Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/323830343a343163343a3a2f33322d3332203d3e20323637343535.roa
File:                     323830343a343163343a3a2f33322d3332203d3e20323637343535.roa (raw, json)
Hash identifier:          p1HWSCZBrPv5GCBSClOMElknjbQ9E8fsYFiTcU03ZYs=
Subject key identifier:   96:0B:8A:34:99:93:C0:82:14:B9:41:52:71:FC:62:68:99:08:09:21
Certificate issuer:       /CN=C105FF99BCA19864676CA5FCFCA53A25516E10F5
Certificate serial:       6DF61A1AD0B8D45BFC75F18FE5AF44559A11F0B2
Authority key identifier: C1:05:FF:99:BC:A1:98:64:67:6C:A5:FC:FC:A5:3A:25:51:6E:10:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C105FF99BCA19864676CA5FCFCA53A25516E10F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/323830343a343163343a3a2f33322d3332203d3e20323637343535.roa
Signing time:             Thu 28 Mar 2024 23:18:44 +0000
ROA not before:           Thu 28 Mar 2024 23:13:44 +0000
ROA not after:            Thu 27 Mar 2025 23:18:44 +0000
asID:                     267455
IP address blocks:        2804:41c4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f6:1a:1a:d0:b8:d4:5b:fc:75:f1:8f:e5:af:44:55:9a:11:f0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C105FF99BCA19864676CA5FCFCA53A25516E10F5
        Validity
            Not Before: Mar 28 23:13:44 2024 GMT
            Not After : Mar 27 23:18:44 2025 GMT
        Subject: CN=960B8A349993C08214B9415271FC626899080921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:86:d5:66:97:f5:a3:09:bd:a3:22:e7:76:70:
                    9e:7b:99:db:19:62:a9:28:f5:49:53:11:4b:6e:63:
                    55:dc:7e:9f:f5:4b:cf:36:cb:57:9c:6d:68:0e:2a:
                    4d:e7:43:68:47:89:22:3b:e0:bc:fe:24:bd:1f:65:
                    49:08:ef:48:2f:35:ed:23:74:a2:a0:67:4c:56:d5:
                    7b:36:7c:e1:15:97:54:f0:a0:de:0a:3b:9a:30:ae:
                    fb:b8:4b:55:84:fa:98:cb:b0:3b:9e:8f:df:eb:6d:
                    25:7c:89:07:e5:69:e4:c4:7a:6c:d5:54:ff:d1:bd:
                    fd:e7:98:05:3b:b3:9b:d6:6f:71:fb:6d:55:4e:56:
                    e7:17:b8:0a:2b:02:60:ff:b3:60:f0:c3:38:34:31:
                    32:02:d1:09:42:a2:03:f5:e0:9f:e9:01:70:ec:dd:
                    80:58:39:cf:ce:90:d8:77:b1:56:a4:24:d6:ac:8a:
                    d0:cd:2f:79:10:86:80:5e:f6:9b:71:13:4a:5d:2d:
                    23:28:c7:40:e8:ac:b5:4d:ce:98:21:f4:b9:fd:ea:
                    23:da:b0:a7:52:d0:2a:6d:b5:9f:f9:84:73:5a:d7:
                    ea:3c:4b:7c:45:b1:a0:8b:03:72:7f:3e:29:c3:1e:
                    af:26:ba:37:ae:b5:0e:47:c4:00:83:df:9e:39:fe:
                    9f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0B:8A:34:99:93:C0:82:14:B9:41:52:71:FC:62:68:99:08:09:21
            X509v3 Authority Key Identifier:
                keyid:C1:05:FF:99:BC:A1:98:64:67:6C:A5:FC:FC:A5:3A:25:51:6E:10:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/C105FF99BCA19864676CA5FCFCA53A25516E10F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C105FF99BCA19864676CA5FCFCA53A25516E10F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/323830343a343163343a3a2f33322d3332203d3e20323637343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:5a:6f:0d:1d:e3:2f:b7:e7:e2:37:9b:fe:41:38:5e:fd:48:
         85:5f:42:77:e3:1e:0a:03:2d:db:cd:76:f9:d1:d3:cf:19:8c:
         7f:96:8f:4e:de:2f:10:fa:c9:98:ff:26:e6:51:6c:48:2d:7d:
         5e:49:78:c1:e5:f8:ca:7c:69:66:26:42:e1:88:f0:99:29:cb:
         c2:48:2e:9a:03:a2:c9:e9:b9:42:67:16:06:98:e3:08:bb:43:
         28:31:18:a3:8e:bd:e9:ae:97:38:6e:e1:5a:25:1f:26:4b:2e:
         c3:27:6e:77:12:a7:05:c2:70:21:4f:22:e1:88:9d:8f:13:5a:
         62:bc:4b:55:ba:f4:f8:96:7e:c8:0d:8f:9c:41:d2:7b:00:33:
         0d:77:09:5d:a9:69:fe:a0:30:24:73:04:b5:b7:7e:9d:a6:18:
         f5:df:2c:c6:4d:86:6e:4f:88:2f:9e:04:37:b0:9d:bb:80:b7:
         86:1a:c7:25:62:f6:7f:4d:26:db:01:36:36:7f:5a:67:77:50:
         81:72:56:ca:cb:e0:51:7e:f6:14:3b:8c:2f:17:f4:2c:5f:02:
         63:2e:10:66:d0:c3:4d:c6:20:1e:14:fa:08:10:c6:71:15:7b:
         21:48:31:98:f3:ac:95:35:7f:df:bc:11:99:7d:f7:31:ad:80:
         f8:40:18:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org