Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/1/323830343a346638633a3a2f33322d3438203d3e20323638333333.roa
File:                     323830343a346638633a3a2f33322d3438203d3e20323638333333.roa (raw, json)
Hash identifier:          RbFZmU5QSte/rsxPgSXyPEX6HMdrynehH7FB9tVRCJg=
Subject key identifier:   28:B9:77:FC:B1:27:66:CE:1C:DF:4A:F5:2C:DD:C5:D0:3A:39:6E:78
Certificate issuer:       /CN=E43F929F1A53246574F0400683594164F34379B9
Certificate serial:       158FADE3A3B19B0C1B2AE8D57B7E7C4C049B8177
Authority key identifier: E4:3F:92:9F:1A:53:24:65:74:F0:40:06:83:59:41:64:F3:43:79:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43F929F1A53246574F0400683594164F34379B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/1/323830343a346638633a3a2f33322d3438203d3e20323638333333.roa
Signing time:             Fri 05 Apr 2024 05:58:16 +0000
ROA not before:           Fri 05 Apr 2024 05:53:16 +0000
ROA not after:            Fri 04 Apr 2025 05:58:16 +0000
asID:                     268333
IP address blocks:        2804:4f8c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:8f:ad:e3:a3:b1:9b:0c:1b:2a:e8:d5:7b:7e:7c:4c:04:9b:81:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E43F929F1A53246574F0400683594164F34379B9
        Validity
            Not Before: Apr  5 05:53:16 2024 GMT
            Not After : Apr  4 05:58:16 2025 GMT
        Subject: CN=28B977FCB12766CE1CDF4AF52CDDC5D03A396E78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:80:89:11:99:1c:dc:4a:82:ff:8b:02:ef:7d:
                    a7:3e:92:77:ec:91:fc:e3:3c:8f:0b:ce:99:c8:bd:
                    e7:3f:34:f3:46:ce:8d:87:d9:6c:31:be:56:15:97:
                    ab:39:05:62:8e:e5:f0:94:47:9e:ff:a5:ef:82:ac:
                    a1:b4:59:69:56:ff:48:96:93:fe:d0:0d:3e:01:98:
                    e9:c4:67:70:d2:37:47:dc:60:39:07:97:2b:37:7a:
                    9f:72:67:04:ab:ad:5a:ea:e1:31:0c:4c:3a:35:65:
                    12:2c:73:ea:61:93:31:21:07:a9:26:44:e5:22:9d:
                    ee:10:18:87:30:6e:1a:70:f7:ff:d6:1b:d9:e2:0b:
                    60:c5:97:3f:2c:28:4f:74:76:19:13:25:3c:94:9e:
                    f9:56:ce:5b:fa:67:60:8c:8c:1d:b5:aa:c1:b5:19:
                    62:95:86:e6:f1:19:d2:29:dd:32:16:3f:a3:03:26:
                    9a:1b:25:7f:80:a3:5d:30:11:d1:7a:2e:a6:09:67:
                    91:0e:ee:1d:96:48:ab:70:6d:82:9e:d6:72:bc:cf:
                    63:88:a0:da:af:53:f3:55:2b:10:49:ad:e0:f8:5f:
                    1b:9d:af:93:91:b7:5b:15:d3:cd:9d:38:15:3e:fb:
                    79:ec:35:a7:b9:70:17:e9:47:08:32:17:d1:01:e0:
                    90:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B9:77:FC:B1:27:66:CE:1C:DF:4A:F5:2C:DD:C5:D0:3A:39:6E:78
            X509v3 Authority Key Identifier:
                keyid:E4:3F:92:9F:1A:53:24:65:74:F0:40:06:83:59:41:64:F3:43:79:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/1/E43F929F1A53246574F0400683594164F34379B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43F929F1A53246574F0400683594164F34379B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/1/323830343a346638633a3a2f33322d3438203d3e20323638333333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:1d:e7:97:15:bd:ff:de:1b:e4:48:f7:4b:e8:40:47:82:6a:
         b3:a8:81:f6:f0:2d:6d:15:f0:43:c9:75:cc:97:f9:dd:2d:d4:
         30:b9:90:26:1e:e3:3d:f3:59:da:99:75:82:ed:b7:30:2a:ea:
         ff:bf:d8:67:e9:27:ce:96:aa:a3:70:a2:12:0c:ad:71:06:dd:
         10:1e:c4:15:12:a3:a1:28:36:d5:ee:e3:3c:f1:db:2f:d1:53:
         0f:d8:82:34:a5:4c:74:2a:86:66:5e:44:9a:3b:f5:df:fc:89:
         4c:f9:89:64:39:d4:3d:e4:4c:af:7a:f8:19:8d:67:8c:d9:05:
         c1:7d:f7:1f:06:30:15:82:c8:e0:ab:1b:32:6f:45:68:f9:c6:
         6c:b3:d0:a0:85:38:27:84:22:2d:97:23:ee:eb:4a:c6:83:0e:
         2e:a8:af:a7:60:71:8f:d8:51:3e:a4:a9:d3:74:e2:9f:b5:b9:
         8e:37:7c:7d:39:7b:63:a5:4f:03:40:f7:49:8d:0c:3e:2e:df:
         93:a4:3d:30:de:b2:88:10:c4:3f:3d:ff:4b:3a:ee:0d:b3:8f:
         b2:c2:ca:a1:ec:d9:55:8e:19:da:54:7f:a4:d8:76:aa:f0:32:
         58:3a:68:52:ea:83:c9:72:6d:72:68:b5:d2:b1:ac:c7:33:84:
         b6:ec:43:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 19:41:53 2024 by rpki-client on console-fra.rpki-client.org