Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/0/323830343a356162343a3a2f33322d3334203d3e20323638373930.roa
File:                     323830343a356162343a3a2f33322d3334203d3e20323638373930.roa (raw, json)
Hash identifier:          I6j6noXjEEhyz7ZOUvo+59TcM1dXgDEiVm58nd2qqUA=
Subject key identifier:   61:74:7A:B2:49:6B:E2:CC:D3:B6:50:52:17:3E:8D:D1:3A:C8:3B:A5
Certificate issuer:       /CN=D1EEF27FD4FA2A0ED52A88082B8835A1A2326718
Certificate serial:       2172A897D0C6AB01DDE1317AC3B0A6DA7F02EAF0
Authority key identifier: D1:EE:F2:7F:D4:FA:2A:0E:D5:2A:88:08:2B:88:35:A1:A2:32:67:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1EEF27FD4FA2A0ED52A88082B8835A1A2326718.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/0/323830343a356162343a3a2f33322d3334203d3e20323638373930.roa
Signing time:             Mon 05 Feb 2024 14:24:00 +0000
ROA not before:           Mon 05 Feb 2024 14:19:00 +0000
ROA not after:            Mon 03 Feb 2025 14:24:00 +0000
asID:                     268790
IP address blocks:        2804:5ab4::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:72:a8:97:d0:c6:ab:01:dd:e1:31:7a:c3:b0:a6:da:7f:02:ea:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1EEF27FD4FA2A0ED52A88082B8835A1A2326718
        Validity
            Not Before: Feb  5 14:19:00 2024 GMT
            Not After : Feb  3 14:24:00 2025 GMT
        Subject: CN=3082010A0282010100CC756D4CD1CB5FF6A46D9646038E91B1C342A4F36EF20E9210EF7034FE4268E17FED6FCC3D3B4A387CE1E97F59B0DAA5192ADF9A4E12C2C9759EAF67D48A275E904F9018EEBFFD7502B9FAF26FFBA0DE24950B4739299D592DEA159FF9480A3041B808CEFAE3E7822053CF8583EACEEBC617A9B7179D77C16FB8ED1B0DF95820A57F89009CD6753DC41E21F72B8F58E36A9FE04B06D8FE1F31377D5CC080FABD58984EA003F5CC7B81E4CF86D0CB22CB65393B16E93B3208EB4B6072AAA24AC7787C50B65AD0E880CF497262B08D37B3A4AD000A4EF7CF06F81170855D566AD5CD3DAE0530FD5C9D73EEB7025E29E3928A134CC5F1BC72BED081AFDDFF5799070203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:75:6d:4c:d1:cb:5f:f6:a4:6d:96:46:03:8e:
                    91:b1:c3:42:a4:f3:6e:f2:0e:92:10:ef:70:34:fe:
                    42:68:e1:7f:ed:6f:cc:3d:3b:4a:38:7c:e1:e9:7f:
                    59:b0:da:a5:19:2a:df:9a:4e:12:c2:c9:75:9e:af:
                    67:d4:8a:27:5e:90:4f:90:18:ee:bf:fd:75:02:b9:
                    fa:f2:6f:fb:a0:de:24:95:0b:47:39:29:9d:59:2d:
                    ea:15:9f:f9:48:0a:30:41:b8:08:ce:fa:e3:e7:82:
                    20:53:cf:85:83:ea:ce:eb:c6:17:a9:b7:17:9d:77:
                    c1:6f:b8:ed:1b:0d:f9:58:20:a5:7f:89:00:9c:d6:
                    75:3d:c4:1e:21:f7:2b:8f:58:e3:6a:9f:e0:4b:06:
                    d8:fe:1f:31:37:7d:5c:c0:80:fa:bd:58:98:4e:a0:
                    03:f5:cc:7b:81:e4:cf:86:d0:cb:22:cb:65:39:3b:
                    16:e9:3b:32:08:eb:4b:60:72:aa:a2:4a:c7:78:7c:
                    50:b6:5a:d0:e8:80:cf:49:72:62:b0:8d:37:b3:a4:
                    ad:00:0a:4e:f7:cf:06:f8:11:70:85:5d:56:6a:d5:
                    cd:3d:ae:05:30:fd:5c:9d:73:ee:b7:02:5e:29:e3:
                    92:8a:13:4c:c5:f1:bc:72:be:d0:81:af:dd:ff:57:
                    99:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:74:7A:B2:49:6B:E2:CC:D3:B6:50:52:17:3E:8D:D1:3A:C8:3B:A5
            X509v3 Authority Key Identifier:
                keyid:D1:EE:F2:7F:D4:FA:2A:0E:D5:2A:88:08:2B:88:35:A1:A2:32:67:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/0/D1EEF27FD4FA2A0ED52A88082B8835A1A2326718.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1EEF27FD4FA2A0ED52A88082B8835A1A2326718.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/0/323830343a356162343a3a2f33322d3334203d3e20323638373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ab4::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:1b:f6:ac:af:54:19:06:eb:dc:02:82:b3:e7:5e:34:43:c3:
         71:9a:3f:5a:76:45:1f:08:09:be:c8:ba:2e:c8:5d:f0:3c:cd:
         74:1a:28:33:0e:c9:17:53:5e:98:f2:54:19:05:2b:67:e7:5a:
         1c:f1:77:a8:3a:12:eb:75:f4:6e:c8:a4:19:8f:4b:28:2e:a6:
         05:0c:02:22:3a:3d:64:40:95:30:be:e2:e0:dc:a3:43:3b:63:
         96:d4:9e:24:5d:6c:57:cb:c8:22:74:29:88:93:c4:fc:7b:c4:
         4f:42:86:eb:f5:a5:29:2a:8b:88:52:25:53:2d:9e:f8:17:c1:
         c3:2b:10:b2:9f:7c:7b:63:77:d7:dd:e3:5e:8b:1c:50:06:f5:
         4f:75:03:7f:d3:67:69:34:e5:9d:83:4f:cc:63:30:af:0c:bf:
         5b:3c:82:ca:4c:11:23:9c:9e:d6:0e:e0:a9:15:58:57:36:c0:
         5a:c7:91:50:a6:2a:f5:48:a2:6d:f0:f5:3d:5b:cc:e0:f7:ba:
         5d:28:fe:12:cf:1e:7b:e8:ff:4a:b6:3d:3b:1f:20:94:73:eb:
         02:67:1c:a7:08:76:e3:37:f7:4c:99:25:c2:3e:71:4b:67:4b:
         4d:31:b3:c6:a0:58:58:d2:73:86:d8:9c:06:ad:e0:48:d1:1e:
         6a:dc:06:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org