Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/1/323830343a353538383a3a2f33322d3332203d3e20323637393430.roa
File:                     323830343a353538383a3a2f33322d3332203d3e20323637393430.roa (raw, json)
Hash identifier:          rXqZT7QCM9Y3M8VN3pk5AfJZj/XZ3PfJfdIz5zm2tME=
Subject key identifier:   87:04:4A:A3:2B:D7:14:AC:7B:1E:5C:7D:07:E4:9F:95:D6:1E:A8:B9
Certificate issuer:       /CN=4BE2C3E4D0A75D7C403797C760DDF72F52442B3E
Certificate serial:       0DC224010E6CF225F641A73426D1195A584E0368
Authority key identifier: 4B:E2:C3:E4:D0:A7:5D:7C:40:37:97:C7:60:DD:F7:2F:52:44:2B:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BE2C3E4D0A75D7C403797C760DDF72F52442B3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/1/323830343a353538383a3a2f33322d3332203d3e20323637393430.roa
Signing time:             Thu 04 Apr 2024 03:26:29 +0000
ROA not before:           Thu 04 Apr 2024 03:21:29 +0000
ROA not after:            Thu 03 Apr 2025 03:26:29 +0000
asID:                     267940
IP address blocks:        2804:5588::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c2:24:01:0e:6c:f2:25:f6:41:a7:34:26:d1:19:5a:58:4e:03:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BE2C3E4D0A75D7C403797C760DDF72F52442B3E
        Validity
            Not Before: Apr  4 03:21:29 2024 GMT
            Not After : Apr  3 03:26:29 2025 GMT
        Subject: CN=87044AA32BD714AC7B1E5C7D07E49F95D61EA8B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2d:be:57:df:86:c1:79:73:e7:05:19:55:8c:
                    0d:52:81:53:e2:08:5f:29:db:26:f0:9f:e0:ca:27:
                    6f:30:5d:8e:fe:36:28:4e:94:44:6d:d4:49:d1:a4:
                    fa:d3:cf:10:b3:ff:a5:4e:fb:0d:08:08:f8:22:55:
                    27:b6:37:31:59:cb:f2:3f:6b:c3:d3:ff:a9:78:5e:
                    e4:4c:81:16:0c:ae:81:b9:cf:c9:34:b3:3c:15:ed:
                    03:df:29:65:a9:ae:09:a0:b2:5d:5e:58:18:bf:7d:
                    14:7a:85:5e:5b:43:1c:35:61:5b:59:da:68:c3:23:
                    b5:2e:c1:fa:97:52:ab:0e:fc:e8:a0:b2:8d:ca:3e:
                    f5:fe:72:81:8f:c1:3f:3c:de:bd:cf:1a:89:68:95:
                    23:23:22:dc:e2:86:a8:12:62:49:2a:fe:a2:3a:ab:
                    f1:16:e3:66:b3:db:3a:23:62:ef:fd:eb:bc:53:54:
                    fb:24:ed:d4:16:db:30:cb:65:50:ee:09:05:d9:08:
                    9f:f7:36:a9:6b:db:10:59:e0:f4:72:a5:9a:09:7d:
                    f4:89:d3:81:7e:68:59:49:2d:0a:89:cc:63:7c:18:
                    8b:03:92:00:c3:21:d5:d1:37:28:28:32:07:a7:bf:
                    e5:dc:ec:92:f6:bd:3a:e9:e1:14:da:c7:45:af:2b:
                    4d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:04:4A:A3:2B:D7:14:AC:7B:1E:5C:7D:07:E4:9F:95:D6:1E:A8:B9
            X509v3 Authority Key Identifier:
                keyid:4B:E2:C3:E4:D0:A7:5D:7C:40:37:97:C7:60:DD:F7:2F:52:44:2B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/1/4BE2C3E4D0A75D7C403797C760DDF72F52442B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BE2C3E4D0A75D7C403797C760DDF72F52442B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/1/323830343a353538383a3a2f33322d3332203d3e20323637393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5588::/32

    Signature Algorithm: sha256WithRSAEncryption
         d6:a7:9d:f6:4f:3e:60:60:bb:1d:12:60:48:90:4a:f7:49:d9:
         36:5b:1c:9d:c7:e7:bb:68:2a:2c:df:61:89:c1:20:e0:0d:7f:
         fd:e2:2e:de:0f:67:a9:5d:33:93:c0:a9:80:3b:43:ff:6e:ee:
         e0:70:ea:45:2c:be:f2:a0:8b:ef:7d:f4:7f:01:46:82:d6:6a:
         94:53:91:99:03:b2:dc:75:0f:49:9e:fa:47:7a:81:30:60:12:
         de:db:47:2b:12:34:35:1a:eb:f1:21:de:2c:84:93:3b:c1:b2:
         e1:cb:0a:2f:50:b1:71:89:92:fe:dd:1a:6a:f5:40:de:40:37:
         1f:6d:2b:fd:20:93:70:e3:f8:b5:81:cb:fb:85:84:e7:dc:fb:
         50:7f:0e:11:a4:a6:4c:85:40:89:79:07:93:e5:87:b2:60:34:
         34:3c:7c:38:88:d9:56:40:00:ad:38:14:ab:e7:4c:eb:5c:1b:
         70:b2:eb:c7:0e:0f:14:8a:eb:6f:62:23:ff:0e:43:32:4f:f4:
         fd:84:ae:9b:21:3d:b8:d3:1c:fe:c9:8c:5c:81:65:ba:80:27:
         3f:98:4e:a8:5c:ad:36:f0:3b:1c:4e:c5:76:51:cc:95:e5:9e:
         33:a9:4c:53:3b:c5:7c:b6:6b:c7:e1:06:06:b1:82:29:71:7f:
         da:a5:81:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org