Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0/323830343a3331343a3a2f33322d3438203d3e203631353638.roa
File:                     323830343a3331343a3a2f33322d3438203d3e203631353638.roa (raw, json)
Hash identifier:          ghR/rZ1C6V5V0XMORwXDldtb+UKyqNZw6FHziNu0Umk=
Subject key identifier:   28:E7:E4:B5:59:91:83:C8:06:2A:2A:5A:C6:7B:1F:25:0C:51:56:93
Certificate issuer:       /CN=B410EA8A900BE8EFBF0B269413585DCC9799F312
Certificate serial:       274BCA5394019DFDDEB50FF954515B8C0006B90F
Authority key identifier: B4:10:EA:8A:90:0B:E8:EF:BF:0B:26:94:13:58:5D:CC:97:99:F3:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B410EA8A900BE8EFBF0B269413585DCC9799F312.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0/323830343a3331343a3a2f33322d3438203d3e203631353638.roa
Signing time:             Mon 02 Oct 2023 18:39:56 +0000
ROA not before:           Mon 02 Oct 2023 18:34:56 +0000
ROA not after:            Mon 30 Sep 2024 18:39:56 +0000
asID:                     61568
IP address blocks:        2804:314::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:4b:ca:53:94:01:9d:fd:de:b5:0f:f9:54:51:5b:8c:00:06:b9:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B410EA8A900BE8EFBF0B269413585DCC9799F312
        Validity
            Not Before: Oct  2 18:34:56 2023 GMT
            Not After : Sep 30 18:39:56 2024 GMT
        Subject: CN=28E7E4B5599183C8062A2A5AC67B1F250C515693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:da:73:79:4d:ac:64:27:21:45:f1:f2:ae:4e:
                    41:b4:2e:eb:6a:bb:05:a9:40:2f:33:fa:c3:05:4c:
                    a0:fa:9b:6c:fd:a5:70:56:a1:2e:d7:c9:0a:09:e2:
                    9c:f8:5a:0d:e8:14:b5:95:9a:9e:7c:13:ea:c8:ee:
                    8c:c7:c1:7d:76:61:b6:c8:9e:65:57:cf:39:cb:61:
                    e8:09:57:f4:ee:88:f7:88:26:84:ff:a3:99:14:37:
                    13:91:8b:cd:c9:b0:71:6f:83:34:e2:aa:dd:0f:49:
                    53:96:87:ba:4f:a9:d5:11:f9:fc:7f:4d:c9:23:5b:
                    83:cb:56:2e:ee:f7:b6:b2:0b:44:fa:6c:b8:9e:22:
                    18:16:e7:97:ef:83:e7:22:10:cc:0d:70:b2:d4:60:
                    31:e3:d2:4f:d6:d8:9b:e7:3d:26:05:70:df:2d:75:
                    90:f4:c4:a6:23:a2:95:fb:af:27:71:02:e0:e8:73:
                    78:18:19:71:3b:fd:75:21:19:1d:df:b6:65:67:94:
                    12:7c:57:db:32:a1:f3:5d:63:72:9f:d8:3c:b3:fa:
                    e8:fb:39:68:38:8f:20:b7:25:87:cf:8b:f9:79:3f:
                    ae:5c:7b:f5:66:8d:51:c6:bd:18:41:45:26:8f:20:
                    d4:16:67:2b:98:36:76:af:48:66:b5:b2:73:93:db:
                    00:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E7:E4:B5:59:91:83:C8:06:2A:2A:5A:C6:7B:1F:25:0C:51:56:93
            X509v3 Authority Key Identifier:
                keyid:B4:10:EA:8A:90:0B:E8:EF:BF:0B:26:94:13:58:5D:CC:97:99:F3:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0/B410EA8A900BE8EFBF0B269413585DCC9799F312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B410EA8A900BE8EFBF0B269413585DCC9799F312.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0/323830343a3331343a3a2f33322d3438203d3e203631353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:314::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:30:5a:a7:6c:14:3e:d1:bc:9d:89:eb:b0:0b:71:66:f4:b8:
         85:e9:03:73:b2:fd:54:26:ba:93:73:01:43:ed:75:1b:b1:45:
         12:6c:53:c0:25:8d:8e:fe:9b:4d:0c:05:9d:9f:e0:a5:30:a0:
         00:48:cf:2e:cf:82:d2:50:32:26:62:60:f6:72:54:29:60:f8:
         5a:24:15:50:e2:c8:40:30:cb:f8:13:a7:26:1f:aa:50:cc:b5:
         1e:70:98:6a:ab:6e:70:a9:22:8a:98:44:6f:9f:37:96:3b:2a:
         d0:74:0b:b2:df:e1:98:d3:48:8d:38:72:2c:68:33:f1:9e:99:
         97:ca:c1:cf:1f:31:cc:3e:91:ae:e8:33:72:d0:e0:38:a4:5f:
         c5:03:29:37:bf:30:84:4e:47:10:a2:47:c9:06:46:80:60:da:
         7e:c4:72:c3:aa:f4:09:2b:1b:5a:0e:2a:6b:b3:36:6a:f7:d5:
         a5:c5:67:77:45:2f:ad:d9:86:14:92:b8:f2:0c:52:43:68:b2:
         fe:1a:9a:d8:1e:ca:4c:4f:2d:f0:15:99:32:c5:65:45:05:6e:
         80:fc:17:73:3d:c6:70:bf:3a:80:24:22:81:a6:38:ef:c4:d7:
         50:d4:73:88:33:c6:9a:ca:50:50:98:12:09:ad:30:24:4d:98:
         04:83:67:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org