Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/323830343a323862303a633030303a3a2f33352d3335203d3e203532393332.roa
File:                     323830343a323862303a633030303a3a2f33352d3335203d3e203532393332.roa (raw, json)
Hash identifier:          cReVxEgd3TqV9Yjgf50eleTXO9Ey7NVhpcj3mujOYQw=
Subject key identifier:   0A:67:44:02:1A:4D:77:E2:D2:37:2A:6D:3E:F2:DB:F9:D0:30:B1:69
Certificate issuer:       /CN=9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72
Certificate serial:       14522F19F2789B72246AAA2523B2B67901934C39
Authority key identifier: 9D:34:8A:0A:66:A2:F5:5A:35:EE:3F:E7:6C:50:D4:DE:EE:98:4B:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/323830343a323862303a633030303a3a2f33352d3335203d3e203532393332.roa
Signing time:             Wed 03 Apr 2024 18:31:10 +0000
ROA not before:           Wed 03 Apr 2024 18:26:10 +0000
ROA not after:            Wed 02 Apr 2025 18:31:10 +0000
asID:                     52932
IP address blocks:        2804:28b0:c000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:52:2f:19:f2:78:9b:72:24:6a:aa:25:23:b2:b6:79:01:93:4c:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72
        Validity
            Not Before: Apr  3 18:26:10 2024 GMT
            Not After : Apr  2 18:31:10 2025 GMT
        Subject: CN=0A6744021A4D77E2D2372A6D3EF2DBF9D030B169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6d:bc:d1:c9:e1:27:e8:0c:bd:81:6f:61:75:
                    6a:c2:72:8f:8e:7a:ec:9b:0c:f6:df:33:b1:39:e2:
                    e1:78:ec:1c:bc:16:4d:c5:65:8d:5c:22:da:1e:78:
                    9d:e8:65:be:e7:50:00:31:68:a1:a3:9e:9a:78:95:
                    47:3c:42:b6:f1:b9:ff:ef:90:38:ce:37:36:26:e2:
                    1f:c4:88:40:b5:68:a0:01:64:4a:2b:84:cb:0f:93:
                    eb:f7:c8:5b:8d:f3:9a:94:62:66:5e:3d:8e:e4:41:
                    71:ac:42:99:6c:94:0f:14:cd:f9:7f:32:f1:5a:20:
                    5c:89:61:b6:c1:2a:06:81:43:23:a6:76:70:ac:99:
                    8d:09:08:7c:70:ba:21:a5:5a:d4:91:3b:d5:f1:db:
                    03:24:ed:c2:78:dc:56:d8:99:a1:ee:32:c4:57:10:
                    6e:5c:c9:3f:bd:59:c4:2e:9e:ca:3b:22:6d:70:5f:
                    45:8a:71:91:f7:6d:c3:fe:7b:41:fd:8b:7b:30:c8:
                    88:a1:5e:a6:6e:13:34:09:7d:8d:16:c0:3d:29:20:
                    94:86:0a:37:77:9b:ad:fa:b7:47:3b:62:2d:20:e6:
                    e8:cf:ab:f5:42:6d:c8:98:2e:39:82:4b:6a:9e:94:
                    cb:2f:a3:96:b5:45:1d:7a:92:94:1f:83:84:1e:7d:
                    5f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:67:44:02:1A:4D:77:E2:D2:37:2A:6D:3E:F2:DB:F9:D0:30:B1:69
            X509v3 Authority Key Identifier:
                keyid:9D:34:8A:0A:66:A2:F5:5A:35:EE:3F:E7:6C:50:D4:DE:EE:98:4B:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/323830343a323862303a633030303a3a2f33352d3335203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28b0:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         81:9b:6c:ed:74:d4:39:6b:32:43:d0:0e:02:6c:50:47:23:d7:
         4c:53:26:ca:06:da:ac:7f:6c:18:7b:be:51:54:7c:0b:b5:b6:
         13:0a:7c:9c:43:a4:89:8a:dc:26:5c:e5:b4:b9:21:fa:63:25:
         24:02:42:aa:67:63:83:4a:cc:f4:eb:07:1b:75:78:95:22:38:
         52:03:a4:1c:96:1a:a1:ca:40:ab:13:81:84:6b:95:fd:c1:f4:
         66:06:fa:04:10:f9:2f:c2:56:10:b6:92:c9:b8:7b:83:17:ab:
         1b:80:2a:ee:0e:a0:0d:02:2d:f6:22:94:cd:48:c2:17:8f:5d:
         02:a2:26:71:e5:d5:5e:dc:4c:a4:8a:a1:fd:ee:7e:70:6a:67:
         6f:ce:18:71:24:f3:fd:6e:8d:07:9a:3d:b1:24:ae:ed:b7:af:
         6d:46:1f:6c:df:49:4f:a3:d0:d9:8c:88:78:e3:80:4d:1d:e3:
         bf:c8:4d:f5:3f:89:aa:ff:32:f4:64:d9:28:fd:6b:70:c2:12:
         33:99:f7:b6:3b:8d:76:5c:04:ca:eb:48:1b:16:33:cf:14:c1:
         c2:47:68:28:25:97:3f:e8:f1:6a:44:99:13:5a:07:6e:03:96:
         7d:0f:98:48:c7:a8:b3:b1:54:3e:42:a5:49:f3:5d:2d:cd:df:
         6c:fd:d9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org