Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4m5Hy18hwXEC3RQ82y5o31ZenHCRLz9ExhmEowQKCbUi/0/323830343a343839633a3a2f33322d3336203d3e20323637313333.roa
File:                     323830343a343839633a3a2f33322d3336203d3e20323637313333.roa (raw, json)
Hash identifier:          4xKpCCOVmaRofixlCFcb2MLDP2Bx/Dda5br2SCnJkPE=
Subject key identifier:   54:A5:1A:C0:EE:7A:60:BD:71:53:FC:83:01:9B:A4:F8:6E:35:AC:64
Certificate issuer:       /CN=22ED85F7ED49D29E9AD0C1882BC141F42491489D
Certificate serial:       660F51DCF4497791A65D24D999B6CF64D6E563CF
Authority key identifier: 22:ED:85:F7:ED:49:D2:9E:9A:D0:C1:88:2B:C1:41:F4:24:91:48:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22ED85F7ED49D29E9AD0C1882BC141F42491489D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4m5Hy18hwXEC3RQ82y5o31ZenHCRLz9ExhmEowQKCbUi/0/323830343a343839633a3a2f33322d3336203d3e20323637313333.roa
Signing time:             Fri 19 Jan 2024 15:34:00 +0000
ROA not before:           Fri 19 Jan 2024 15:29:00 +0000
ROA not after:            Fri 17 Jan 2025 15:34:00 +0000
asID:                     267133
IP address blocks:        2804:489c::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:0f:51:dc:f4:49:77:91:a6:5d:24:d9:99:b6:cf:64:d6:e5:63:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22ED85F7ED49D29E9AD0C1882BC141F42491489D
        Validity
            Not Before: Jan 19 15:29:00 2024 GMT
            Not After : Jan 17 15:34:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:56:3e:3b:8f:93:4e:f7:4e:39:39:1e:9e:26:
                    74:63:e6:9b:4f:d9:6f:4a:0d:ac:c5:6f:f4:3b:00:
                    64:61:5c:e7:30:f3:6f:5f:23:86:4b:bd:27:ee:cf:
                    a3:45:95:8e:74:5c:2e:da:9b:2f:35:e0:bf:15:54:
                    35:9c:67:76:11:80:be:8f:a9:f1:6d:16:9d:98:cf:
                    5c:6c:28:53:d7:08:7e:6c:c2:8a:d5:33:77:48:78:
                    4c:97:82:08:28:e6:9d:5d:b8:94:c1:fd:54:df:87:
                    3c:41:9c:47:c0:d2:59:9a:a1:bd:89:0c:fe:d6:97:
                    4e:1f:df:bd:d3:48:19:57:77:81:b3:19:e9:27:0f:
                    a4:67:44:ff:dd:b0:b0:6e:d8:35:ce:33:35:08:19:
                    e2:e6:cd:22:ef:f9:bd:64:61:c5:03:16:d7:6b:07:
                    86:e0:47:f8:c7:87:16:02:59:91:5e:88:4e:c0:98:
                    f4:12:e3:74:58:44:2c:fe:a5:78:09:90:68:b8:32:
                    58:ac:f3:9b:3a:54:8b:29:1f:33:48:ec:8e:94:ce:
                    f7:2a:f5:cb:86:a8:8a:6d:27:5b:e0:97:5a:da:7f:
                    5f:74:e6:02:b5:14:bb:6c:bc:83:00:f7:4c:4e:dd:
                    76:1e:72:92:64:c2:92:c4:4f:14:dd:9e:78:a3:74:
                    62:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A5:1A:C0:EE:7A:60:BD:71:53:FC:83:01:9B:A4:F8:6E:35:AC:64
            X509v3 Authority Key Identifier:
                keyid:22:ED:85:F7:ED:49:D2:9E:9A:D0:C1:88:2B:C1:41:F4:24:91:48:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4m5Hy18hwXEC3RQ82y5o31ZenHCRLz9ExhmEowQKCbUi/0/22ED85F7ED49D29E9AD0C1882BC141F42491489D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22ED85F7ED49D29E9AD0C1882BC141F42491489D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4m5Hy18hwXEC3RQ82y5o31ZenHCRLz9ExhmEowQKCbUi/0/323830343a343839633a3a2f33322d3336203d3e20323637313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:489c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:a2:0a:67:94:4a:13:01:ad:68:c0:b3:4b:a8:40:95:cd:ba:
         84:7e:01:9e:96:cc:94:5e:a1:43:f6:d8:75:0f:0e:e6:97:91:
         57:7b:8d:1d:33:3e:29:13:9b:37:ab:c2:04:2c:81:4d:d9:2f:
         1a:14:ed:a0:58:15:cb:6b:1b:ed:ac:cb:c2:87:00:a0:d8:dc:
         5c:5a:63:93:cf:96:10:76:b2:fa:14:b8:22:55:c9:55:d4:69:
         fc:32:c4:cc:fc:1f:e6:b9:18:a9:97:e4:03:c0:94:16:d9:c0:
         ef:92:e8:90:8a:0c:22:d3:ba:72:c8:7c:e9:6b:cf:00:9a:30:
         a5:9c:67:87:52:45:60:df:57:da:e9:e1:d4:17:8a:9a:ff:57:
         a7:66:d5:46:56:6e:69:70:35:ee:26:b3:50:02:d4:5c:08:79:
         d0:d4:9e:69:e9:b2:43:ff:09:95:b2:17:23:b7:2a:29:0f:86:
         bb:2c:46:c3:71:44:d5:8d:2b:17:32:d0:15:28:03:95:0f:95:
         56:3c:14:db:bd:b9:64:e6:b9:04:af:e4:33:47:d4:5b:6b:7e:
         c9:1c:f8:4f:7d:15:39:6c:83:e4:c5:f2:24:91:c2:dc:bd:be:
         c0:29:67:8c:b8:22:12:88:c4:84:36:78:36:a9:2a:12:e5:5c:
         40:38:e5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org