Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/323830343a373333383a3a2f33322d3334203d3e20323632383432.roa
File:                     323830343a373333383a3a2f33322d3334203d3e20323632383432.roa (raw, json)
Hash identifier:          PB21NUgc9iXMqb8zFeaUCXsWXtLse4TQSpxmx2HHS2g=
Subject key identifier:   7A:F9:75:88:30:CA:69:77:ED:BE:00:58:1B:7F:BD:29:A5:11:17:21
Certificate issuer:       /CN=15A3962525A580E279BE9D590AD3C9AFBE0D46F9
Certificate serial:       45219858B3D990C98595CA171E97BC1EF0A76439
Authority key identifier: 15:A3:96:25:25:A5:80:E2:79:BE:9D:59:0A:D3:C9:AF:BE:0D:46:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15A3962525A580E279BE9D590AD3C9AFBE0D46F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/323830343a373333383a3a2f33322d3334203d3e20323632383432.roa
Signing time:             Wed 26 Jan 2022 19:34:15 +0000
ROA not before:           Wed 26 Jan 2022 19:29:15 +0000
ROA not after:            Wed 25 Jan 2023 19:34:15 +0000
asID:                     262842
IP address blocks:        2804:7338::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:21:98:58:b3:d9:90:c9:85:95:ca:17:1e:97:bc:1e:f0:a7:64:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15A3962525A580E279BE9D590AD3C9AFBE0D46F9
        Validity
            Not Before: Jan 26 19:29:15 2022 GMT
            Not After : Jan 25 19:34:15 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:98:66:c1:ad:91:07:9f:4c:e2:61:85:27:9b:
                    cb:df:bc:1c:7f:a7:11:4c:49:9e:f4:ac:7a:f9:9c:
                    56:4f:94:d7:5d:76:c2:11:28:03:b6:3c:3e:10:fc:
                    6e:15:9f:4c:45:eb:8d:8d:b6:a5:2c:58:93:33:a9:
                    a2:3d:09:7d:b4:1c:61:09:36:20:2e:ae:d3:90:47:
                    4e:70:5c:68:bb:80:e7:26:77:34:7d:f0:d8:3d:63:
                    e6:1a:5a:ba:dc:6c:f0:78:7e:a6:50:90:bc:89:6b:
                    41:d8:ce:09:4f:1c:b9:8e:82:e2:a4:c8:7b:78:e6:
                    ab:97:46:60:6b:d0:f9:5d:59:ca:48:5f:65:14:e4:
                    6e:5b:3e:62:92:98:5e:79:0e:33:ea:06:57:34:82:
                    f1:40:09:58:17:2b:ba:49:79:cc:61:f8:41:94:3d:
                    89:1a:21:6d:2b:52:65:80:46:05:fb:bb:8a:ab:ee:
                    2f:d2:dc:93:80:8f:29:b5:46:ab:97:f2:d9:72:69:
                    62:de:fe:0c:d2:5b:90:04:5d:48:36:6c:bd:08:be:
                    5c:f5:1a:ee:79:76:7f:7a:39:83:e9:72:e7:ce:bb:
                    2a:ca:44:14:88:d2:bb:ed:f3:8a:ad:88:a3:fb:97:
                    e2:d8:59:c5:89:77:d1:ac:58:1b:ff:7a:55:6c:aa:
                    8b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F9:75:88:30:CA:69:77:ED:BE:00:58:1B:7F:BD:29:A5:11:17:21
            X509v3 Authority Key Identifier:
                keyid:15:A3:96:25:25:A5:80:E2:79:BE:9D:59:0A:D3:C9:AF:BE:0D:46:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/15A3962525A580E279BE9D590AD3C9AFBE0D46F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15A3962525A580E279BE9D590AD3C9AFBE0D46F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/323830343a373333383a3a2f33322d3334203d3e20323632383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7338::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:5e:9a:f4:ec:ca:32:f2:65:8e:0e:df:27:3c:24:0e:34:23:
         0b:27:2d:04:8e:4a:25:aa:55:64:6b:05:44:19:3b:9b:71:af:
         78:04:39:e8:da:4c:06:39:29:42:b2:8c:67:6b:43:a3:43:43:
         c5:b2:d2:d4:f2:ea:a0:99:e8:10:15:9d:de:d2:2d:cd:07:d0:
         c7:5f:4a:d3:a1:fc:ec:e2:1a:ef:bd:9f:5e:f7:3c:6b:95:22:
         18:58:e0:5c:26:f3:6a:f4:e8:ad:bc:06:2c:25:15:d5:32:99:
         2f:94:d3:ba:a8:ce:3f:65:d8:7f:61:b0:49:be:2b:43:0d:ee:
         da:f5:6d:35:18:c2:4f:5e:f1:12:4f:14:d9:72:c8:07:73:69:
         af:4c:e2:4f:10:30:47:d5:d2:97:a3:79:e2:97:65:71:59:bc:
         50:2f:94:45:98:fd:cf:ff:c4:05:9d:bb:41:fa:12:0b:66:7e:
         2f:23:34:23:07:ce:e8:1a:05:15:c6:65:24:06:01:f5:bf:7d:
         80:51:43:ba:52:d5:b1:05:c0:99:88:30:1c:90:87:2e:1c:26:
         4a:9d:b5:01:1b:24:c6:cc:88:80:93:55:5e:61:99:57:64:a0:
         52:d4:50:ae:16:2e:cb:15:b6:79:26:aa:cf:37:1a:66:82:df:
         cc:07:f4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org