Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/323830343a366637383a3a2f33322d3332203d3e20323730363632.roa
File:                     323830343a366637383a3a2f33322d3332203d3e20323730363632.roa (raw, json)
Hash identifier:          FyrIm1JoIVlRNvfjo9i3TCHTMeVQtXaZbEAtGOFgzpY=
Subject key identifier:   1E:7E:43:66:90:D6:05:8A:17:2E:9F:1F:8D:51:83:8B:61:EC:2F:ED
Certificate issuer:       /CN=4D3E59C0293D929E5ECB4594008B198CCFDA9543
Certificate serial:       13F37B29A946FB9832D6C7AE28751D2DFAD1D2FA
Authority key identifier: 4D:3E:59:C0:29:3D:92:9E:5E:CB:45:94:00:8B:19:8C:CF:DA:95:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D3E59C0293D929E5ECB4594008B198CCFDA9543.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/323830343a366637383a3a2f33322d3332203d3e20323730363632.roa
Signing time:             Mon 09 Oct 2023 13:48:44 +0000
ROA not before:           Mon 09 Oct 2023 13:43:44 +0000
ROA not after:            Mon 07 Oct 2024 13:48:44 +0000
asID:                     270662
IP address blocks:        2804:6f78::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f3:7b:29:a9:46:fb:98:32:d6:c7:ae:28:75:1d:2d:fa:d1:d2:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D3E59C0293D929E5ECB4594008B198CCFDA9543
        Validity
            Not Before: Oct  9 13:43:44 2023 GMT
            Not After : Oct  7 13:48:44 2024 GMT
        Subject: CN=1E7E436690D6058A172E9F1F8D51838B61EC2FED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:dc:cc:c9:1b:1e:8b:29:6b:2b:62:21:5b:52:
                    d1:88:46:3c:82:76:be:8c:30:81:47:09:af:7d:19:
                    03:d0:48:25:cd:82:82:96:a3:c7:b3:81:cc:c9:b1:
                    8a:b7:0e:6d:4f:74:54:11:42:1c:c6:5d:e5:ca:da:
                    09:9c:85:ec:8b:cf:a7:ef:52:97:34:7a:85:9b:6e:
                    ef:93:3d:fa:db:5e:b4:33:98:db:b8:8b:1b:f1:1f:
                    35:71:93:b1:d0:ba:1a:9a:a3:c5:20:de:2b:aa:58:
                    6f:5b:a5:7a:20:68:05:f5:c3:c7:7b:d1:42:53:a7:
                    c7:3a:61:55:a2:df:b7:c6:a5:29:af:8c:98:80:47:
                    f9:6e:21:e5:4f:cf:fc:65:95:f5:40:fa:df:15:1a:
                    6d:82:7a:02:f6:dc:c2:3a:88:07:16:d1:58:52:51:
                    9c:7d:d7:76:81:6e:fa:19:7f:be:1c:e1:f9:5b:44:
                    38:aa:11:88:39:95:42:0e:89:c7:a2:d4:fc:ac:83:
                    ee:53:5d:98:85:1d:bc:a2:84:9e:4e:57:3c:69:08:
                    d5:74:eb:ab:97:76:ca:b8:10:64:0a:7e:d9:84:fa:
                    fd:dd:50:f1:03:81:96:83:91:cd:c6:73:d1:84:7c:
                    2e:57:54:40:ea:4c:6e:47:7c:77:eb:a4:98:9f:a4:
                    51:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7E:43:66:90:D6:05:8A:17:2E:9F:1F:8D:51:83:8B:61:EC:2F:ED
            X509v3 Authority Key Identifier:
                keyid:4D:3E:59:C0:29:3D:92:9E:5E:CB:45:94:00:8B:19:8C:CF:DA:95:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/4D3E59C0293D929E5ECB4594008B198CCFDA9543.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D3E59C0293D929E5ECB4594008B198CCFDA9543.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/323830343a366637383a3a2f33322d3332203d3e20323730363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f78::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:c9:60:a8:ca:f5:bc:a8:4b:1f:5c:c4:0c:fe:69:88:c1:b4:
         f1:e4:b2:20:f6:ef:d9:8e:c8:fc:33:9e:01:bc:50:d6:92:d6:
         01:5a:79:94:a1:ae:b6:d6:f1:a7:df:c8:6a:cb:04:85:04:1e:
         ea:8f:a8:0a:b9:9d:5c:74:30:81:e0:d0:c1:94:6e:67:51:4e:
         4d:41:20:d8:9d:e7:9e:13:fb:2d:04:4e:73:69:8a:7a:32:77:
         c0:0b:42:57:82:4a:09:a2:d4:67:bb:ee:e4:e9:d0:ed:8c:cc:
         92:63:87:ae:7b:4b:b7:fc:e6:6f:0e:8b:13:7f:a2:e2:5f:49:
         f7:0d:17:50:64:98:35:d7:21:00:58:45:b6:37:bd:fd:ed:9d:
         c9:6a:b5:d4:54:20:fb:7e:4e:c6:6b:f3:d3:01:4e:c0:c2:d6:
         8c:52:0d:94:8a:51:06:8e:02:3f:77:86:08:43:2a:24:07:ef:
         3a:28:59:43:ff:e8:ba:0b:fb:6b:50:c7:de:e6:fb:a0:28:64:
         9d:33:ca:3c:c4:ff:05:37:8d:91:a6:a4:21:e2:a9:b0:85:ad:
         c2:d8:a0:64:f7:1b:1b:c9:cf:f7:b0:0b:1f:b5:8c:ad:ab:4c:
         e0:ed:00:3d:65:31:d9:d8:20:9e:e9:45:c6:74:97:e6:7e:40:
         41:71:1b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:02 2024 by rpki-client on console-ams.rpki-client.org