:69:1c:
                    46:4f:e6:57:7d:1c:46:f4:6b:d0:00:c5:d4:02:8d:
                    50:79:c5:f7:18:9b:dc:ff:e7:a1:a5:38:01:95:96:
                    c3:77:be:ad:02:10:a2:8f:34:29:4c:2d:83:64:95:
                    34:b5:b2:7d:b4:9e:cc:47:16:2b:90:5e:5c:4f:b2:
                    e5:31:3d:7f:7d:7d:bc:ea:48:e0:a0:22:8d:34:5b:
                    e4:c2:45:bc:cf:2a:05:4e:3a:0c:6b:51:bb:8b:74:
                    aa:86:2d:9f:78:1e:9f:ef:22:a1:ea:39:e0:d7:e9:
                    ed:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:5B:27:91:50:6B:00:22:C4:5C:AA:3C:AE:08:17:AF:85:33:3B:2F
            X509v3 Authority Key Identifier:
                keyid:10:96:8B:D5:A3:F2:33:04:B3:0A:22:8D:AF:88:BF:92:B5:DC:5B:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4WYdztp2BNLun9XZfbxszWMQwJCsJ38Mj4NXvJvxZydn/1/10968BD5A3F23304B30A228DAF88BF92B5DC5B23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10968BD5A3F23304B30A228DAF88BF92B5DC5B23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4WYdztp2BNLun9XZfbxszWMQwJCsJ38Mj4NXvJvxZydn/1/323830343a333939633a653030323a3a2f34382d3438203d3e20323636303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:399c:e002::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:32:de:d2:d9:10:68:bc:4f:93:35:b5:30:f6:f1:4d:99:2a:
         02:d3:1a:96:9d:79:fb:78:29:95:25:f7:d7:37:0b:ef:4f:82:
         04:cc:1e:1f:5c:a6:61:f3:a6:41:1b:cf:45:38:76:2e:69:18:
         18:1c:af:47:6d:3a:bf:4d:c0:89:57:eb:2c:ac:c2:65:dc:f8:
         21:0f:0c:e2:01:42:39:ed:19:47:b9:86:ba:9a:78:88:e7:b7:
         f9:d3:10:d2:94:ac:c2:88:55:c6:f1:48:6b:b1:a9:69:c1:5d:
         d7:fe:78:0a:c9:e5:e9:d2:15:0a:2d:65:18:fe:4d:81:bf:2b:
         0e:e1:d1:e1:71:5e:6c:8e:c8:fe:f6:a4:4e:f9:ea:19:dd:a4:
         05:93:1e:03:9d:6e:ae:00:2e:e5:f2:30:59:4e:9e:0f:a4:df:
         57:95:16:f7:b7:34:3b:5b:27:f0:12:1a:bf:21:20:79:d2:e6:
         5c:4e:64:93:66:fd:7c:b4:9a:24:54:be:12:ac:fc:19:a5:4e:
         29:20:2c:f7:04:49:36:b6:ce:d3:5c:27:5e:c1:d3:10:c4:cf:
         46:e3:e7:a6:e0:06:f2:c8:11:82:37:3a:77:11:bc:df:59:0e:
         dc:04:39:0e:44:20:9c:14:11:b9:bb:e9:2f:26:ba:b0:93:bf:
         9a:24:c0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org