Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/323830343a353437343a613a3a2f34382d3438203d3e20323638363531.roa
File:                     323830343a353437343a613a3a2f34382d3438203d3e20323638363531.roa (raw, json)
Hash identifier:          pIvpJN+3VY4l6d5TiG0iCNYSn7LmA85w3/9XOtyVdg8=
Subject key identifier:   97:6B:F4:14:A5:D7:C7:12:61:D9:22:3F:0C:D7:81:2D:7C:AF:DB:08
Certificate issuer:       /CN=D63F65BC868A989F5016FC5F923857D26EE2A068
Certificate serial:       47F2470CC49858668663967FE0350047923CFDFB
Authority key identifier: D6:3F:65:BC:86:8A:98:9F:50:16:FC:5F:92:38:57:D2:6E:E2:A0:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D63F65BC868A989F5016FC5F923857D26EE2A068.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/323830343a353437343a613a3a2f34382d3438203d3e20323638363531.roa
Signing time:             Sun 07 Apr 2024 17:00:00 +0000
ROA not before:           Sun 07 Apr 2024 16:55:00 +0000
ROA not after:            Sun 06 Apr 2025 17:00:00 +0000
asID:                     268651
IP address blocks:        2804:5474:a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f2:47:0c:c4:98:58:66:86:63:96:7f:e0:35:00:47:92:3c:fd:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D63F65BC868A989F5016FC5F923857D26EE2A068
        Validity
            Not Before: Apr  7 16:55:00 2024 GMT
            Not After : Apr  6 17:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f8:9e:28:5e:8d:72:3e:56:97:6f:96:81:ad:
                    24:87:90:a8:16:5c:0f:d2:13:41:1b:53:b7:a9:cc:
                    45:81:30:3a:a7:fc:bd:16:e8:54:0b:27:f7:73:80:
                    ce:f9:4b:86:18:d8:4c:32:50:41:03:ea:49:13:91:
                    57:ba:e8:e3:52:b8:8c:6b:4b:a2:54:dc:e1:a1:59:
                    cb:a0:24:a0:81:eb:24:81:3d:e5:43:10:b0:74:a7:
                    50:01:2e:7c:30:0f:6d:d5:42:48:81:b3:54:49:0b:
                    5a:c6:e5:24:db:72:3f:a5:9d:cb:d7:34:5e:0b:b7:
                    67:3c:2d:5f:01:e3:7a:03:ea:30:42:93:6e:e9:95:
                    37:be:87:20:a2:cc:20:97:a9:07:21:34:fd:dd:26:
                    4b:eb:92:2f:16:42:4a:97:82:a8:eb:2f:a6:5c:f0:
                    42:6c:5b:f5:0c:bf:d9:fe:f1:95:19:ad:5a:54:d3:
                    61:e2:d9:ec:75:3c:a6:b5:bf:d7:25:76:e3:6a:77:
                    85:07:44:93:93:41:27:05:c0:46:1c:02:59:ea:d0:
                    ba:58:1d:ed:17:3e:2f:06:8c:c9:e0:06:76:4d:42:
                    7a:e6:41:5e:cd:bc:38:08:c4:71:37:84:ee:e4:cc:
                    08:45:73:ac:d7:9f:e9:e4:df:40:1f:82:2b:bb:a3:
                    67:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6B:F4:14:A5:D7:C7:12:61:D9:22:3F:0C:D7:81:2D:7C:AF:DB:08
            X509v3 Authority Key Identifier:
                keyid:D6:3F:65:BC:86:8A:98:9F:50:16:FC:5F:92:38:57:D2:6E:E2:A0:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/D63F65BC868A989F5016FC5F923857D26EE2A068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D63F65BC868A989F5016FC5F923857D26EE2A068.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/323830343a353437343a613a3a2f34382d3438203d3e20323638363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5474:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:52:02:69:00:a7:ca:d0:56:ef:6a:c0:60:25:6f:08:48:33:
         1a:69:e3:f1:ac:46:49:5b:0e:0c:bb:7d:d8:79:7a:13:df:55:
         ed:c5:c3:dc:9f:51:8e:ff:af:1b:56:b2:eb:60:8b:66:52:9d:
         46:43:cc:16:2d:0d:eb:4c:17:0e:ad:3e:a3:12:0e:c9:8c:bf:
         83:98:e4:cb:65:82:44:a1:32:9b:76:6e:a9:2d:08:a6:f3:eb:
         e1:40:ee:fd:1b:66:00:fa:e7:fb:69:1f:79:a9:49:b9:85:f3:
         b6:e7:d9:2d:a9:0d:77:f7:b0:c9:29:09:3a:70:4c:87:5f:b2:
         10:b5:21:b7:58:5f:58:70:c0:e3:6b:52:ab:40:15:84:ce:ee:
         35:2e:fc:72:56:0e:d2:95:41:e7:0c:2b:9d:a5:c2:b4:80:13:
         ce:69:89:0b:59:25:51:53:f4:4a:f0:c0:64:91:cb:06:81:d2:
         eb:2e:f5:08:52:92:7d:30:e4:2b:c4:da:2f:d3:71:84:89:99:
         81:8d:cd:3b:ac:e6:26:5c:cf:69:9f:7a:02:dd:57:bd:1c:b0:
         56:25:23:d7:c8:55:25:0f:4a:9e:cb:3a:0a:0d:03:33:0a:e4:
         4f:7d:6a:d6:3f:77:e1:1f:9d:19:4c:78:a5:8e:eb:fc:79:a9:
         6c:c9:76:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org