Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4WiFyuFRNKbbrkMa4EfAQZSNE3WYBKd8fwqKfFAWmCXy/0/323830343a343463303a3a2f33322d3438203d3e20323637363531.roa
File:                     323830343a343463303a3a2f33322d3438203d3e20323637363531.roa (raw, json)
Hash identifier:          ne2OMMlAk4q7mmEx3pZ9QltBqOVQP2Dr91vepAVXUYA=
Subject key identifier:   84:E9:AA:7D:4A:7D:4D:D0:7D:5F:E7:ED:3F:4C:8E:DF:91:09:02:E6
Certificate issuer:       /CN=42BF35C6FF36C97758EA11F34742DBBF27A61DE9
Certificate serial:       7D473918D87EE83AF9A143D7E210A2BEC9A421BB
Authority key identifier: 42:BF:35:C6:FF:36:C9:77:58:EA:11:F3:47:42:DB:BF:27:A6:1D:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42BF35C6FF36C97758EA11F34742DBBF27A61DE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4WiFyuFRNKbbrkMa4EfAQZSNE3WYBKd8fwqKfFAWmCXy/0/323830343a343463303a3a2f33322d3438203d3e20323637363531.roa
Signing time:             Fri 24 Nov 2023 19:00:00 +0000
ROA not before:           Fri 24 Nov 2023 18:55:00 +0000
ROA not after:            Fri 22 Nov 2024 19:00:00 +0000
asID:                     267651
IP address blocks:        2804:44c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:47:39:18:d8:7e:e8:3a:f9:a1:43:d7:e2:10:a2:be:c9:a4:21:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42BF35C6FF36C97758EA11F34742DBBF27A61DE9
        Validity
            Not Before: Nov 24 18:55:00 2023 GMT
            Not After : Nov 22 19:00:00 2024 GMT
        Subject: CN=84E9AA7D4A7D4DD07D5FE7ED3F4C8EDF910902E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9c:b0:a8:d0:e2:bc:f7:3d:61:f0:e2:15:bd:
                    f1:b1:ac:4f:08:60:2a:c5:11:7c:b2:3b:bc:e9:eb:
                    e8:f4:5b:c6:34:b5:4b:77:f8:ed:ea:69:c1:39:6a:
                    e3:20:f7:56:e4:7c:50:0e:5f:84:22:7e:af:82:aa:
                    38:6a:6b:57:38:26:9f:40:60:54:47:a1:6f:95:2b:
                    3d:34:b2:03:8a:eb:aa:57:3a:1e:f4:6d:67:3f:fc:
                    95:3a:ba:17:81:69:28:b9:54:13:5b:3f:ba:d7:6a:
                    e3:e5:bd:ba:cc:05:61:8e:be:94:a6:79:aa:19:58:
                    12:3a:97:d8:14:09:d0:81:c0:59:ba:fa:ab:3e:ff:
                    87:01:1a:a6:1a:74:b4:ba:5b:22:52:57:71:65:e3:
                    44:90:ca:b3:1d:8f:af:f2:94:04:4c:14:6e:6c:ef:
                    85:3f:8e:12:64:e1:b1:c5:5f:af:1c:fc:34:fa:6d:
                    86:99:92:a4:b0:0e:f7:25:46:0b:97:37:3b:c0:da:
                    39:62:06:2f:29:e1:44:13:d2:68:1d:95:63:57:b5:
                    f2:54:bf:05:9d:d5:92:ac:e0:96:d6:69:c5:88:98:
                    a7:ad:17:5c:10:4e:43:8d:42:23:6d:70:82:64:a7:
                    cc:56:de:3f:00:db:42:82:e0:80:42:65:a5:e8:51:
                    04:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E9:AA:7D:4A:7D:4D:D0:7D:5F:E7:ED:3F:4C:8E:DF:91:09:02:E6
            X509v3 Authority Key Identifier:
                keyid:42:BF:35:C6:FF:36:C9:77:58:EA:11:F3:47:42:DB:BF:27:A6:1D:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4WiFyuFRNKbbrkMa4EfAQZSNE3WYBKd8fwqKfFAWmCXy/0/42BF35C6FF36C97758EA11F34742DBBF27A61DE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42BF35C6FF36C97758EA11F34742DBBF27A61DE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4WiFyuFRNKbbrkMa4EfAQZSNE3WYBKd8fwqKfFAWmCXy/0/323830343a343463303a3a2f33322d3438203d3e20323637363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:44c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:bd:2c:bd:34:f4:fc:6e:ae:02:71:91:5c:b8:e1:76:a4:2a:
         7f:ab:ce:97:d1:1a:d4:2a:52:a9:a5:17:c7:6f:0e:a5:37:f2:
         f8:23:71:6d:1a:0b:d5:b8:11:95:e2:2f:9e:84:22:ff:70:e2:
         a9:07:f8:9c:29:00:e3:bc:e8:9f:f7:bb:56:b1:2e:a8:dc:ee:
         05:1b:38:b0:6a:98:8d:c9:8b:2e:12:e3:6a:0f:b9:ec:4d:f9:
         63:ff:b9:e9:ed:e3:1d:c2:f8:89:70:36:41:7f:a9:6c:ee:35:
         1b:19:1e:ad:e2:b4:d6:8d:38:79:4c:ff:de:89:4e:f7:1e:2b:
         6c:ee:a6:80:19:c6:fa:dc:9d:d8:15:34:3a:9b:56:79:77:20:
         6c:40:8e:7d:fc:6e:0e:24:76:19:94:8a:12:22:68:66:e7:ef:
         9a:65:cf:a2:dc:bb:62:e1:bb:e1:bd:36:87:c0:d4:ab:79:3b:
         ba:06:1c:dc:98:f3:49:d8:20:af:66:f7:f3:95:fe:34:f4:e6:
         80:33:e8:2f:d1:07:5f:b8:bf:5f:cf:44:c3:4d:6e:8f:9d:f5:
         0e:19:93:15:e7:f9:64:b8:47:12:79:c8:f8:29:49:6c:1f:09:
         01:2f:3a:6f:7e:7c:bf:b7:37:c2:2b:dd:66:b0:bb:d1:c3:a3:
         a4:98:bf:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org