Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/323830343a323862303a653030303a3a2f33352d3335203d3e203532393332.roa
File:                     323830343a323862303a653030303a3a2f33352d3335203d3e203532393332.roa (raw, json)
Hash identifier:          G57X3WXb0HqAhDOq9higHe8gr4iD/7pEVjaEZCAX6fE=
Subject key identifier:   D6:9C:78:C9:A0:BC:20:2C:83:CC:42:49:C1:BB:7B:81:B3:4B:F7:D5
Certificate issuer:       /CN=9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72
Certificate serial:       215D33681C702D5C7C33283E06D80F17652869AC
Authority key identifier: 9D:34:8A:0A:66:A2:F5:5A:35:EE:3F:E7:6C:50:D4:DE:EE:98:4B:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/323830343a323862303a653030303a3a2f33352d3335203d3e203532393332.roa
Signing time:             Wed 03 Apr 2024 18:31:10 +0000
ROA not before:           Wed 03 Apr 2024 18:26:10 +0000
ROA not after:            Wed 02 Apr 2025 18:31:10 +0000
asID:                     52932
IP address blocks:        2804:28b0:e000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:5d:33:68:1c:70:2d:5c:7c:33:28:3e:06:d8:0f:17:65:28:69:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72
        Validity
            Not Before: Apr  3 18:26:10 2024 GMT
            Not After : Apr  2 18:31:10 2025 GMT
        Subject: CN=D69C78C9A0BC202C83CC4249C1BB7B81B34BF7D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:32:f9:dc:cd:77:27:29:f9:f2:4e:7b:e2:8c:
                    71:52:4a:6b:92:9d:5a:57:cb:d5:0f:fc:78:5e:5c:
                    2d:8c:45:4d:8b:a5:ec:6b:79:71:7a:35:d1:09:48:
                    4c:1c:5f:a8:7e:e2:7d:d5:bb:d0:43:31:d5:a2:9e:
                    2a:4d:3f:60:bc:40:0d:c5:f8:b2:9a:90:c7:84:68:
                    81:98:e7:48:0c:cd:82:60:98:9e:e6:50:05:ba:c4:
                    6f:c5:12:b0:8e:b8:ed:88:37:c2:f6:cc:54:74:f1:
                    85:81:75:db:69:ee:0e:d8:b9:cb:05:a7:bc:fa:43:
                    97:e8:93:68:33:83:a6:76:16:91:43:8d:c7:98:3a:
                    48:d2:05:4b:01:9e:3b:58:3e:5b:e9:f5:c2:7b:92:
                    d5:af:33:5f:42:41:5a:cd:30:00:28:2b:f8:bd:37:
                    e7:f0:11:73:20:36:50:09:1b:c9:a3:b8:10:ab:c5:
                    55:ad:b2:96:f9:e4:e7:68:5c:88:82:19:62:f7:e7:
                    bf:e7:76:e7:80:2d:d9:61:e1:6b:5a:7d:47:5f:c0:
                    80:52:0d:89:3a:1d:bb:74:9d:4a:a3:51:49:91:21:
                    43:af:7c:5c:62:a2:84:6a:ba:c1:c2:62:ea:0c:70:
                    a2:5b:cd:2d:76:d3:0b:ff:ea:98:0d:30:f4:fb:76:
                    7e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:9C:78:C9:A0:BC:20:2C:83:CC:42:49:C1:BB:7B:81:B3:4B:F7:D5
            X509v3 Authority Key Identifier:
                keyid:9D:34:8A:0A:66:A2:F5:5A:35:EE:3F:E7:6C:50:D4:DE:EE:98:4B:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/323830343a323862303a653030303a3a2f33352d3335203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28b0:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         43:35:06:47:d5:0f:f2:d1:bb:f6:15:c3:b8:cf:43:9d:20:03:
         d5:0e:89:90:2d:ca:b2:48:a0:79:5a:fc:5c:07:a9:b6:95:37:
         5f:91:64:4f:fe:ef:d7:60:17:4a:37:6a:f7:35:a7:c8:16:49:
         81:e7:12:0d:bb:ec:42:89:18:fc:62:ac:5c:c5:e2:e7:f5:8e:
         23:ce:b2:6c:51:79:d7:74:fc:1c:ce:92:e5:2f:33:18:df:cc:
         54:d4:66:ab:fc:ce:39:d9:f3:79:55:63:11:ad:b9:79:23:be:
         69:53:e3:d0:9f:85:b6:04:8b:b6:cb:15:31:b3:33:eb:9b:83:
         b8:c6:63:46:d1:ad:11:f9:5b:5c:3a:b9:22:ea:3e:b9:a8:fa:
         8c:ed:76:54:e4:37:dd:5e:ef:bd:18:91:ff:ec:71:1d:8c:8a:
         86:27:17:c6:34:01:1c:83:79:88:3e:e5:93:39:90:74:ff:ed:
         6b:83:56:f2:02:85:d6:6e:22:71:f5:6d:6e:f6:d5:92:09:83:
         88:3d:e1:ad:f5:b5:79:f0:98:10:91:40:a0:f8:f7:eb:93:2e:
         b5:db:c4:77:08:83:c2:14:62:81:8c:e8:03:fe:0e:10:66:f0:
         d0:db:c7:2c:ad:da:8c:09:d5:70:3f:c4:89:25:ee:67:d7:ee:
         dc:f0:d1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org