Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AyLnSJhHNLG9zpd91dHeSejMzYKwki6eYSiSXJAmKU72/0/323830343a343637383a3a2f33322d3332203d3e20323636393931.roa
File:                     323830343a343637383a3a2f33322d3332203d3e20323636393931.roa (raw, json)
Hash identifier:          jsDzKzh0DryhUVu5t1JaDDti5OW+zp74HQl78sEMnVo=
Subject key identifier:   A8:51:3A:D0:A0:4A:E8:BD:BF:DB:6E:AD:A1:6E:86:1B:EC:FE:B7:5D
Certificate issuer:       /CN=D35F2557A84EAE6290CDEEE4135352A2C68B46B8
Certificate serial:       07D0C6F4735F69CBB32E413209B4A98777CCC2B7
Authority key identifier: D3:5F:25:57:A8:4E:AE:62:90:CD:EE:E4:13:53:52:A2:C6:8B:46:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D35F2557A84EAE6290CDEEE4135352A2C68B46B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyLnSJhHNLG9zpd91dHeSejMzYKwki6eYSiSXJAmKU72/0/323830343a343637383a3a2f33322d3332203d3e20323636393931.roa
Signing time:             Wed 19 Apr 2023 22:00:00 +0000
ROA not before:           Wed 19 Apr 2023 21:55:00 +0000
ROA not after:            Fri 19 Apr 2024 22:00:00 +0000
asID:                     266991
IP address blocks:        2804:4678::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d0:c6:f4:73:5f:69:cb:b3:2e:41:32:09:b4:a9:87:77:cc:c2:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35F2557A84EAE6290CDEEE4135352A2C68B46B8
        Validity
            Not Before: Apr 19 21:55:00 2023 GMT
            Not After : Apr 19 22:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:31:e6:09:97:f3:cd:56:be:6d:8a:7b:33:73:
                    ba:82:ac:ad:31:a6:db:e0:04:68:4a:1f:7e:76:ab:
                    c2:bc:fb:47:1a:dd:e1:13:15:d9:7b:c8:52:72:69:
                    be:9f:26:32:76:e6:97:d4:ea:09:46:13:b0:ba:1c:
                    ea:ed:3b:ba:65:70:f9:28:19:66:62:fa:46:4e:f5:
                    8b:28:5d:bf:cf:44:6a:1f:1d:0d:2b:7d:85:8b:5a:
                    92:6b:70:30:45:0e:18:3e:f3:e4:34:17:81:be:29:
                    40:7c:75:cc:9e:29:fc:d5:69:94:06:22:86:96:30:
                    9c:41:00:1c:81:a2:00:43:2d:19:af:84:1f:b8:72:
                    ed:98:9b:6b:83:07:27:95:4d:f0:84:c9:87:31:ea:
                    92:b0:ac:e5:18:66:16:0c:a1:34:92:f1:36:39:2f:
                    64:56:90:4c:99:be:53:13:8f:fa:18:bf:8c:e7:41:
                    2a:68:ca:eb:47:bf:e4:99:3c:24:9b:7f:59:a2:d6:
                    c9:93:fa:b5:88:ad:f3:9a:52:f9:44:de:88:77:b0:
                    f6:71:33:c2:c1:37:87:3b:7a:19:8b:47:26:8e:0d:
                    2d:98:94:71:d2:2f:5f:2c:58:12:5a:4a:48:c8:b0:
                    bc:24:dc:f7:c0:b1:ab:d5:cd:1d:46:b6:4b:e3:0f:
                    50:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:51:3A:D0:A0:4A:E8:BD:BF:DB:6E:AD:A1:6E:86:1B:EC:FE:B7:5D
            X509v3 Authority Key Identifier:
                keyid:D3:5F:25:57:A8:4E:AE:62:90:CD:EE:E4:13:53:52:A2:C6:8B:46:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyLnSJhHNLG9zpd91dHeSejMzYKwki6eYSiSXJAmKU72/0/D35F2557A84EAE6290CDEEE4135352A2C68B46B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D35F2557A84EAE6290CDEEE4135352A2C68B46B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyLnSJhHNLG9zpd91dHeSejMzYKwki6eYSiSXJAmKU72/0/323830343a343637383a3a2f33322d3332203d3e20323636393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4678::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:03:49:12:57:34:ee:97:17:58:da:50:0b:60:d3:70:61:f5:
         da:4f:ed:3d:af:84:bd:3a:9d:58:fd:40:83:75:43:53:e6:d6:
         b8:78:2e:0b:b0:b1:81:38:35:cd:16:f3:02:82:fd:54:16:c7:
         45:0e:21:1c:26:b1:40:58:c4:1a:d9:49:44:65:42:70:9f:fd:
         48:22:77:34:e3:af:f9:a5:b7:9a:71:c1:e1:3c:8f:33:0e:0a:
         7e:d8:c4:34:da:5e:f4:f0:69:fa:3e:b1:6e:95:e6:0f:ea:16:
         ee:78:11:83:77:d7:30:6a:26:f9:72:08:51:ed:f4:b0:3c:02:
         3d:c6:e1:33:49:98:8d:b5:1a:e3:32:31:f4:1f:dd:d2:41:8a:
         ab:16:e1:89:df:f5:79:25:26:31:08:61:d6:c2:82:26:85:a2:
         b7:67:da:78:b7:c1:35:bf:96:4e:ed:5b:4f:64:35:18:40:5a:
         ff:ef:7f:6d:77:17:32:fa:7b:02:13:76:05:c5:12:b9:b0:e3:
         b7:a3:66:bb:94:12:f2:f5:6e:18:76:43:94:59:67:2d:96:c2:
         9b:67:3a:56:b2:20:1d:a8:39:23:1e:d9:d7:25:e7:19:f2:63:
         5c:70:b3:5c:18:dc:bd:d4:a6:23:35:5d:2b:33:72:c9:89:99:
         c6:29:05:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:36 2024 by rpki-client on console-ams.rpki-client.org