Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/1/323830343a336262343a3a2f33322d3438203d3e20323636313636.roa
File:                     323830343a336262343a3a2f33322d3438203d3e20323636313636.roa (raw, json)
Hash identifier:          65Otm86Ofy365u7XxbNH9BSVq/dfoNH5gNPGX5twN4g=
Subject key identifier:   1E:94:A1:1E:FC:18:B0:BB:2A:BB:77:59:B7:B6:64:A7:B9:9A:27:02
Certificate issuer:       /CN=C45BE1EABA367C0B81A07848E5BDE00DAED3160E
Certificate serial:       06F8E776BCBB1FA26EAD2D50353DAAB55D7D96AD
Authority key identifier: C4:5B:E1:EA:BA:36:7C:0B:81:A0:78:48:E5:BD:E0:0D:AE:D3:16:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C45BE1EABA367C0B81A07848E5BDE00DAED3160E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/1/323830343a336262343a3a2f33322d3438203d3e20323636313636.roa
Signing time:             Thu 04 Apr 2024 15:35:46 +0000
ROA not before:           Thu 04 Apr 2024 15:30:46 +0000
ROA not after:            Thu 03 Apr 2025 15:35:46 +0000
asID:                     266166
IP address blocks:        2804:3bb4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f8:e7:76:bc:bb:1f:a2:6e:ad:2d:50:35:3d:aa:b5:5d:7d:96:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C45BE1EABA367C0B81A07848E5BDE00DAED3160E
        Validity
            Not Before: Apr  4 15:30:46 2024 GMT
            Not After : Apr  3 15:35:46 2025 GMT
        Subject: CN=1E94A11EFC18B0BB2ABB7759B7B664A7B99A2702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e7:e8:c2:d5:bd:07:a2:74:64:42:fd:b9:d3:
                    3f:8a:43:9c:c0:24:47:7b:eb:ab:ab:5f:7c:49:b1:
                    fa:db:61:33:0f:88:d5:9a:6e:c0:b0:cc:6e:ff:91:
                    95:7e:08:db:06:91:c9:05:8f:f0:2f:01:61:63:24:
                    7e:4c:de:69:75:43:dc:04:c0:99:b3:5e:a3:55:c8:
                    57:c4:2f:e2:64:f3:6c:4d:82:bb:7b:d3:1d:b4:18:
                    11:f0:90:18:c3:86:e0:9c:81:8a:84:2a:a6:0f:66:
                    e5:c7:3c:29:2b:16:1e:35:7f:02:a3:22:15:00:b6:
                    4b:85:1a:8b:40:c0:0f:3c:52:e7:77:67:81:87:1d:
                    68:ac:23:8f:05:2e:24:50:35:33:60:eb:67:b9:36:
                    aa:4e:25:b0:25:31:ec:d7:09:4d:6f:68:84:5b:d9:
                    01:95:6f:8e:c3:0b:71:79:69:f7:4d:6a:29:01:aa:
                    da:52:cd:0c:89:6c:f7:43:e0:09:44:fa:b6:37:4a:
                    28:a6:39:e9:5f:6b:1f:94:ac:73:ae:36:5c:9e:ff:
                    98:95:73:41:da:bb:39:0e:30:af:42:c9:3c:16:bb:
                    d9:37:27:37:a9:0d:8a:c5:f8:ee:e6:8a:0a:7f:5c:
                    40:2e:8c:30:42:2a:2e:a4:e9:38:7c:a3:3c:b0:56:
                    2e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:94:A1:1E:FC:18:B0:BB:2A:BB:77:59:B7:B6:64:A7:B9:9A:27:02
            X509v3 Authority Key Identifier:
                keyid:C4:5B:E1:EA:BA:36:7C:0B:81:A0:78:48:E5:BD:E0:0D:AE:D3:16:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/1/C45BE1EABA367C0B81A07848E5BDE00DAED3160E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C45BE1EABA367C0B81A07848E5BDE00DAED3160E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/1/323830343a336262343a3a2f33322d3438203d3e20323636313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bb4::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:68:76:97:d1:3d:91:2a:76:c8:09:77:65:0b:85:a0:b3:33:
         35:b5:90:d4:13:4a:6f:1f:31:38:37:84:b4:04:5d:85:ea:9e:
         77:68:91:cd:cc:d7:e6:eb:46:b1:8d:aa:42:18:cd:bc:56:db:
         a6:8f:18:cd:36:cf:8e:d1:ce:2b:06:bd:cc:22:d3:dc:85:d2:
         9b:24:84:c5:17:21:c2:c8:cc:d5:05:42:6a:da:2c:e3:60:52:
         d6:a2:4f:46:9d:6f:97:33:f7:ca:9e:b9:1e:c9:60:c3:9f:1b:
         69:ea:f0:6f:cf:c2:65:4d:42:59:30:aa:f7:58:3a:9d:17:c8:
         3c:b7:c7:a9:dd:84:71:ba:12:8d:e1:b9:81:c4:4b:1f:4b:48:
         09:55:be:a9:68:b1:b4:5f:62:23:0f:b7:fc:ac:50:e0:47:f2:
         7c:6a:a4:16:a2:10:17:8b:00:19:41:83:b2:fa:08:74:9d:f4:
         59:b7:4f:4c:ad:f2:97:ca:12:54:6b:81:a4:70:18:62:86:9b:
         55:cb:7d:c7:97:a6:af:81:07:e5:82:47:39:f1:a7:87:c1:b8:
         8f:0e:9c:84:06:a7:b0:3e:41:31:f0:00:78:14:fc:9c:99:c1:
         4d:79:57:bb:35:e1:57:96:14:8c:c7:21:9c:e2:e6:2c:b7:bc:
         5d:3d:10:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org