Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Jgh342HLdQM5GuTVj4ZkLRs53DrBqfEHD8Dx3CaedVo/0/323830343a326361343a3a2f33322d313238203d3e20323635323332.roa
File:                     323830343a326361343a3a2f33322d313238203d3e20323635323332.roa (raw, json)
Hash identifier:          Nt4ZpZpFGuIaXn8UaRa0SNmGwDcgqRQTvf5KI/t23Zc=
Subject key identifier:   A2:3C:33:30:1B:03:B3:0D:85:5F:C2:58:72:ED:1C:2D:CB:5C:7F:C0
Certificate issuer:       /CN=4F43CCFDB2B13BCF78C7C5D0D8BC2961B3AB4B88
Certificate serial:       75217D4D09FA43CB0636F24C4DDA34D76906867A
Authority key identifier: 4F:43:CC:FD:B2:B1:3B:CF:78:C7:C5:D0:D8:BC:29:61:B3:AB:4B:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F43CCFDB2B13BCF78C7C5D0D8BC2961B3AB4B88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Jgh342HLdQM5GuTVj4ZkLRs53DrBqfEHD8Dx3CaedVo/0/323830343a326361343a3a2f33322d313238203d3e20323635323332.roa
Signing time:             Thu 21 Mar 2024 22:09:50 +0000
ROA not before:           Thu 21 Mar 2024 22:04:50 +0000
ROA not after:            Thu 20 Mar 2025 22:09:50 +0000
asID:                     265232
IP address blocks:        2804:2ca4::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:21:7d:4d:09:fa:43:cb:06:36:f2:4c:4d:da:34:d7:69:06:86:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F43CCFDB2B13BCF78C7C5D0D8BC2961B3AB4B88
        Validity
            Not Before: Mar 21 22:04:50 2024 GMT
            Not After : Mar 20 22:09:50 2025 GMT
        Subject: CN=A23C33301B03B30D855FC25872ED1C2DCB5C7FC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:be:ce:b2:01:2d:ca:ad:83:6f:d2:56:f2:45:
                    4f:8d:51:48:26:d5:3d:c3:bd:e8:ae:c9:6b:c7:4a:
                    5d:5f:7e:32:20:17:1a:44:f2:5c:a9:6b:69:ad:c4:
                    6d:6c:a2:94:63:14:15:b5:57:0c:3c:4d:6f:d6:66:
                    b4:95:f4:0d:f4:76:45:4c:21:76:57:26:f8:c9:c7:
                    29:45:78:11:cd:39:5f:6a:6b:ec:71:7c:cd:25:f1:
                    ae:f3:97:ab:c3:07:31:08:a2:01:0d:60:19:3b:9b:
                    21:b1:7a:f7:81:f3:b9:d1:ea:d7:26:8b:98:31:39:
                    d4:fd:a5:19:02:28:16:2f:d0:12:b5:89:35:22:ea:
                    b5:4e:f1:1a:26:c8:64:e0:fd:98:fa:4b:ef:73:ff:
                    33:9c:3d:ac:6d:f8:a8:51:99:c4:93:7c:58:a8:c8:
                    96:5b:ac:2c:85:04:7b:ee:f4:5c:c3:b6:48:f1:14:
                    66:05:3d:ee:a2:25:10:7d:93:26:5f:02:a3:04:6c:
                    ca:24:f9:39:2a:59:3f:e4:f9:18:61:6a:3e:1a:77:
                    b9:58:52:e4:fd:2f:0e:4f:91:04:b5:e9:16:5e:83:
                    dc:e8:7c:24:74:03:d4:80:90:b5:ce:ac:5a:f6:7a:
                    e0:41:fa:92:d0:ef:ca:3b:35:2e:ce:04:54:3f:b7:
                    5a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3C:33:30:1B:03:B3:0D:85:5F:C2:58:72:ED:1C:2D:CB:5C:7F:C0
            X509v3 Authority Key Identifier:
                keyid:4F:43:CC:FD:B2:B1:3B:CF:78:C7:C5:D0:D8:BC:29:61:B3:AB:4B:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Jgh342HLdQM5GuTVj4ZkLRs53DrBqfEHD8Dx3CaedVo/0/4F43CCFDB2B13BCF78C7C5D0D8BC2961B3AB4B88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F43CCFDB2B13BCF78C7C5D0D8BC2961B3AB4B88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Jgh342HLdQM5GuTVj4ZkLRs53DrBqfEHD8Dx3CaedVo/0/323830343a326361343a3a2f33322d313238203d3e20323635323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ca4::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:0e:8a:aa:b5:35:df:4e:8d:cf:9e:de:4b:e2:8a:ae:02:15:
         3d:0e:2d:61:67:98:00:08:e9:d6:f0:d5:bf:76:5b:60:c4:69:
         b5:c6:be:06:24:16:bb:85:d7:b7:48:7a:76:54:95:0d:5a:cc:
         68:57:5f:d4:a6:05:f9:93:29:ed:42:5f:10:fa:08:57:49:6b:
         75:f2:f5:a9:ec:61:a2:4c:71:9d:6f:f3:2e:e2:bc:4c:b4:9b:
         58:3b:de:a6:16:0d:69:84:a0:cb:bb:97:bb:18:eb:fe:dd:a7:
         ef:4f:eb:1b:7a:77:c8:27:ad:c8:23:0f:99:15:02:8f:79:2b:
         7b:0c:22:e3:32:7c:58:79:f8:02:be:95:88:5a:dc:f0:59:2e:
         38:cf:13:89:54:09:56:58:e3:05:41:2a:5a:b0:77:be:20:8f:
         d2:7e:b8:93:13:6e:b2:2a:6f:30:13:3e:eb:8a:30:98:cd:27:
         f9:0f:79:3d:f7:a8:e1:29:44:5a:42:35:e5:e5:b5:6f:e7:b0:
         d0:4a:0e:9d:e1:19:e2:9e:84:81:af:5b:25:2b:2b:40:95:b7:
         82:67:d7:13:e8:05:13:7b:31:1a:c3:f5:e1:75:06:ad:e2:d3:
         c0:67:c0:c0:60:c7:7e:98:37:2c:ad:1d:c0:f8:27:82:db:41:
         ad:06:34:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:38 2024 by rpki-client on console-ams.rpki-client.org