Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0/323830343a3331343a3a2f33322d313238203d3e203631353638.roa
File:                     323830343a3331343a3a2f33322d313238203d3e203631353638.roa (raw, json)
Hash identifier:          kvjoPERM9Kzn8BJ0rn6rhEidZu1/1vdhs51eoLE8WAs=
Subject key identifier:   22:A5:BA:ED:1D:B7:F7:56:0B:B0:20:D2:C0:E1:9F:5C:80:39:D9:6C
Certificate issuer:       /CN=B410EA8A900BE8EFBF0B269413585DCC9799F312
Certificate serial:       43E6D52C76DBBB69A826B4C280257B9BA14E8549
Authority key identifier: B4:10:EA:8A:90:0B:E8:EF:BF:0B:26:94:13:58:5D:CC:97:99:F3:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B410EA8A900BE8EFBF0B269413585DCC9799F312.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0/323830343a3331343a3a2f33322d313238203d3e203631353638.roa
Signing time:             Fri 06 Jan 2023 12:51:44 +0000
ROA not before:           Fri 06 Jan 2023 12:46:44 +0000
ROA not after:            Fri 05 Jan 2024 12:51:44 +0000
asID:                     61568
IP address blocks:        2804:314::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e6:d5:2c:76:db:bb:69:a8:26:b4:c2:80:25:7b:9b:a1:4e:85:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B410EA8A900BE8EFBF0B269413585DCC9799F312
        Validity
            Not Before: Jan  6 12:46:44 2023 GMT
            Not After : Jan  5 12:51:44 2024 GMT
        Subject: CN=22A5BAED1DB7F7560BB020D2C0E19F5C8039D96C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9b:1a:2f:85:b5:77:f3:87:bf:17:71:0b:c1:
                    09:87:a5:8d:6f:95:64:ed:48:c1:73:3a:9f:93:fc:
                    7a:85:bb:3b:05:e7:a4:24:97:81:db:54:55:a9:26:
                    b3:16:b5:70:79:e5:ba:16:83:04:93:5e:b3:08:04:
                    6d:58:c9:7d:c5:dd:ab:ea:2d:fa:73:f0:8f:4e:97:
                    2d:66:a1:0d:e9:60:d2:44:39:8a:72:c9:ab:c1:c8:
                    01:c4:61:d1:a5:30:ef:64:64:9b:12:c0:b6:39:83:
                    c4:3c:1b:d7:17:7d:dc:23:ec:01:e4:8f:b9:98:ab:
                    51:fb:58:95:e1:58:24:06:08:c7:61:64:d1:33:13:
                    0f:2c:34:03:b8:9e:af:ae:22:60:92:d8:8f:72:50:
                    7e:61:52:4e:09:9a:59:6b:ad:29:70:d6:5a:68:1c:
                    45:4f:1e:77:cb:e1:0b:81:43:36:06:26:78:3b:93:
                    35:b2:c8:f1:af:6c:45:20:76:75:62:e8:87:2f:92:
                    3b:ab:ab:e4:e4:bf:30:3c:ff:fd:08:07:cb:ba:6b:
                    27:bd:de:d3:41:5e:ae:c8:ca:a5:bc:da:df:8c:7d:
                    78:7e:da:46:02:51:b6:33:c9:0b:ce:8b:8a:a4:a1:
                    cd:6a:10:98:fe:bb:4d:46:c4:e2:7a:14:ba:6d:79:
                    41:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A5:BA:ED:1D:B7:F7:56:0B:B0:20:D2:C0:E1:9F:5C:80:39:D9:6C
            X509v3 Authority Key Identifier:
                keyid:B4:10:EA:8A:90:0B:E8:EF:BF:0B:26:94:13:58:5D:CC:97:99:F3:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0/B410EA8A900BE8EFBF0B269413585DCC9799F312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B410EA8A900BE8EFBF0B269413585DCC9799F312.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0/323830343a3331343a3a2f33322d313238203d3e203631353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:314::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:74:e6:93:cc:a9:83:23:5a:99:ca:da:fc:ef:4d:9e:89:07:
         52:19:ff:c2:74:0f:ca:03:4a:97:3e:97:c4:44:ed:5d:12:b4:
         4b:4f:cb:a0:d0:dd:34:99:90:08:3b:b7:b8:d2:14:12:0b:1f:
         9d:08:a3:52:06:62:17:09:c0:a4:4c:41:59:66:f7:13:3e:fd:
         04:5c:e7:fb:2d:8a:8d:68:21:b9:fb:d6:59:93:79:0c:95:00:
         bd:76:3f:6d:b1:7f:a5:8e:e6:8a:ef:81:db:bc:d5:0b:08:38:
         ef:5a:59:08:97:37:53:1d:9e:72:a4:a2:48:0e:35:e7:67:32:
         df:81:b8:a4:8b:d8:73:76:b2:e2:df:b4:fe:de:43:f5:71:fc:
         1e:f1:6f:5f:78:ff:49:67:a4:48:7d:c5:6b:cc:ab:53:21:c7:
         2f:39:49:5d:83:4c:51:f9:58:63:2e:06:fe:7d:97:2f:f0:76:
         ec:c6:0c:ed:99:93:36:ba:86:09:70:fc:3d:a8:ec:e7:e5:0f:
         a7:84:3e:b5:b2:2f:4c:3f:36:cb:8a:a2:78:37:e5:c0:91:74:
         e1:37:fa:e0:72:f8:80:d5:9f:70:f9:fa:84:4b:0a:e0:4c:d2:
         8f:86:e0:23:41:28:ff:de:54:16:a8:c2:68:79:d1:f6:31:1e:
         53:5c:6f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org