Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/323830343a353437343a623a3a2f34382d3438203d3e20323638363531.roa
File:                     323830343a353437343a623a3a2f34382d3438203d3e20323638363531.roa (raw, json)
Hash identifier:          Ni+jQX+lrBfFqS5IOWKcOt8687ichfyN96jBqI2nBAs=
Subject key identifier:   DD:B2:8B:1B:D6:B9:45:CB:8F:39:DE:87:C1:27:77:B0:F8:69:0E:91
Certificate issuer:       /CN=D63F65BC868A989F5016FC5F923857D26EE2A068
Certificate serial:       2026713857DF0033D1910F3F735010661027F3CB
Authority key identifier: D6:3F:65:BC:86:8A:98:9F:50:16:FC:5F:92:38:57:D2:6E:E2:A0:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D63F65BC868A989F5016FC5F923857D26EE2A068.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/323830343a353437343a623a3a2f34382d3438203d3e20323638363531.roa
Signing time:             Sun 07 Apr 2024 18:00:02 +0000
ROA not before:           Sun 07 Apr 2024 17:55:02 +0000
ROA not after:            Sun 06 Apr 2025 18:00:02 +0000
asID:                     268651
IP address blocks:        2804:5474:b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:26:71:38:57:df:00:33:d1:91:0f:3f:73:50:10:66:10:27:f3:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D63F65BC868A989F5016FC5F923857D26EE2A068
        Validity
            Not Before: Apr  7 17:55:02 2024 GMT
            Not After : Apr  6 18:00:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a7:76:e9:4f:54:05:3a:c6:ba:76:50:c6:f4:
                    ed:c3:75:4c:f8:47:fe:fe:99:51:8f:75:03:99:c2:
                    ae:a5:d6:4c:2f:db:33:e1:a4:d2:cc:d7:d4:7e:10:
                    59:89:e8:c8:ff:41:45:2b:0a:70:7e:b3:96:ce:1d:
                    35:da:e1:ec:71:c1:f8:62:4e:81:cd:9d:08:df:91:
                    4e:69:56:88:5e:99:b7:ac:f4:0e:5a:0b:dd:36:ef:
                    8c:8e:1b:98:ce:4f:75:af:40:7c:18:62:0f:09:5b:
                    a2:54:5f:c5:2e:02:28:c8:49:b9:b8:12:7d:d4:8d:
                    f5:78:1b:c8:bc:d5:88:7e:6b:ab:c9:2f:58:8a:5b:
                    ab:01:0e:2f:64:38:24:8a:6c:4f:5d:69:8a:31:ae:
                    d9:62:7a:ee:e2:76:9e:8e:1f:1b:df:9a:3d:21:98:
                    02:9b:e9:95:bc:b6:4d:c2:e5:df:18:84:9d:a9:9c:
                    89:0e:d3:bb:a8:e7:10:38:6e:b1:90:b5:ac:40:56:
                    ac:9a:94:f3:ad:13:32:46:cd:99:69:b5:b8:ab:32:
                    90:91:c9:d1:be:68:9e:13:25:91:2f:94:74:73:95:
                    45:fe:f0:9d:13:f1:75:9b:b3:86:a5:cb:2d:15:7c:
                    20:01:2a:8e:90:29:4a:8a:de:e7:06:f1:47:cb:59:
                    a2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B2:8B:1B:D6:B9:45:CB:8F:39:DE:87:C1:27:77:B0:F8:69:0E:91
            X509v3 Authority Key Identifier:
                keyid:D6:3F:65:BC:86:8A:98:9F:50:16:FC:5F:92:38:57:D2:6E:E2:A0:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/D63F65BC868A989F5016FC5F923857D26EE2A068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D63F65BC868A989F5016FC5F923857D26EE2A068.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/323830343a353437343a623a3a2f34382d3438203d3e20323638363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5474:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:21:b8:fd:38:6d:43:53:8f:1d:fd:7c:57:2e:09:e2:25:9e:
         73:1c:c8:5c:28:9f:b8:85:bc:18:bf:b7:02:88:5f:d5:08:27:
         99:78:87:81:60:d0:fd:2d:79:bd:8a:84:29:ad:46:e0:90:1a:
         9a:13:7d:5f:58:5f:64:b7:bc:68:d7:7c:9b:fc:65:ea:ca:3b:
         a9:a0:0d:4d:3a:44:17:89:48:06:71:ee:ad:1c:56:a8:ea:7b:
         7b:ee:59:b6:2a:9e:52:57:00:86:3f:3b:55:ce:21:b5:6c:97:
         a0:8b:0f:0d:32:65:e8:06:12:39:22:83:18:db:2a:9f:09:5e:
         35:f8:f3:5b:be:76:41:53:bb:f6:e9:15:c1:69:ce:54:65:95:
         a6:36:27:2c:b8:cf:3a:1d:06:70:c0:96:c4:a8:5c:60:71:dd:
         69:fa:e5:e4:43:6e:71:a0:a8:4d:3b:9d:23:90:1f:ba:f0:5f:
         da:25:e9:16:95:95:37:f9:2b:f2:a8:32:e3:40:eb:fd:b2:c6:
         cc:1c:86:7e:be:c8:da:ff:c2:07:16:a8:5a:1c:f6:9a:6e:09:
         d6:7e:e3:b4:23:2a:d4:d9:a1:a8:ed:e2:73:ac:01:53:d3:ba:
         a2:1e:33:67:69:6a:3d:49:d8:d8:49:e9:af:9c:d3:fd:5e:01:
         65:7a:52:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org