Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/323830343a346235633a3a2f33322d3430203d3e20323637333031.roa
File:                     323830343a346235633a3a2f33322d3430203d3e20323637333031.roa (raw, json)
Hash identifier:          mFb5vChCCauGYYGR3HrTuCrQHOuamy7RIH9gyRC13m8=
Subject key identifier:   25:1A:FA:25:A3:C2:E5:C9:AE:75:AB:D6:80:AF:6F:86:7C:74:54:DB
Certificate issuer:       /CN=194101A33D960E2E468EFE8D2E2E701E8A073261
Certificate serial:       3F6F8A74BEE6BCFC4659197A24144EB684A633A0
Authority key identifier: 19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/323830343a346235633a3a2f33322d3430203d3e20323637333031.roa
Signing time:             Wed 17 May 2023 14:10:53 +0000
ROA not before:           Wed 17 May 2023 14:05:53 +0000
ROA not after:            Wed 15 May 2024 14:10:53 +0000
asID:                     267301
IP address blocks:        2804:4b5c::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:6f:8a:74:be:e6:bc:fc:46:59:19:7a:24:14:4e:b6:84:a6:33:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194101A33D960E2E468EFE8D2E2E701E8A073261
        Validity
            Not Before: May 17 14:05:53 2023 GMT
            Not After : May 15 14:10:53 2024 GMT
        Subject: CN=251AFA25A3C2E5C9AE75ABD680AF6F867C7454DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5f:a7:6b:5b:8c:d5:85:dc:03:50:e8:69:75:
                    3d:d5:d0:58:59:e2:b9:74:96:72:06:23:d1:74:07:
                    50:f5:4a:b6:de:0a:a9:84:0e:e5:80:19:30:6a:8b:
                    07:25:92:e9:3f:22:a5:5f:42:7b:1c:8a:1d:40:25:
                    d1:f1:d6:28:45:8a:df:4f:e6:4a:f3:1b:8f:bf:9b:
                    e2:b7:dc:2c:77:85:ff:93:af:63:5b:81:63:46:b9:
                    7e:8e:b9:16:75:03:32:a7:05:aa:84:bd:f6:7e:84:
                    6c:7d:b0:1f:c5:79:75:98:48:f9:e1:28:cd:67:d1:
                    c6:d9:e3:39:7c:fb:85:dd:bd:9d:f1:bd:46:99:d6:
                    b3:e8:c8:b7:dd:d8:80:9b:02:c3:41:c1:2a:bb:a6:
                    3c:08:f7:44:52:d0:c8:79:2f:34:82:5d:d9:be:5f:
                    81:79:e5:ed:a5:13:24:a5:a0:e3:49:15:04:39:89:
                    f8:30:52:8d:30:a1:7a:8f:6e:32:f1:c8:d3:e0:74:
                    e6:8a:49:16:2d:b1:b8:97:eb:5c:25:90:ff:66:90:
                    68:d9:cd:4c:28:dd:4d:f6:43:d0:c0:39:9e:57:58:
                    bd:9a:97:a4:99:d5:46:c9:a0:d9:e2:f5:99:b4:3f:
                    35:2e:2e:ea:2c:30:2d:48:50:3e:b5:62:5e:d2:b5:
                    5d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1A:FA:25:A3:C2:E5:C9:AE:75:AB:D6:80:AF:6F:86:7C:74:54:DB
            X509v3 Authority Key Identifier:
                keyid:19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/194101A33D960E2E468EFE8D2E2E701E8A073261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/323830343a346235633a3a2f33322d3430203d3e20323637333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:34:8f:3b:67:7f:3b:90:b3:e8:20:4c:ce:91:11:02:99:ce:
         ce:d6:a9:51:65:57:db:77:c1:e1:45:7a:a5:67:32:a9:1d:65:
         af:30:5f:ec:3c:66:64:f8:fe:7d:40:67:01:3d:86:8d:7d:7b:
         fb:03:4c:2f:21:df:ad:7c:54:57:8b:4b:46:c1:02:2e:73:dd:
         a5:9c:d1:7b:8b:ac:eb:e4:b0:33:49:e9:d9:9d:a0:d1:cd:a0:
         0c:ad:fb:a9:3b:bb:d4:ae:28:7d:6a:1d:b9:79:7e:9d:13:bd:
         dc:ad:77:b3:66:0c:d6:a0:17:bf:8b:5a:e7:8e:9d:ea:9d:e6:
         22:fd:ec:af:b9:20:d7:7f:ab:27:26:58:5a:df:38:d7:2f:0f:
         f9:3e:01:cd:07:53:19:50:75:f1:a4:70:2a:7b:af:06:6a:84:
         f6:92:0a:48:8d:73:82:33:51:9d:82:00:1d:51:9a:de:f6:fe:
         dc:ad:a3:1f:79:59:6a:b3:52:4f:50:f0:2e:56:46:10:1a:95:
         05:0b:0a:68:cd:b8:f6:f0:2a:4a:d9:a1:e8:19:97:c8:ee:09:
         89:04:44:9f:e5:72:a5:f5:94:28:64:89:c7:7a:f7:53:6b:1d:
         cd:b0:b9:44:6d:17:58:2d:e9:58:e6:86:15:72:de:6b:31:68:
         6b:73:5b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org