Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/1/323830343a386232303a3a2f33322d3332203d3e20323733373133.roa
File:                     323830343a386232303a3a2f33322d3332203d3e20323733373133.roa (raw, json)
Hash identifier:          uAExVfOaK+NpnqMHIQaSMFT+pnvaKes9mJpuymiMd9M=
Subject key identifier:   E6:2F:FF:00:B7:A3:57:50:A2:70:C4:3D:94:F9:89:CB:34:0C:C1:E6
Certificate issuer:       /CN=C40C4147DE8DF97FF7B3DB936A2C19BC5F952FDF
Certificate serial:       065AFAFAD98F46A789DB56BDF4F0ACD1FDA4B843
Authority key identifier: C4:0C:41:47:DE:8D:F9:7F:F7:B3:DB:93:6A:2C:19:BC:5F:95:2F:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C40C4147DE8DF97FF7B3DB936A2C19BC5F952FDF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/1/323830343a386232303a3a2f33322d3332203d3e20323733373133.roa
Signing time:             Thu 04 Apr 2024 08:29:37 +0000
ROA not before:           Thu 04 Apr 2024 08:24:37 +0000
ROA not after:            Thu 03 Apr 2025 08:29:37 +0000
asID:                     273713
IP address blocks:        2804:8b20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:5a:fa:fa:d9:8f:46:a7:89:db:56:bd:f4:f0:ac:d1:fd:a4:b8:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C40C4147DE8DF97FF7B3DB936A2C19BC5F952FDF
        Validity
            Not Before: Apr  4 08:24:37 2024 GMT
            Not After : Apr  3 08:29:37 2025 GMT
        Subject: CN=E62FFF00B7A35750A270C43D94F989CB340CC1E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:41:b0:bd:e2:3d:55:1d:0a:b4:0b:aa:0f:f0:
                    29:08:6c:65:67:0a:0c:91:ba:8e:e7:07:d1:3d:e1:
                    6c:64:e6:d2:38:f6:6e:41:50:e4:39:e4:6b:21:f6:
                    2a:0d:19:3d:85:03:f0:88:e6:f8:a9:bd:fc:ab:6b:
                    8f:69:cc:56:f3:a4:64:ec:93:b0:d1:2a:80:15:40:
                    d7:1c:89:e7:05:32:f0:f2:cf:f3:bb:2f:f3:9e:9a:
                    0e:2c:75:33:b2:0c:d7:e3:d4:77:56:fd:7a:58:a7:
                    88:01:64:fe:b9:27:31:81:3b:54:c6:46:f1:08:d4:
                    93:91:2a:80:99:8c:12:8e:d1:df:e8:b4:01:c1:cb:
                    b8:b3:43:2b:83:00:ca:d8:df:18:40:5c:a6:49:ca:
                    dc:ba:51:24:75:6d:26:8a:9c:45:9a:cb:98:0a:51:
                    cf:9a:08:52:25:9e:47:5b:c6:43:3f:1a:b8:c5:e1:
                    90:09:5d:ba:20:99:2a:8d:14:b8:bf:2e:ef:e6:14:
                    ab:9d:68:c0:cc:8c:58:99:9f:e2:8d:c2:dd:0a:d1:
                    6b:ed:3d:7e:fb:e2:d8:58:4f:6f:47:be:1c:0f:ce:
                    23:dc:43:c5:8b:b3:45:19:b3:ca:40:93:03:98:2d:
                    e3:14:e0:51:1d:48:ea:5a:c0:05:4f:da:28:e8:74:
                    c8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2F:FF:00:B7:A3:57:50:A2:70:C4:3D:94:F9:89:CB:34:0C:C1:E6
            X509v3 Authority Key Identifier:
                keyid:C4:0C:41:47:DE:8D:F9:7F:F7:B3:DB:93:6A:2C:19:BC:5F:95:2F:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/1/C40C4147DE8DF97FF7B3DB936A2C19BC5F952FDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C40C4147DE8DF97FF7B3DB936A2C19BC5F952FDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/1/323830343a386232303a3a2f33322d3332203d3e20323733373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         d8:21:69:dd:23:99:c6:27:d3:ea:3a:7b:21:62:5d:ca:95:60:
         09:10:17:b1:7d:0d:13:d2:b4:cd:f4:35:8f:33:23:8f:86:94:
         ac:d3:91:8b:f7:be:22:31:14:c2:dd:a8:0d:94:41:f8:f5:54:
         9a:8b:99:50:b1:61:ed:ea:da:1a:0c:9c:40:d5:47:f5:b0:e7:
         3b:5d:ea:18:24:e7:4d:2e:64:70:d0:bf:86:e2:18:5c:56:0b:
         13:31:10:9e:53:14:a6:70:10:e2:54:4b:bc:b5:a4:ff:02:e9:
         23:b0:6f:c4:55:83:c6:f3:2f:10:e3:3a:6d:27:3f:52:34:48:
         2b:8b:dc:49:fc:87:df:38:b0:de:93:3a:9d:e5:fd:aa:16:2c:
         d7:a9:b2:0f:6a:8c:83:95:26:eb:17:5d:9c:0d:60:a1:06:8e:
         32:86:5e:69:c6:e0:cd:7f:9f:fb:cb:88:a9:85:16:42:d8:99:
         fa:7a:ac:03:fc:f5:ef:e6:5a:73:52:0d:74:bd:9a:8c:92:ea:
         69:3f:94:03:62:4b:42:30:18:9d:de:f0:d7:e6:83:57:ab:61:
         1a:3f:55:b7:23:2d:e7:a8:f9:e9:3f:e6:8b:c2:7a:fb:08:d7:
         a4:c2:98:1a:a9:8a:46:5f:1b:4a:85:c6:12:0c:88:b2:2c:b1:
         f0:f7:e8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org