Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/1/323830343a386232303a3a2f33332d3333203d3e20323733373133.roa
File:                     323830343a386232303a3a2f33332d3333203d3e20323733373133.roa (raw, json)
Hash identifier:          +1krdd9wb0OfjB16PtCtDNIZK4iSXD1o7QURbFNkdoU=
Subject key identifier:   AB:25:F2:0E:BF:D3:33:B8:8B:E9:17:43:34:05:CA:6D:C3:BB:5D:63
Certificate issuer:       /CN=C40C4147DE8DF97FF7B3DB936A2C19BC5F952FDF
Certificate serial:       7E1FF4F49FE3E176F3225E5F338A93F707A5E4F3
Authority key identifier: C4:0C:41:47:DE:8D:F9:7F:F7:B3:DB:93:6A:2C:19:BC:5F:95:2F:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C40C4147DE8DF97FF7B3DB936A2C19BC5F952FDF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/1/323830343a386232303a3a2f33332d3333203d3e20323733373133.roa
Signing time:             Thu 04 Apr 2024 08:29:38 +0000
ROA not before:           Thu 04 Apr 2024 08:24:38 +0000
ROA not after:            Thu 03 Apr 2025 08:29:38 +0000
asID:                     273713
IP address blocks:        2804:8b20::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:1f:f4:f4:9f:e3:e1:76:f3:22:5e:5f:33:8a:93:f7:07:a5:e4:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C40C4147DE8DF97FF7B3DB936A2C19BC5F952FDF
        Validity
            Not Before: Apr  4 08:24:38 2024 GMT
            Not After : Apr  3 08:29:38 2025 GMT
        Subject: CN=AB25F20EBFD333B88BE917433405CA6DC3BB5D63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0a:13:6b:22:91:99:1d:f0:d8:47:a3:ce:56:
                    7b:0a:ad:d6:5d:f5:41:f7:47:24:58:15:f1:d7:5c:
                    a6:a9:50:46:a9:e4:52:0c:b0:cd:b7:53:44:66:55:
                    fc:f1:f8:b9:6b:3c:99:1c:9c:45:41:07:f4:5f:11:
                    8d:06:cf:6f:91:75:49:55:c7:b4:04:5b:80:bc:a1:
                    54:5c:17:49:dd:79:45:8e:ea:f2:87:09:01:ab:bc:
                    15:20:bf:3e:19:f6:d6:b1:c0:71:76:18:d3:2c:cc:
                    23:57:db:e4:e9:3b:c2:b8:69:a1:16:36:eb:31:bf:
                    16:9f:86:49:88:ee:72:6f:f4:05:78:ac:0b:21:12:
                    1f:3b:a0:3e:9e:8b:7e:9b:7e:67:fc:99:80:b3:62:
                    00:60:e7:17:18:93:01:54:db:09:25:22:f2:60:c4:
                    65:07:1c:fe:b2:a7:f6:e0:35:aa:85:ba:4e:5b:91:
                    5f:84:6f:9a:9a:3a:fc:63:76:4b:af:38:40:d3:a3:
                    c7:48:d6:79:a1:2c:f8:57:6c:a1:52:8f:df:b3:dd:
                    b6:f1:0f:a4:d4:1f:62:7b:8e:81:08:2b:d3:2c:62:
                    dc:86:66:d6:20:56:2d:34:1b:7b:68:e0:6c:68:b9:
                    74:d2:22:c2:b8:4e:f4:af:4b:af:ce:2b:ea:01:2e:
                    92:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:25:F2:0E:BF:D3:33:B8:8B:E9:17:43:34:05:CA:6D:C3:BB:5D:63
            X509v3 Authority Key Identifier:
                keyid:C4:0C:41:47:DE:8D:F9:7F:F7:B3:DB:93:6A:2C:19:BC:5F:95:2F:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/1/C40C4147DE8DF97FF7B3DB936A2C19BC5F952FDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C40C4147DE8DF97FF7B3DB936A2C19BC5F952FDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/1/323830343a386232303a3a2f33332d3333203d3e20323733373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b20::/33

    Signature Algorithm: sha256WithRSAEncryption
         63:00:2a:84:71:52:e1:0e:ff:7a:65:e4:d0:43:5c:42:e5:50:
         bc:99:90:e9:f2:60:7f:75:94:b4:bd:0e:13:9f:90:40:9d:2f:
         07:29:55:10:24:46:3d:93:2d:aa:b8:b5:78:27:aa:a6:9b:42:
         be:cf:ec:de:42:20:20:cc:ba:52:27:d0:3f:80:1e:b3:82:b2:
         7e:45:83:bd:88:68:ad:a8:2f:a2:27:08:dc:e9:07:0a:a7:e2:
         b1:27:4d:6e:b1:0b:de:47:13:6b:51:59:d3:d6:43:a6:f2:40:
         dd:6a:0f:6e:aa:56:f3:7c:91:ab:47:0b:f1:17:18:c9:58:af:
         36:0e:a9:59:97:6d:75:e1:60:b8:19:71:46:07:3e:ba:24:14:
         bb:04:4e:0c:41:e6:6d:69:c8:56:22:d2:f7:e0:0d:58:a1:2f:
         f3:09:9a:ed:db:f9:6c:61:ce:f5:eb:63:23:46:f8:26:f0:18:
         5d:1b:86:52:ba:34:2c:59:c8:f4:bb:fe:82:ed:15:50:9e:77:
         d7:c7:0f:00:99:3e:fa:e3:07:83:c7:d9:19:bd:6a:6b:28:26:
         21:aa:11:d3:d4:50:e7:f7:87:a5:1b:fa:cd:51:93:35:70:cb:
         09:9a:cd:5c:1b:80:bd:6f:e8:3b:5f:bb:05:97:e6:58:d2:64:
         cc:ae:07:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org