Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/323830343a353437343a343a3a2f34382d3438203d3e20323638363531.roa
File:                     323830343a353437343a343a3a2f34382d3438203d3e20323638363531.roa (raw, json)
Hash identifier:          Gz8MG1ITxqEcqcQjM4jXSUcqqLN2e+uvWfxJXW2Ijmk=
Subject key identifier:   6A:1B:D1:FB:11:BB:4B:62:DC:39:6A:29:55:90:26:69:62:7E:5C:C9
Certificate issuer:       /CN=D63F65BC868A989F5016FC5F923857D26EE2A068
Certificate serial:       1E2AFD6BA838C48DB92600D4259F840DB6BA8773
Authority key identifier: D6:3F:65:BC:86:8A:98:9F:50:16:FC:5F:92:38:57:D2:6E:E2:A0:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D63F65BC868A989F5016FC5F923857D26EE2A068.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/323830343a353437343a343a3a2f34382d3438203d3e20323638363531.roa
Signing time:             Sun 07 Apr 2024 17:00:00 +0000
ROA not before:           Sun 07 Apr 2024 16:55:00 +0000
ROA not after:            Sun 06 Apr 2025 17:00:00 +0000
asID:                     268651
IP address blocks:        2804:5474:4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:2a:fd:6b:a8:38:c4:8d:b9:26:00:d4:25:9f:84:0d:b6:ba:87:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D63F65BC868A989F5016FC5F923857D26EE2A068
        Validity
            Not Before: Apr  7 16:55:00 2024 GMT
            Not After : Apr  6 17:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d6:33:01:8c:82:3e:f2:2a:ff:ad:b0:0b:25:
                    7f:d5:10:ef:96:e5:ee:28:23:2f:06:a9:c9:af:41:
                    51:f6:19:9a:3f:02:50:f1:cf:2d:6d:1b:2e:a0:56:
                    85:ef:f8:a6:3b:a9:fc:4e:c9:c5:e2:3a:62:73:29:
                    76:4c:3e:8f:0b:27:99:cb:ad:b5:41:a4:15:2e:b0:
                    67:82:77:a1:f6:80:b2:f8:d6:01:d0:a0:61:32:d5:
                    38:60:69:b3:2c:bf:b8:ee:cf:ca:e5:9f:f6:86:86:
                    b0:39:e4:56:a5:a1:0b:87:3b:bb:fd:0f:eb:67:52:
                    3c:37:0d:3f:d2:8e:2e:99:f7:4d:81:3e:64:b6:61:
                    94:37:a6:93:70:89:10:29:47:6e:32:fc:76:3b:c9:
                    15:e1:20:c0:3f:48:f0:b2:08:97:90:6c:5f:dc:38:
                    d6:d5:e5:22:fd:00:07:d7:ff:8a:84:3c:59:68:31:
                    b4:86:9f:61:05:5a:4e:40:e4:1b:e2:f2:9f:11:b7:
                    01:56:c0:4e:3c:49:7f:0e:2b:a0:1a:27:82:9b:90:
                    48:ba:4f:8f:8e:61:e8:d2:fa:46:6d:ae:5d:38:ca:
                    f9:30:c4:57:14:83:37:9e:48:0e:3b:dc:fa:79:0a:
                    15:39:4f:63:61:e9:d1:6d:31:21:a0:cc:8c:94:b5:
                    95:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1B:D1:FB:11:BB:4B:62:DC:39:6A:29:55:90:26:69:62:7E:5C:C9
            X509v3 Authority Key Identifier:
                keyid:D6:3F:65:BC:86:8A:98:9F:50:16:FC:5F:92:38:57:D2:6E:E2:A0:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/D63F65BC868A989F5016FC5F923857D26EE2A068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D63F65BC868A989F5016FC5F923857D26EE2A068.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/323830343a353437343a343a3a2f34382d3438203d3e20323638363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5474:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:92:79:b7:48:31:b6:ed:b9:43:a6:bb:76:f4:01:c3:97:90:
         c7:58:e8:1b:3e:6e:0d:d5:74:80:85:79:d6:e3:19:51:62:d9:
         d6:67:59:5d:f9:36:41:b9:85:d3:ca:ed:4e:98:58:cf:65:15:
         5d:04:26:13:e9:16:d7:9f:1b:24:06:79:94:d8:9c:85:37:e9:
         f5:7f:7f:fd:1a:db:20:db:c5:62:1b:ec:ce:92:3c:a1:1c:ea:
         7a:38:1f:d3:9e:98:4f:a4:01:1b:e2:c3:f4:82:a7:82:02:2e:
         36:b1:85:7a:c9:58:74:8f:15:63:2e:cd:2a:19:cc:56:de:c5:
         a6:b3:2f:c0:8c:16:dc:4a:e9:86:6d:13:4b:ba:ad:05:b8:7a:
         8f:33:1f:9c:e8:e9:e8:45:11:9a:cd:78:36:f2:41:7d:6f:d8:
         04:eb:45:38:43:44:cf:b4:f6:76:96:04:69:bc:3e:f2:65:5c:
         97:e9:b2:1f:be:6f:fe:2b:d4:43:65:54:2c:ef:3c:87:19:2d:
         85:45:0f:08:b6:3b:3d:5f:cd:b2:fc:19:ed:ed:06:20:d0:3b:
         0d:b1:ca:b3:b0:07:5d:5d:ba:58:a8:33:7a:2c:bc:53:bc:62:
         72:93:25:59:50:f3:a3:83:b4:e0:74:4b:66:b9:3b:3c:57:17:
         1a:da:dd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org