Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/1/323830343a346363343a3a2f33322d3332203d3e20323637333930.roa
File:                     323830343a346363343a3a2f33322d3332203d3e20323637333930.roa (raw, json)
Hash identifier:          TySvxPhr4oaeYqR87buL0bSG6a/+8pFzf8kp1IBQGlA=
Subject key identifier:   6F:AF:DC:16:10:2F:9E:01:06:4D:FC:69:A2:4B:76:FB:E9:F8:3A:48
Certificate issuer:       /CN=EDC897E4325310FDE32E946F296A0E9166F42300
Certificate serial:       46BB44BD0FCF73E350B53288B9807F8A15FBA2C8
Authority key identifier: ED:C8:97:E4:32:53:10:FD:E3:2E:94:6F:29:6A:0E:91:66:F4:23:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDC897E4325310FDE32E946F296A0E9166F42300.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/1/323830343a346363343a3a2f33322d3332203d3e20323637333930.roa
Signing time:             Thu 04 Apr 2024 15:29:01 +0000
ROA not before:           Thu 04 Apr 2024 15:24:01 +0000
ROA not after:            Thu 03 Apr 2025 15:29:01 +0000
asID:                     267390
IP address blocks:        2804:4cc4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:bb:44:bd:0f:cf:73:e3:50:b5:32:88:b9:80:7f:8a:15:fb:a2:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDC897E4325310FDE32E946F296A0E9166F42300
        Validity
            Not Before: Apr  4 15:24:01 2024 GMT
            Not After : Apr  3 15:29:01 2025 GMT
        Subject: CN=6FAFDC16102F9E01064DFC69A24B76FBE9F83A48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:86:23:7e:ec:37:73:56:c5:1e:94:3b:29:31:
                    c4:57:16:ed:39:5f:04:e0:ea:1d:bf:bc:50:8c:07:
                    ec:ea:aa:eb:12:1d:cc:20:13:52:2a:75:f1:c4:ee:
                    cc:64:c3:53:52:14:aa:0b:ea:ae:0d:e1:ce:12:ef:
                    ca:20:5b:ca:7d:04:96:4c:be:e6:41:e2:76:8d:bf:
                    51:cd:7c:96:3a:08:51:be:d5:96:82:62:62:71:e8:
                    95:de:98:96:1a:62:49:25:a7:fd:41:8a:74:68:96:
                    89:0c:a7:01:f3:5d:e2:16:23:4f:9e:ca:c9:2b:a9:
                    c4:40:cf:23:c4:90:78:2a:49:0b:e6:a2:ec:88:d8:
                    b2:4c:49:9c:af:11:7a:92:1e:a5:ad:95:4f:7c:f1:
                    57:b2:71:3b:d9:46:9f:80:0d:72:fe:53:b9:b1:c4:
                    9f:d9:84:1c:c9:2d:ce:f4:9e:30:94:f4:f7:5c:b4:
                    5c:9b:ad:7a:d9:1e:6c:c3:16:b8:bf:61:6a:e6:26:
                    2c:d8:00:42:e5:22:c7:2d:fa:3c:89:1e:88:89:57:
                    fa:60:6b:5b:b7:4f:bc:5c:bc:42:3c:98:00:c1:4b:
                    2c:10:84:b6:93:b8:e2:10:b6:69:f3:58:57:46:b9:
                    a4:19:5d:75:08:83:2e:f1:ac:f5:9d:ea:f2:05:83:
                    4c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AF:DC:16:10:2F:9E:01:06:4D:FC:69:A2:4B:76:FB:E9:F8:3A:48
            X509v3 Authority Key Identifier:
                keyid:ED:C8:97:E4:32:53:10:FD:E3:2E:94:6F:29:6A:0E:91:66:F4:23:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/1/EDC897E4325310FDE32E946F296A0E9166F42300.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDC897E4325310FDE32E946F296A0E9166F42300.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/1/323830343a346363343a3a2f33322d3332203d3e20323637333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:03:ce:bb:b5:eb:a0:f6:92:00:42:8f:72:c9:68:a9:e5:ae:
         e0:99:8f:c5:91:ba:39:1e:8a:e1:3e:f6:52:31:56:44:a8:5d:
         70:68:8c:78:7b:76:73:13:eb:a4:9b:d6:82:84:1e:7c:41:89:
         d1:75:b8:59:92:51:1f:7f:98:ca:72:51:b8:77:b6:8e:f4:c6:
         99:5f:84:e6:9d:89:29:3d:3f:eb:1a:7d:ca:ab:a8:78:f7:bd:
         62:43:b3:8b:a3:c1:c0:9c:17:eb:76:21:35:79:4a:69:35:4c:
         aa:ad:9e:70:b5:9b:f4:b2:df:68:68:95:75:a4:43:9f:cb:93:
         41:e2:5d:92:72:f6:2a:65:e1:2b:8c:26:16:11:32:99:2c:9e:
         13:44:c7:2c:51:fb:96:72:c0:19:f8:ad:16:67:1a:c4:dc:ab:
         af:24:67:72:58:07:32:cf:eb:a0:44:97:e2:d4:b0:a7:79:db:
         c8:1b:86:36:85:b0:0d:9a:5c:5a:da:9d:18:dd:ab:31:95:cd:
         48:c9:eb:2a:84:0a:e9:da:71:fb:27:c8:3b:7d:07:9f:fa:52:
         ba:d4:d3:4e:9a:e2:54:1c:46:28:d4:29:40:c3:0d:7c:83:52:
         75:74:58:0d:d4:c5:e0:e2:52:0c:2f:33:d2:22:4a:be:66:23:
         5f:1b:70:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org