Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYN45762RyUJyrXfJ37vg2fh8kUJJAEGuqsx416udTBv/0/323830343a333865633a3a2f33322d3438203d3e20323636353130.roa
File:                     323830343a333865633a3a2f33322d3438203d3e20323636353130.roa (raw, json)
Hash identifier:          NSiGsuepbAlFJJ5eOiz6CZi68fDpal90UI7O9kDPlvk=
Subject key identifier:   4E:92:5B:E8:C9:23:C2:AD:27:96:CE:A0:65:1F:6A:E1:EE:E8:44:E7
Certificate issuer:       /CN=D0192C20FA3780F24663DFCDF35C8C40255F1ABE
Certificate serial:       417023999207F368C5F3C42D496EC00A98E25300
Authority key identifier: D0:19:2C:20:FA:37:80:F2:46:63:DF:CD:F3:5C:8C:40:25:5F:1A:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0192C20FA3780F24663DFCDF35C8C40255F1ABE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYN45762RyUJyrXfJ37vg2fh8kUJJAEGuqsx416udTBv/0/323830343a333865633a3a2f33322d3438203d3e20323636353130.roa
Signing time:             Mon 01 Jan 2024 19:01:20 +0000
ROA not before:           Mon 01 Jan 2024 18:56:20 +0000
ROA not after:            Mon 30 Dec 2024 19:01:20 +0000
asID:                     266510
IP address blocks:        2804:38ec::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:70:23:99:92:07:f3:68:c5:f3:c4:2d:49:6e:c0:0a:98:e2:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0192C20FA3780F24663DFCDF35C8C40255F1ABE
        Validity
            Not Before: Jan  1 18:56:20 2024 GMT
            Not After : Dec 30 19:01:20 2024 GMT
        Subject: CN=4E925BE8C923C2AD2796CEA0651F6AE1EEE844E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:26:89:db:ff:11:2c:89:d2:82:3c:22:bf:42:
                    10:4a:d3:5b:37:f4:0e:60:64:5a:a1:e9:d5:7a:ee:
                    30:1a:3a:98:45:d3:14:b6:0f:e4:9f:ae:5b:71:43:
                    1a:24:c4:b9:ac:b7:76:45:8d:79:9a:26:bb:47:e6:
                    b1:27:9a:38:78:bd:6e:9d:4f:52:5d:1a:73:fa:96:
                    35:38:30:8d:e8:42:a4:d6:62:c1:3c:6c:c8:98:ac:
                    d9:92:92:a7:ff:1f:e6:2b:a2:e1:e5:8a:a7:f5:84:
                    0d:69:7b:5b:e4:ef:64:66:0a:3d:8b:91:19:10:02:
                    2a:9b:9f:70:c8:10:5c:62:aa:6b:6a:a0:87:03:77:
                    ba:33:ee:2a:d9:15:84:a7:b3:c3:03:53:3c:26:ba:
                    69:e7:28:78:2c:cd:cd:21:da:82:e6:54:5c:aa:7c:
                    6e:80:0d:37:da:2b:22:5a:e1:86:ab:e1:0f:ad:7c:
                    a5:f0:4e:f7:16:4f:41:1d:b0:cd:d2:09:d7:7a:41:
                    25:6c:dd:85:a9:f0:04:c7:ba:88:ec:f4:c5:6c:a3:
                    2e:4f:bb:f1:05:f7:13:65:c3:cf:b8:37:58:85:db:
                    75:e7:38:bc:60:59:54:33:b0:1b:32:3d:b9:9a:cf:
                    4e:2a:b6:b3:8b:a8:5f:23:3d:aa:15:36:48:5b:41:
                    47:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:92:5B:E8:C9:23:C2:AD:27:96:CE:A0:65:1F:6A:E1:EE:E8:44:E7
            X509v3 Authority Key Identifier:
                keyid:D0:19:2C:20:FA:37:80:F2:46:63:DF:CD:F3:5C:8C:40:25:5F:1A:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYN45762RyUJyrXfJ37vg2fh8kUJJAEGuqsx416udTBv/0/D0192C20FA3780F24663DFCDF35C8C40255F1ABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0192C20FA3780F24663DFCDF35C8C40255F1ABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYN45762RyUJyrXfJ37vg2fh8kUJJAEGuqsx416udTBv/0/323830343a333865633a3a2f33322d3438203d3e20323636353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:40:a5:78:c0:4b:21:1a:65:eb:bd:b3:f0:54:b2:da:96:e5:
         0f:17:e4:37:2d:3e:8f:ac:19:18:eb:5e:88:ce:8c:69:20:e7:
         38:57:81:07:06:c3:40:c7:ab:91:43:b0:e3:3e:bb:84:fa:d3:
         f9:59:c9:70:cc:4c:6a:31:1c:44:6c:a9:64:60:d2:21:f7:be:
         77:09:b2:84:a7:8d:b6:73:26:4f:78:cd:33:84:a3:2e:72:d8:
         ca:40:10:57:89:b5:76:c5:08:80:93:7f:67:b5:3f:67:f8:c5:
         84:28:4f:de:ba:0f:11:08:e1:b9:ba:cb:f7:c0:ee:11:67:4f:
         0f:e2:55:d5:c8:23:08:fb:cc:48:da:c3:7a:1e:d7:d8:7a:08:
         f4:1d:b5:26:87:fa:17:93:fd:2f:06:51:1d:95:34:ae:d6:c0:
         2e:fb:5f:f5:d8:c5:ce:d8:d8:2e:20:6c:83:f9:a0:89:62:54:
         1b:2c:a2:59:5e:00:fa:86:10:6b:0e:06:b0:bb:cd:c2:d6:20:
         92:64:bf:a9:8f:6d:09:f2:26:4b:e8:5d:5f:5d:83:47:b2:72:
         23:9b:65:62:ec:bb:c0:ac:98:80:10:57:ea:a5:1b:dd:b6:99:
         d9:84:97:9f:19:9d:4e:b7:9b:1c:6f:95:51:15:36:75:23:2b:
         dc:20:cf:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org