Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/323830343a366137343a3a2f33322d3438203d3e20323730333337.roa
File:                     323830343a366137343a3a2f33322d3438203d3e20323730333337.roa (raw, json)
Hash identifier:          hAD4uRLvORgtyGGteKWV50LSDPiyYVjBJ/+5NpoCeqQ=
Subject key identifier:   7D:9D:06:AB:8B:0E:45:10:4A:3D:9F:42:A4:75:DF:B0:7A:FF:5F:CF
Certificate issuer:       /CN=C1CED294CA50A879674BD01DEA0F8AE9F8558FF3
Certificate serial:       1DC99AFB9759DE48678A0291A258FCBA6E01DFB3
Authority key identifier: C1:CE:D2:94:CA:50:A8:79:67:4B:D0:1D:EA:0F:8A:E9:F8:55:8F:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1CED294CA50A879674BD01DEA0F8AE9F8558FF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/323830343a366137343a3a2f33322d3438203d3e20323730333337.roa
Signing time:             Mon 08 May 2023 13:29:59 +0000
ROA not before:           Mon 08 May 2023 13:24:59 +0000
ROA not after:            Mon 06 May 2024 13:29:59 +0000
asID:                     270337
IP address blocks:        2804:6a74::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c9:9a:fb:97:59:de:48:67:8a:02:91:a2:58:fc:ba:6e:01:df:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1CED294CA50A879674BD01DEA0F8AE9F8558FF3
        Validity
            Not Before: May  8 13:24:59 2023 GMT
            Not After : May  6 13:29:59 2024 GMT
        Subject: CN=7D9D06AB8B0E45104A3D9F42A475DFB07AFF5FCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:92:f6:e6:bf:a1:8b:14:2a:0f:35:5e:30:81:
                    e9:b0:b2:27:27:c2:32:71:0c:a0:50:59:44:53:61:
                    f0:8b:d1:b5:fc:62:a0:52:9b:71:4e:b6:79:2a:f5:
                    fb:48:81:54:ef:68:b1:59:b4:83:7a:b1:f2:ee:69:
                    c2:ae:7f:40:8d:8d:59:ed:0c:9b:d6:b5:12:4c:18:
                    40:d8:b3:25:8a:bd:e9:70:64:8d:8a:ee:18:56:c6:
                    1e:da:c1:87:6e:f7:09:52:da:c0:78:de:fe:09:3e:
                    3b:d2:e4:d9:8f:ed:0b:50:a9:50:79:be:d2:89:4f:
                    b2:71:b6:19:e5:3a:6d:2f:cd:db:59:92:f9:d2:8d:
                    ab:6f:55:c7:1d:6a:75:ad:75:99:e9:ab:04:46:78:
                    e5:7d:21:d6:e0:80:83:57:6d:c0:38:bf:5a:60:86:
                    88:87:9e:b3:b1:e3:99:0c:f9:5a:d1:9f:2c:71:e7:
                    76:05:13:1a:b7:d2:62:79:e2:80:cb:21:e6:9a:75:
                    85:3f:5f:54:15:0d:06:75:61:52:5a:aa:cd:e2:9b:
                    79:e0:f5:13:97:88:f0:96:ae:94:d4:03:96:30:e7:
                    2e:73:92:d7:c6:18:c5:b8:fc:ac:67:39:67:3d:47:
                    59:3e:d9:16:ce:74:c6:38:b3:7b:2c:55:86:aa:22:
                    1a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9D:06:AB:8B:0E:45:10:4A:3D:9F:42:A4:75:DF:B0:7A:FF:5F:CF
            X509v3 Authority Key Identifier:
                keyid:C1:CE:D2:94:CA:50:A8:79:67:4B:D0:1D:EA:0F:8A:E9:F8:55:8F:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/C1CED294CA50A879674BD01DEA0F8AE9F8558FF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1CED294CA50A879674BD01DEA0F8AE9F8558FF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/323830343a366137343a3a2f33322d3438203d3e20323730333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a74::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:dc:4e:49:ff:2e:5c:aa:c0:9f:3d:92:3b:e0:6c:28:08:a3:
         1e:d9:fe:4a:0a:39:e6:f6:f5:b1:74:ed:e6:f1:ef:3b:2c:0f:
         23:74:f3:a9:39:09:f5:26:e8:1b:98:59:28:76:12:8a:2b:57:
         8d:fc:52:23:eb:9c:16:0c:49:a5:05:c7:89:e0:38:b9:f3:c7:
         19:82:0c:96:f6:ee:13:1b:13:71:83:5e:b1:c7:68:66:67:e4:
         7e:48:13:5c:c6:f4:7b:83:16:74:f4:de:65:71:a9:4b:41:ec:
         4d:65:bb:a5:5e:1e:10:8e:fa:74:f8:69:62:e8:af:4c:40:31:
         de:ae:4d:b7:a7:b8:47:b0:5a:4d:26:6e:7c:4a:86:7e:fe:47:
         5e:2b:18:0e:6e:3d:be:da:bd:cf:3b:ef:2a:34:01:2f:ed:e6:
         12:76:bb:f8:9a:e0:e3:c2:b3:f4:65:80:fd:0e:23:60:0d:78:
         a9:92:4a:1a:bb:d5:49:e4:ba:35:6c:41:48:02:24:fe:0f:36:
         dc:ae:3f:55:6e:39:ee:03:5e:55:44:44:5a:96:bd:bf:bc:67:
         0c:da:3a:d1:4b:5c:ab:11:6b:7b:f4:df:a3:bc:d1:66:4a:00:
         d9:fb:87:3d:2f:2a:66:a7:ca:38:c5:b2:15:d3:71:4e:22:7d:
         14:72:86:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org