Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4XQQYnh6XRWxjGSrTgHTeArXmZe9YLudY4M6DG6gdSUN/0/323830343a353837303a3a2f33322d3438203d3e20323638313239.roa
File:                     323830343a353837303a3a2f33322d3438203d3e20323638313239.roa (raw, json)
Hash identifier:          VPTv4adovnZqKcrXwxPS5IxCab01x8jr9sIDwuALids=
Subject key identifier:   CD:67:D0:B3:AF:7C:B2:55:18:83:58:F2:E9:75:91:21:4A:F0:A1:56
Certificate issuer:       /CN=D345EB7198D1D6F10204B388FAC99014B8298C08
Certificate serial:       3400835C3DC4C456405E4E26256AD2D52BF6E860
Authority key identifier: D3:45:EB:71:98:D1:D6:F1:02:04:B3:88:FA:C9:90:14:B8:29:8C:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D345EB7198D1D6F10204B388FAC99014B8298C08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4XQQYnh6XRWxjGSrTgHTeArXmZe9YLudY4M6DG6gdSUN/0/323830343a353837303a3a2f33322d3438203d3e20323638313239.roa
Signing time:             Wed 24 Jan 2024 19:32:01 +0000
ROA not before:           Wed 24 Jan 2024 19:27:01 +0000
ROA not after:            Wed 22 Jan 2025 19:32:01 +0000
asID:                     268129
IP address blocks:        2804:5870::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:00:83:5c:3d:c4:c4:56:40:5e:4e:26:25:6a:d2:d5:2b:f6:e8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D345EB7198D1D6F10204B388FAC99014B8298C08
        Validity
            Not Before: Jan 24 19:27:01 2024 GMT
            Not After : Jan 22 19:32:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0e:4b:8d:cf:46:f8:21:f0:37:8b:18:ec:f4:
                    b9:37:50:12:aa:b9:1d:7d:3c:3a:2a:10:4c:3f:74:
                    ff:84:e1:8f:8a:e2:a5:2b:f7:ab:b3:99:a2:5c:fc:
                    77:4c:1c:ae:f5:51:8e:9c:86:52:ba:dd:2e:54:d8:
                    da:a6:04:2b:71:d7:15:94:25:8b:2c:3e:0d:e5:e1:
                    f7:e6:b4:fe:73:40:7e:37:d0:4c:e6:96:31:98:be:
                    cb:7a:2e:14:60:6b:11:d5:13:38:c6:c9:1e:b2:93:
                    71:42:4c:ec:fa:54:2e:9a:3e:e6:31:ae:30:91:2c:
                    8f:f0:d2:12:9d:84:2b:84:c8:5a:0d:50:6f:55:39:
                    73:fe:8c:31:3d:9a:df:9b:6e:0a:85:88:37:b7:88:
                    42:96:df:ef:a4:2d:80:de:5d:24:ca:de:4e:dd:85:
                    02:3d:6b:44:24:94:d0:00:79:73:ed:a8:8b:c2:02:
                    84:66:f2:e4:2b:88:a0:a0:12:06:7e:bd:de:a6:f3:
                    a5:53:c2:b1:14:27:7a:31:92:2a:4c:4c:22:69:6b:
                    6d:25:33:c3:db:15:ab:57:5c:ba:72:bb:2b:7d:d3:
                    a7:e0:88:e3:9a:fe:20:c4:93:d0:7e:9a:df:b0:fb:
                    e3:02:5a:3f:c1:6b:9d:3e:55:27:4d:3b:d3:ee:e8:
                    b2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:67:D0:B3:AF:7C:B2:55:18:83:58:F2:E9:75:91:21:4A:F0:A1:56
            X509v3 Authority Key Identifier:
                keyid:D3:45:EB:71:98:D1:D6:F1:02:04:B3:88:FA:C9:90:14:B8:29:8C:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4XQQYnh6XRWxjGSrTgHTeArXmZe9YLudY4M6DG6gdSUN/0/D345EB7198D1D6F10204B388FAC99014B8298C08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D345EB7198D1D6F10204B388FAC99014B8298C08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XQQYnh6XRWxjGSrTgHTeArXmZe9YLudY4M6DG6gdSUN/0/323830343a353837303a3a2f33322d3438203d3e20323638313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5870::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:44:ea:72:ed:f8:e0:2e:14:a8:70:2b:f7:9e:34:14:44:b8:
         6f:24:e1:c9:6d:7b:88:96:8c:a5:5e:34:21:92:da:86:aa:77:
         b5:1c:27:2f:90:a5:df:5b:30:72:1e:d0:50:2b:c5:fc:83:d8:
         f0:e5:c2:b3:9b:b2:08:7d:5b:1e:e5:7c:53:35:5f:f4:8f:5b:
         ed:29:df:18:c7:0e:87:82:e4:75:1c:5e:8e:87:8c:9a:11:a3:
         ac:65:32:fc:2e:7a:23:0d:88:80:d8:ec:76:cb:3d:23:0a:2b:
         ff:cf:d4:a6:dd:a5:70:20:38:de:25:38:44:c9:f2:87:14:94:
         79:d5:f5:5c:e1:7f:c3:24:8b:13:d4:32:89:31:a3:6b:7d:7b:
         33:5a:50:c7:ec:c4:e6:25:c3:44:50:ee:a1:6d:3e:39:c9:c2:
         09:70:9c:da:2d:8c:6b:a0:32:42:e1:e7:df:16:11:c7:b1:30:
         ee:bc:da:f8:0e:ac:63:fb:3a:4f:13:db:59:92:b1:0e:ed:7b:
         aa:c0:57:7a:ef:74:92:9e:8d:61:76:1c:2d:1c:ae:92:aa:b5:
         54:10:a1:33:a0:65:82:23:8f:88:0b:5c:0b:b2:f1:09:f9:b6:
         5c:df:b2:ad:a8:a0:69:4a:59:c2:6b:3f:b6:e1:29:c8:10:f0:
         29:de:ad:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org