Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/1/323830343a343538633a3a2f33322d313238203d3e20323636393334.roa
File:                     323830343a343538633a3a2f33322d313238203d3e20323636393334.roa (raw, json)
Hash identifier:          /bo5gkPwrE2rjakdk1n6XQNT0FDtCt/wrz6sLFjwG04=
Subject key identifier:   01:04:41:71:45:84:F4:10:AD:BD:F6:66:36:33:05:6B:61:00:DA:98
Certificate issuer:       /CN=70FF6069A867E734F1989540EB4725CA692B5877
Certificate serial:       46B2D2F90DB5E13E533A825C2520218601B91BA8
Authority key identifier: 70:FF:60:69:A8:67:E7:34:F1:98:95:40:EB:47:25:CA:69:2B:58:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70FF6069A867E734F1989540EB4725CA692B5877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/1/323830343a343538633a3a2f33322d313238203d3e20323636393334.roa
Signing time:             Fri 05 Apr 2024 03:28:56 +0000
ROA not before:           Fri 05 Apr 2024 03:23:56 +0000
ROA not after:            Fri 04 Apr 2025 03:28:56 +0000
asID:                     266934
IP address blocks:        2804:458c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b2:d2:f9:0d:b5:e1:3e:53:3a:82:5c:25:20:21:86:01:b9:1b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70FF6069A867E734F1989540EB4725CA692B5877
        Validity
            Not Before: Apr  5 03:23:56 2024 GMT
            Not After : Apr  4 03:28:56 2025 GMT
        Subject: CN=010441714584F410ADBDF6663633056B6100DA98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:07:81:15:a0:91:fa:ab:44:07:9f:29:20:23:
                    a2:f9:42:8a:09:7c:d1:8e:88:3b:f8:05:bd:b5:85:
                    ec:ea:3e:54:e1:90:51:66:ae:58:2f:1c:10:0d:0d:
                    9c:e0:35:11:aa:4b:8a:6e:8f:b1:62:e5:61:75:bb:
                    db:80:98:41:8d:72:5e:77:77:a8:b9:e9:47:99:5d:
                    03:8c:51:e6:c2:19:d2:e4:03:f5:3c:0e:4e:0c:bf:
                    e1:91:9b:da:fe:9f:7f:5c:c5:4d:e9:7b:c5:f2:04:
                    e8:6b:14:34:52:80:9e:b7:7b:16:db:26:c8:49:8a:
                    0c:69:99:1a:de:a7:dc:49:b4:37:90:ae:55:6e:ca:
                    65:34:e3:b4:a5:c8:97:72:7d:f9:c6:a8:a6:95:9d:
                    70:7d:05:d0:e5:b9:70:64:6a:50:de:15:ff:08:e2:
                    ac:d2:2c:09:4f:b2:f0:03:38:4a:1c:1b:b0:e2:26:
                    a6:4c:8a:c0:fb:47:10:46:67:e7:73:f5:08:df:59:
                    05:12:58:57:dd:4a:20:6a:d4:c3:4a:ea:e1:ad:15:
                    02:be:44:1e:2f:9d:2f:44:3a:d9:79:7c:b1:73:e0:
                    07:ce:40:48:23:88:e0:0f:cc:e0:8a:35:ce:bd:03:
                    68:64:91:38:01:87:bb:90:03:18:05:5c:4f:73:43:
                    2a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:04:41:71:45:84:F4:10:AD:BD:F6:66:36:33:05:6B:61:00:DA:98
            X509v3 Authority Key Identifier:
                keyid:70:FF:60:69:A8:67:E7:34:F1:98:95:40:EB:47:25:CA:69:2B:58:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/1/70FF6069A867E734F1989540EB4725CA692B5877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70FF6069A867E734F1989540EB4725CA692B5877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/1/323830343a343538633a3a2f33322d313238203d3e20323636393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:458c::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:d5:03:c7:d7:68:fa:25:26:ab:f5:0e:62:c5:25:a7:54:2b:
         bc:13:29:c8:ae:f7:da:a9:07:77:b1:c6:9a:50:c8:ab:03:b5:
         ee:1a:82:97:b2:43:bd:8c:a0:97:20:cb:16:68:2f:d6:37:81:
         57:2a:c2:b0:cc:5d:e7:07:28:b3:27:25:58:0a:8f:b9:b5:c1:
         63:aa:51:a4:94:2f:fb:10:d6:ba:88:10:1c:b4:3e:e7:fc:45:
         6e:6d:df:bb:9d:b3:c4:d3:f0:89:09:74:6a:bc:ba:ee:9e:f8:
         52:c7:df:68:f8:82:61:75:a4:0a:4e:67:3c:ee:de:dc:fb:1e:
         c5:b2:3a:d6:fa:9b:c9:87:21:6d:f7:49:45:f9:46:08:4e:43:
         8c:db:23:e6:98:7b:0a:a6:b2:33:bd:4a:fe:9c:64:a6:91:d2:
         0c:ab:b4:01:b3:81:0f:00:85:56:4d:cc:b2:e6:57:42:64:74:
         b2:69:0e:c7:2e:2e:00:d6:79:df:de:13:42:02:fb:89:59:26:
         98:f4:7f:20:57:36:4f:32:28:a9:4b:a1:68:7b:e2:91:15:84:
         91:1c:83:9b:01:28:be:6c:4a:da:17:ec:d4:61:bd:32:8c:f2:
         a7:ed:79:a6:21:28:26:9d:14:0c:19:45:f0:3c:28:0b:db:86:
         ef:dd:dd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org