Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/1/323830343a326536303a3a2f33322d3332203d3e20323635333432.roa
File:                     323830343a326536303a3a2f33322d3332203d3e20323635333432.roa (raw, json)
Hash identifier:          V2ap7hxO2HD5FgN5XSTG9zQ63nLtSfR+i7Hvh7zUibk=
Subject key identifier:   C0:87:F4:9B:44:1D:77:82:DC:1A:D2:86:5C:87:5E:D8:20:A2:2A:AE
Certificate issuer:       /CN=D9DA58E367C167988628580236AB41A8EC547986
Certificate serial:       0700CA115A75E1226DC7B4E0129DF7DED813466E
Authority key identifier: D9:DA:58:E3:67:C1:67:98:86:28:58:02:36:AB:41:A8:EC:54:79:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9DA58E367C167988628580236AB41A8EC547986.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/1/323830343a326536303a3a2f33322d3332203d3e20323635333432.roa
Signing time:             Wed 06 Sep 2023 15:09:26 +0000
ROA not before:           Wed 06 Sep 2023 15:04:26 +0000
ROA not after:            Wed 04 Sep 2024 15:09:26 +0000
asID:                     265342
IP address blocks:        2804:2e60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:00:ca:11:5a:75:e1:22:6d:c7:b4:e0:12:9d:f7:de:d8:13:46:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9DA58E367C167988628580236AB41A8EC547986
        Validity
            Not Before: Sep  6 15:04:26 2023 GMT
            Not After : Sep  4 15:09:26 2024 GMT
        Subject: CN=C087F49B441D7782DC1AD2865C875ED820A22AAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:c5:7c:06:82:ff:02:fd:69:55:6e:61:9e:67:
                    08:e4:f6:0a:b2:95:ce:7d:11:49:10:fc:bb:0c:cf:
                    20:e1:0b:6a:d8:8d:86:d7:7c:ed:9d:f0:09:b0:11:
                    0a:99:60:af:e5:84:93:9a:15:d0:f7:ad:5c:d7:c5:
                    83:76:d3:85:9a:dd:75:f4:c8:23:7b:33:f4:88:eb:
                    47:4e:3d:45:41:23:14:a0:fd:24:27:fe:eb:cb:58:
                    ff:21:40:57:26:36:c4:24:ee:42:d4:70:2b:4a:67:
                    f9:b5:f5:c9:ba:17:18:69:48:b5:4d:e0:1f:af:ec:
                    9e:3f:03:f8:91:5a:ee:f8:dd:7f:96:8f:2b:d0:32:
                    27:77:b9:95:dc:7d:57:61:6e:86:aa:e0:73:e8:66:
                    d0:49:a9:b7:fe:32:56:4f:57:ef:78:d6:54:47:e2:
                    86:2a:58:0e:81:b6:af:37:3d:e9:7f:cf:af:60:3d:
                    f6:4e:5c:74:68:ca:02:53:e5:77:99:72:17:8f:c5:
                    32:38:a3:1f:df:92:54:9b:7f:a6:11:90:7e:f4:04:
                    49:64:a4:60:95:fb:c3:58:3f:43:ca:bd:b8:fd:84:
                    45:72:65:e3:d8:e0:15:54:5f:52:31:c3:9f:33:f6:
                    98:6a:b5:d9:5a:53:22:d1:26:47:5f:59:f3:9f:5c:
                    41:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:87:F4:9B:44:1D:77:82:DC:1A:D2:86:5C:87:5E:D8:20:A2:2A:AE
            X509v3 Authority Key Identifier:
                keyid:D9:DA:58:E3:67:C1:67:98:86:28:58:02:36:AB:41:A8:EC:54:79:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/1/D9DA58E367C167988628580236AB41A8EC547986.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9DA58E367C167988628580236AB41A8EC547986.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/1/323830343a326536303a3a2f33322d3332203d3e20323635333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:94:8b:05:44:fe:9b:52:ff:14:c9:ad:47:36:15:11:ca:0d:
         d3:35:ea:f7:4e:9f:eb:ab:68:de:47:92:91:88:d6:f4:1a:7d:
         05:b9:1d:b1:6f:6e:85:f0:ae:e3:a6:a5:1d:5a:51:22:d2:6c:
         a3:9c:56:e2:43:cb:10:bb:de:77:35:5d:5a:cc:8b:f5:ed:ed:
         f1:c5:ea:34:c1:b9:af:02:83:24:60:d0:cc:93:51:96:e9:c8:
         d8:b8:30:5b:18:9a:07:06:36:c0:88:5f:4c:98:75:b8:69:bf:
         92:41:d5:7f:75:13:fa:6b:63:80:fd:c4:8e:2d:d9:77:30:63:
         54:d8:f7:14:28:3a:93:21:a0:ba:ff:43:c8:f9:a6:d3:87:ea:
         ea:15:15:2a:55:50:43:68:93:86:60:a4:d5:b0:19:c7:30:ac:
         3a:34:8e:16:8b:47:a0:9b:8f:df:e4:14:41:3c:df:d4:33:46:
         8b:8f:c3:a7:26:25:b4:23:fb:02:6d:dd:07:8a:10:c4:cb:8b:
         1f:f0:97:48:40:e8:d5:e5:54:d9:1a:a7:7b:a9:47:fd:8c:63:
         ca:84:09:90:81:21:35:88:f0:34:13:b5:2a:cc:1b:f6:cf:15:
         b0:7c:c9:b8:b0:6f:a6:de:ac:3b:36:e2:b7:e8:36:ab:8b:08:
         56:b4:76:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org