Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/323830343a3832383a633233303a3a2f34372d3437203d3e20323632333534.roa
File:                     323830343a3832383a633233303a3a2f34372d3437203d3e20323632333534.roa (raw, json)
Hash identifier:          ncHRHXNh6x+eX4Yohexngjz+YiVAbKRhuwAhpzj5Mj0=
Subject key identifier:   35:FF:DB:0C:BD:42:C7:A7:A5:68:20:7F:91:05:BD:EB:0D:9B:EA:F7
Certificate issuer:       /CN=9445327451CE84E39FB7363BC02549BB0F004F4B
Certificate serial:       16B17D94ACFDC01E6C2F298B7A1119647CD07ED9
Authority key identifier: 94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/323830343a3832383a633233303a3a2f34372d3437203d3e20323632333534.roa
Signing time:             Wed 06 Mar 2024 14:14:34 +0000
ROA not before:           Wed 06 Mar 2024 14:09:34 +0000
ROA not after:            Wed 05 Mar 2025 14:14:34 +0000
asID:                     262354
IP address blocks:        2804:828:c230::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b1:7d:94:ac:fd:c0:1e:6c:2f:29:8b:7a:11:19:64:7c:d0:7e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9445327451CE84E39FB7363BC02549BB0F004F4B
        Validity
            Not Before: Mar  6 14:09:34 2024 GMT
            Not After : Mar  5 14:14:34 2025 GMT
        Subject: CN=35FFDB0CBD42C7A7A568207F9105BDEB0D9BEAF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b8:bf:25:5f:2a:35:78:63:0b:ff:b8:12:9f:
                    e6:ea:bd:b4:52:c0:54:0c:09:7a:82:e6:b1:34:10:
                    5e:bb:4f:45:8f:1a:a7:55:a9:80:d9:6c:e7:84:15:
                    a3:a6:58:79:78:44:f1:e9:c0:09:ae:2f:46:96:5d:
                    d9:db:ea:24:84:d7:d8:2a:75:92:d1:15:c2:0e:eb:
                    65:5a:ec:6a:55:12:79:8f:1d:51:cf:c1:cb:57:78:
                    79:8c:7e:b6:6e:c9:ae:1f:49:b2:4b:e5:93:bd:7e:
                    e4:84:12:85:d2:e1:a3:3d:06:92:bf:c5:1b:17:a0:
                    9c:cc:eb:06:8d:5b:35:8c:72:10:74:da:0c:08:69:
                    43:5f:3e:5a:ca:0a:15:a6:df:93:c6:cd:2f:da:ca:
                    e0:18:17:c6:82:b0:1d:62:16:ec:cd:17:58:37:28:
                    8e:58:54:75:20:ce:a9:03:7e:19:c0:9a:13:95:f3:
                    9f:45:d3:be:bb:54:c6:e0:fd:ec:34:b1:be:c7:87:
                    03:fb:28:3f:f4:60:3d:61:03:e2:11:a0:82:0f:a6:
                    ba:5d:00:20:cf:86:9a:63:21:c5:29:7f:3a:71:f0:
                    50:93:94:18:33:fe:51:50:ed:e5:66:b8:c3:d1:97:
                    4b:a4:35:b8:58:d2:34:64:5b:1f:dd:a6:56:01:cb:
                    d3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:FF:DB:0C:BD:42:C7:A7:A5:68:20:7F:91:05:BD:EB:0D:9B:EA:F7
            X509v3 Authority Key Identifier:
                keyid:94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/9445327451CE84E39FB7363BC02549BB0F004F4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/323830343a3832383a633233303a3a2f34372d3437203d3e20323632333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:828:c230::/47

    Signature Algorithm: sha256WithRSAEncryption
         1a:65:93:99:5c:39:fe:f7:e3:53:07:31:43:e8:b2:e5:8f:0e:
         91:14:eb:2a:11:a9:51:cd:f2:52:a5:d0:bd:bf:3b:31:df:52:
         14:de:46:05:ad:b8:25:e6:00:51:3a:d0:58:81:bd:72:4c:1b:
         0e:42:58:f6:84:c4:56:cd:0d:24:9d:c4:b1:db:0f:e1:c6:fa:
         be:b3:02:29:03:61:ce:dc:7d:7f:7e:33:98:fe:09:f1:82:4e:
         4f:4c:40:74:e1:7b:b5:02:50:46:49:8d:5b:df:0c:d8:f8:4d:
         5e:1b:92:34:8c:84:c5:9f:f0:9b:e7:98:62:61:45:6d:7a:a8:
         22:d0:08:36:19:ce:b3:bd:c2:9b:38:b9:04:fc:fd:1f:be:e5:
         92:ca:37:da:62:a9:68:b4:75:81:4c:0a:52:5c:cf:38:c8:fb:
         33:2d:c8:4a:10:bf:ee:71:17:6a:5f:f8:30:b9:31:d1:72:8b:
         cf:4a:f3:6f:a7:d0:2f:3e:47:ba:5b:2d:94:7a:fe:fb:47:10:
         c7:3a:81:a8:fc:00:35:c3:f4:ac:49:1a:c1:d9:86:36:31:17:
         b4:17:71:ed:52:66:fa:2d:1c:bf:c0:b2:f3:2d:67:b0:1b:0c:
         8f:a5:e9:bd:c2:f2:6f:8d:0c:2e:44:db:cb:f2:0f:00:1c:fe:
         41:c2:9d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org