Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/323830343a333762633a3a2f33322d3438203d3e20323636343333.roa
File:                     323830343a333762633a3a2f33322d3438203d3e20323636343333.roa (raw, json)
Hash identifier:          1NirrVyHCFWPAxNrXAuZPSlY2OXjkNb+ATY/EZe86nU=
Subject key identifier:   4A:C1:45:4C:E3:DA:76:94:FE:FB:5B:38:CD:51:4B:20:89:EA:31:55
Certificate issuer:       /CN=78C362024931EABCD22430437714D086537F64FD
Certificate serial:       5CD32D6A9A0A480DF3D9BC51FB5869DB4051D222
Authority key identifier: 78:C3:62:02:49:31:EA:BC:D2:24:30:43:77:14:D0:86:53:7F:64:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78C362024931EABCD22430437714D086537F64FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/323830343a333762633a3a2f33322d3438203d3e20323636343333.roa
Signing time:             Fri 26 Jan 2024 18:01:03 +0000
ROA not before:           Fri 26 Jan 2024 17:56:03 +0000
ROA not after:            Fri 24 Jan 2025 18:01:03 +0000
asID:                     266433
IP address blocks:        2804:37bc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d3:2d:6a:9a:0a:48:0d:f3:d9:bc:51:fb:58:69:db:40:51:d2:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C362024931EABCD22430437714D086537F64FD
        Validity
            Not Before: Jan 26 17:56:03 2024 GMT
            Not After : Jan 24 18:01:03 2025 GMT
        Subject: CN=4AC1454CE3DA7694FEFB5B38CD514B2089EA3155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:23:a8:d2:dc:4e:58:bb:03:6a:39:c4:2e:0f:
                    80:7e:b8:a5:89:9b:45:fc:5c:33:69:bc:96:1d:d6:
                    64:52:dd:91:31:81:5e:44:85:c1:24:9d:c0:a6:71:
                    50:bd:ab:b1:4a:3f:6d:f1:94:ed:71:db:52:7c:64:
                    cc:66:35:d0:f0:1b:a6:8d:e7:58:51:41:44:17:6e:
                    68:ca:1b:a6:96:54:8d:57:dc:b2:09:47:f4:20:8d:
                    65:5e:c9:51:dd:ce:8a:5d:55:b5:70:ec:1e:ea:74:
                    a4:77:0e:97:b2:27:10:c6:47:4f:7a:74:3f:f8:25:
                    72:c9:21:d6:d4:05:4d:0b:a7:43:84:09:80:e6:9b:
                    74:0d:9c:06:e5:fd:68:c6:88:9d:48:25:71:25:02:
                    61:bb:94:28:e0:42:ee:c8:02:89:7f:64:6c:96:f5:
                    03:30:54:7a:45:f0:08:f5:cc:c5:76:de:38:5c:9c:
                    8f:a7:84:71:a3:50:9f:e1:d8:28:32:d7:2b:da:6c:
                    13:fc:17:90:fd:79:ae:8f:b8:11:77:d2:a4:5e:70:
                    63:fb:93:4d:de:6f:e1:72:2a:3e:56:7e:5f:ae:02:
                    dd:6d:19:2c:28:8b:ce:0a:bd:57:53:2d:46:75:7a:
                    31:61:9d:d7:d7:2d:97:7d:c6:08:75:35:04:1a:8c:
                    83:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C1:45:4C:E3:DA:76:94:FE:FB:5B:38:CD:51:4B:20:89:EA:31:55
            X509v3 Authority Key Identifier:
                keyid:78:C3:62:02:49:31:EA:BC:D2:24:30:43:77:14:D0:86:53:7F:64:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/78C362024931EABCD22430437714D086537F64FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78C362024931EABCD22430437714D086537F64FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/323830343a333762633a3a2f33322d3438203d3e20323636343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:b7:0b:b2:57:97:cd:23:04:8d:44:9c:40:96:0b:1c:72:4c:
         56:fc:16:ce:06:2a:02:c7:7e:b8:d2:8d:bd:2c:6f:04:a8:54:
         9c:fd:25:f4:53:f9:af:c2:ba:e5:d2:da:0b:ed:a1:f9:63:d2:
         2f:6b:4a:85:e7:f7:7f:72:6f:a5:a5:66:53:aa:07:22:aa:c2:
         56:a2:80:a0:ea:65:a8:88:c4:bc:21:8c:a5:b8:cc:67:a0:1c:
         a7:a3:6a:ff:d7:08:37:8b:af:49:83:89:91:a9:76:95:ae:33:
         35:4b:2b:eb:c3:d4:5c:bd:cc:e8:ee:38:56:a3:7f:db:b1:18:
         4e:3a:fd:f5:0f:9b:5a:7d:27:dc:9d:bd:2d:c2:5e:e0:9c:02:
         71:c7:b7:84:44:0e:b0:a9:09:e6:f1:99:b8:98:44:e4:50:35:
         fb:c5:db:57:76:c3:3a:60:57:85:ff:b7:d0:80:64:f4:01:f5:
         35:cc:5d:eb:af:39:05:ca:9c:cd:c4:84:fd:22:0a:cd:07:2c:
         1d:d0:6b:fb:15:81:7e:65:7d:db:b8:42:9a:81:59:05:33:be:
         ee:9a:9d:bb:05:92:f9:56:5b:77:9e:13:b7:e1:ec:71:7f:3a:
         bf:99:0a:ae:e7:54:4a:85:64:2e:78:00:21:82:7e:98:f9:d4:
         64:c7:56:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org