Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BD4mdRQCQoWtfVgfTnowtuv255XNxdnXzrL1tAXUmSZc/0/323830343a343865303a3a2f33322d3334203d3e20323637313530.roa
File:                     323830343a343865303a3a2f33322d3334203d3e20323637313530.roa (raw, json)
Hash identifier:          FRmglL6pEILPtXy3Udk9gkk+zykaPT57SceHqHRuoz8=
Subject key identifier:   DC:1D:12:92:67:4C:0C:FB:78:2E:96:D5:91:69:81:11:C3:D0:DC:7E
Certificate issuer:       /CN=64A244C4B676D82A15273A2EF98BF037D4356502
Certificate serial:       098EAA9B74760185DDD081E4698F9CD08AB4ED2A
Authority key identifier: 64:A2:44:C4:B6:76:D8:2A:15:27:3A:2E:F9:8B:F0:37:D4:35:65:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64A244C4B676D82A15273A2EF98BF037D4356502.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BD4mdRQCQoWtfVgfTnowtuv255XNxdnXzrL1tAXUmSZc/0/323830343a343865303a3a2f33322d3334203d3e20323637313530.roa
Signing time:             Thu 19 Jan 2023 13:10:00 +0000
ROA not before:           Thu 19 Jan 2023 13:05:00 +0000
ROA not after:            Thu 18 Jan 2024 13:10:00 +0000
asID:                     267150
IP address blocks:        2804:48e0::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:8e:aa:9b:74:76:01:85:dd:d0:81:e4:69:8f:9c:d0:8a:b4:ed:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64A244C4B676D82A15273A2EF98BF037D4356502
        Validity
            Not Before: Jan 19 13:05:00 2023 GMT
            Not After : Jan 18 13:10:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e0:6c:86:6f:e6:a9:8f:cb:f2:4c:15:35:2c:
                    b5:05:ad:e8:47:93:34:33:17:c4:17:82:d2:93:dc:
                    4a:d8:0b:a2:f6:b2:3d:ee:f8:0a:e0:07:d3:77:d9:
                    64:eb:20:86:8f:7c:a9:43:f7:9a:87:a9:78:66:25:
                    a4:77:2c:1e:a1:56:20:10:60:f0:a2:6d:fe:4d:e7:
                    97:96:ea:d3:e2:02:97:a4:e1:d1:52:64:4f:f3:1a:
                    89:53:d7:6f:28:95:bc:ed:17:a3:c3:fe:9a:c9:f8:
                    1e:5f:1e:23:25:f7:26:f5:08:c7:37:35:e4:60:f4:
                    be:a4:7e:21:10:75:84:67:38:36:63:3d:78:46:94:
                    3b:fe:b3:7b:e9:27:a4:6a:41:8d:92:be:c8:8e:48:
                    56:55:6b:e2:8e:c2:da:7d:2f:73:92:4b:8e:30:09:
                    1a:92:c3:e1:79:ef:1f:89:66:42:7e:ec:17:27:9f:
                    07:2f:48:c7:79:6b:f8:b0:45:5d:76:fe:9c:15:c3:
                    51:b9:72:4d:91:50:87:4d:f2:d0:d3:e2:5b:47:cb:
                    2b:b6:d5:a6:ad:c1:29:50:75:c8:75:8c:39:b0:48:
                    d8:34:e8:23:ce:5b:73:e1:b8:c6:6e:09:03:93:d6:
                    0c:25:ee:19:36:c7:24:70:11:cf:fa:31:45:69:99:
                    79:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:1D:12:92:67:4C:0C:FB:78:2E:96:D5:91:69:81:11:C3:D0:DC:7E
            X509v3 Authority Key Identifier:
                keyid:64:A2:44:C4:B6:76:D8:2A:15:27:3A:2E:F9:8B:F0:37:D4:35:65:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BD4mdRQCQoWtfVgfTnowtuv255XNxdnXzrL1tAXUmSZc/0/64A244C4B676D82A15273A2EF98BF037D4356502.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64A244C4B676D82A15273A2EF98BF037D4356502.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BD4mdRQCQoWtfVgfTnowtuv255XNxdnXzrL1tAXUmSZc/0/323830343a343865303a3a2f33322d3334203d3e20323637313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:46:44:23:c3:c8:a4:40:9c:53:e2:d3:94:ff:78:41:47:f9:
         47:49:84:99:c5:67:01:b6:b3:d1:89:42:7c:10:93:e5:c3:f4:
         ff:1a:b6:94:b3:16:fd:77:49:de:e7:4e:1f:2c:16:cf:cf:4f:
         ae:24:ef:56:9a:c1:7c:f8:5a:dc:11:d1:5d:ce:1c:5f:f9:f4:
         c3:9f:78:bc:29:39:a6:2e:22:41:d8:22:9a:2c:a7:9a:03:d0:
         96:9c:3b:0c:ea:e5:85:8b:ae:a5:3f:b9:dc:56:6c:6f:36:62:
         7c:3c:74:5e:b3:e4:79:10:be:73:ff:da:5d:ae:a0:b8:2b:2a:
         3b:42:cf:d5:eb:98:f2:fc:1f:36:9c:4f:34:ae:a4:78:c3:02:
         6d:47:a9:62:36:f4:fb:2c:14:88:3f:95:53:e8:a9:54:84:8f:
         36:92:46:cf:03:c2:87:ff:0d:7a:4f:7a:eb:fc:ca:4f:4e:16:
         cc:74:41:39:08:cc:0d:71:18:1d:e1:db:cc:91:17:7f:2b:b9:
         3a:5a:1a:84:3a:bb:d6:7a:e7:7b:f7:9f:84:53:14:b8:46:6c:
         49:0f:b0:0e:4e:1f:b3:5b:98:2c:28:9a:be:42:6e:c0:79:5c:
         0e:e6:70:e0:75:3d:a0:e6:79:43:6a:4f:ff:2e:1e:94:06:f8:
         76:ba:2f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org