Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/323830343a323139383a3a2f33322d3438203d3e203532383037.roa
File:                     323830343a323139383a3a2f33322d3438203d3e203532383037.roa (raw, json)
Hash identifier:          oZQIZ/OXEGUVYKkbWvvIYE02MDpAUmujZigQmNkpw3Y=
Subject key identifier:   10:3E:E3:B6:64:59:34:AC:0C:93:61:53:28:0A:29:A0:26:BE:76:91
Certificate issuer:       /CN=ACECCCA6A8F5684B004F5E53AE680A314B8D74BF
Certificate serial:       163E55373262E6B233DF3BEEF03C0D08664BFE54
Authority key identifier: AC:EC:CC:A6:A8:F5:68:4B:00:4F:5E:53:AE:68:0A:31:4B:8D:74:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACECCCA6A8F5684B004F5E53AE680A314B8D74BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/323830343a323139383a3a2f33322d3438203d3e203532383037.roa
Signing time:             Wed 10 Apr 2024 13:29:13 +0000
ROA not before:           Wed 10 Apr 2024 13:24:13 +0000
ROA not after:            Wed 09 Apr 2025 13:29:13 +0000
asID:                     52807
IP address blocks:        2804:2198::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:3e:55:37:32:62:e6:b2:33:df:3b:ee:f0:3c:0d:08:66:4b:fe:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACECCCA6A8F5684B004F5E53AE680A314B8D74BF
        Validity
            Not Before: Apr 10 13:24:13 2024 GMT
            Not After : Apr  9 13:29:13 2025 GMT
        Subject: CN=103EE3B6645934AC0C936153280A29A026BE7691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:73:04:3f:33:6e:fb:08:20:ed:b2:cf:ed:5c:
                    3f:4c:28:f9:9f:65:48:f2:3d:4e:96:37:f6:cc:41:
                    d4:07:0e:40:a0:66:64:a2:58:e3:ae:2e:1c:88:2d:
                    cf:5f:d7:02:4b:b9:c5:64:91:e7:0d:ea:4b:ff:b6:
                    f4:6d:82:c9:0b:32:a9:7d:02:dd:0f:bd:8d:f7:dc:
                    3e:ab:20:c0:1f:76:c8:4a:d8:7b:1e:ad:0b:ed:d0:
                    cf:ac:77:70:74:a4:c7:46:34:c2:1c:00:d2:82:10:
                    b0:71:00:f7:0c:b0:fe:2b:21:4e:40:bf:c9:91:ae:
                    7b:47:2a:f9:0c:78:ca:bd:91:c8:9a:3d:80:98:b9:
                    0f:fc:9a:76:de:f6:2f:df:48:51:fa:6a:46:a5:ab:
                    a7:e0:29:a6:47:e0:42:e5:ce:3f:e0:28:21:21:01:
                    d4:8c:28:76:b3:cc:8e:c7:1c:19:6e:66:a8:9c:5c:
                    1c:f7:ca:4c:2f:eb:fa:23:2b:52:00:d0:28:30:90:
                    bc:85:50:c4:85:3d:1d:71:0a:f1:0f:8e:b9:75:de:
                    62:87:a0:bb:2c:71:e3:6d:17:c8:99:24:69:d6:06:
                    d5:ee:df:8c:be:fc:63:36:6d:1d:4b:c3:a8:66:d8:
                    57:0f:83:34:61:4e:60:a4:02:fe:ae:82:7e:db:67:
                    5c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3E:E3:B6:64:59:34:AC:0C:93:61:53:28:0A:29:A0:26:BE:76:91
            X509v3 Authority Key Identifier:
                keyid:AC:EC:CC:A6:A8:F5:68:4B:00:4F:5E:53:AE:68:0A:31:4B:8D:74:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/ACECCCA6A8F5684B004F5E53AE680A314B8D74BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACECCCA6A8F5684B004F5E53AE680A314B8D74BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/323830343a323139383a3a2f33322d3438203d3e203532383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2198::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:30:a7:4a:16:0e:10:34:d9:04:d5:87:09:e6:97:21:79:e3:
         ef:3f:c8:24:52:48:fe:42:75:56:e2:3d:1f:14:fc:1d:45:9f:
         48:ab:8e:46:a3:eb:06:3b:59:06:fe:48:8a:d2:e6:c8:b6:e0:
         ff:35:19:d9:a9:b6:ba:ff:87:c0:f0:22:c8:80:d8:95:b4:b2:
         84:5a:45:ad:47:14:7d:92:2c:ba:83:ef:86:3b:67:5b:47:a0:
         7b:c7:3c:93:1c:25:cb:5c:8e:45:b0:6d:5e:9a:e1:fc:e3:73:
         a1:51:bc:07:f0:0c:15:15:60:63:40:b2:4e:3c:8c:17:9b:e4:
         01:63:fa:bb:c8:89:55:2b:5a:72:ed:4c:e8:90:2c:42:24:2f:
         e8:5c:c0:a4:1c:72:e8:b9:c3:e1:78:05:6f:86:2a:f8:16:ef:
         8d:32:52:7b:ef:71:82:90:02:02:30:ef:bb:15:65:8c:85:ec:
         4e:c5:4f:d8:26:46:4b:a2:e3:b4:06:ca:36:7b:7f:61:7d:49:
         0a:8c:ca:81:84:27:62:b8:a6:a2:29:eb:10:ce:2b:ef:e5:bd:
         87:20:e4:47:6b:25:5a:72:62:e1:a3:0a:3e:d0:ff:ca:b1:55:
         50:c6:cc:90:29:5c:06:9e:67:d9:b5:b8:66:16:4e:f0:26:26:
         48:93:9d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:00 2024 by rpki-client on console-ams.rpki-client.org