Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/323830343a323232633a3330303a3a2f34302d3434203d3e20323634353936.roa
File:                     323830343a323232633a3330303a3a2f34302d3434203d3e20323634353936.roa (raw, json)
Hash identifier:          D61aaC8Oj7fjeuxee2ZzbdaD0l5DBImHKCCoWZtfKDA=
Subject key identifier:   15:92:6B:02:CE:72:1A:99:03:A1:04:D8:F7:D9:C9:1C:AB:F0:9C:E2
Certificate issuer:       /CN=4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A
Certificate serial:       39457A3CE2640FD394D3DA8D0901DCA8E4EB42FC
Authority key identifier: 4A:EB:6F:3B:61:C5:B7:82:C9:DA:F5:01:8F:F8:C1:DA:78:64:21:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/323830343a323232633a3330303a3a2f34302d3434203d3e20323634353936.roa
Signing time:             Tue 05 Mar 2024 16:05:53 +0000
ROA not before:           Tue 05 Mar 2024 16:00:53 +0000
ROA not after:            Tue 04 Mar 2025 16:05:53 +0000
asID:                     264596
IP address blocks:        2804:222c:300::/40 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:45:7a:3c:e2:64:0f:d3:94:d3:da:8d:09:01:dc:a8:e4:eb:42:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A
        Validity
            Not Before: Mar  5 16:00:53 2024 GMT
            Not After : Mar  4 16:05:53 2025 GMT
        Subject: CN=15926B02CE721A9903A104D8F7D9C91CABF09CE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:32:0d:ce:17:cc:bf:bb:21:04:d6:6f:51:90:
                    0d:57:70:10:b0:01:d3:87:3a:da:c6:48:ec:c4:dd:
                    ef:21:e5:44:c1:39:fa:13:bf:de:e2:dc:57:30:13:
                    3b:73:b8:05:b9:0e:78:6b:97:8f:22:dd:a8:be:c3:
                    4f:67:3d:a9:94:0d:6f:8f:ba:24:ea:23:d4:ff:66:
                    4b:8f:56:9f:2d:43:aa:87:c5:12:68:c3:4d:73:c4:
                    8e:2f:9b:09:69:2a:0c:3c:f1:5e:18:1a:2a:90:fd:
                    bb:4c:91:fb:67:66:0f:3d:90:b6:cd:c1:2c:c1:f1:
                    b1:ce:0c:b0:ca:d4:4f:4b:0e:e2:31:f8:80:4d:b2:
                    82:88:8e:2a:76:a6:a4:14:52:80:49:d9:9e:01:5f:
                    b8:e8:c3:14:e1:25:70:8f:18:b7:20:a1:ce:bf:3e:
                    36:1c:d3:02:c9:b3:71:ed:62:3d:54:83:69:ba:39:
                    9f:a3:76:3a:01:a6:fa:b2:0f:50:3a:b3:75:2f:3f:
                    4e:7c:60:0a:22:3b:98:ef:48:9a:7c:f1:bd:3c:59:
                    81:d3:53:fa:37:0a:bb:b5:02:ab:58:f2:47:6c:b7:
                    6f:2e:d7:30:84:dd:8a:fb:9e:73:30:3b:14:11:0d:
                    db:c0:11:68:36:c6:8e:e9:92:81:cb:fc:54:77:da:
                    d9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:92:6B:02:CE:72:1A:99:03:A1:04:D8:F7:D9:C9:1C:AB:F0:9C:E2
            X509v3 Authority Key Identifier:
                keyid:4A:EB:6F:3B:61:C5:B7:82:C9:DA:F5:01:8F:F8:C1:DA:78:64:21:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/323830343a323232633a3330303a3a2f34302d3434203d3e20323634353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:222c:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         c5:5e:52:5c:9d:b9:cb:c2:fa:78:c7:f4:bb:9f:ab:37:21:99:
         c8:1b:51:84:6b:90:b8:b7:19:f9:a5:be:44:4d:e8:32:53:44:
         a1:bc:e1:89:64:6d:36:19:80:c3:f9:c7:ec:ef:f0:5b:d9:a6:
         f2:45:e9:17:d4:31:be:9a:5a:5c:72:6b:cb:94:a2:d7:50:f3:
         fa:00:9f:95:2b:bd:de:0e:d3:66:83:a8:69:4c:d1:17:7c:af:
         5e:f2:51:f1:58:2a:a9:4d:c8:a4:12:ac:bc:94:05:ba:1e:f9:
         60:c6:e8:f9:03:23:74:5d:87:b7:65:40:8c:37:e2:49:34:2c:
         9b:0f:72:1c:fd:ef:47:c3:05:6a:c4:6c:b1:3e:3f:a0:52:19:
         83:9f:06:54:b3:69:04:39:86:2a:79:95:5b:d8:bb:a3:0d:89:
         10:1a:84:8e:88:fb:d3:eb:82:96:05:d9:19:03:5d:65:f6:18:
         e6:3c:0f:a1:04:13:4f:b6:4f:5e:39:44:53:d6:7c:94:c6:82:
         eb:e5:94:89:7f:7a:e4:48:4b:39:67:80:93:02:1f:02:c0:98:
         cf:bf:db:02:c8:06:55:fa:ea:54:87:1f:97:19:8e:71:f7:f4:
         7f:6b:ee:57:c7:34:16:16:1b:f9:fc:25:30:f0:a0:ff:d3:e4:
         98:b0:21:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org