Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/323830343a316434633a313030303a3a2f34312d3431203d3e20323634333539.roa
File:                     323830343a316434633a313030303a3a2f34312d3431203d3e20323634333539.roa (raw, json)
Hash identifier:          8ZBAwtB7+rDwKrZ3vVM4lw9d/AEGztwWZAQoCtmqHhA=
Subject key identifier:   CB:7C:B0:F5:AA:8A:09:D3:A8:3E:B6:AB:4C:1C:CD:FC:57:67:20:AD
Certificate issuer:       /CN=3475904905B15F9FA7D71CD8AC16B8FE5631DC89
Certificate serial:       3545CFA31211C02B43FAC0D288CD4A2B1FBFAFF8
Authority key identifier: 34:75:90:49:05:B1:5F:9F:A7:D7:1C:D8:AC:16:B8:FE:56:31:DC:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3475904905B15F9FA7D71CD8AC16B8FE5631DC89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/323830343a316434633a313030303a3a2f34312d3431203d3e20323634333539.roa
Signing time:             Wed 19 Apr 2023 17:46:29 +0000
ROA not before:           Wed 19 Apr 2023 17:41:29 +0000
ROA not after:            Wed 17 Apr 2024 17:46:29 +0000
asID:                     264359
IP address blocks:        2804:1d4c:1000::/41 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:45:cf:a3:12:11:c0:2b:43:fa:c0:d2:88:cd:4a:2b:1f:bf:af:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3475904905B15F9FA7D71CD8AC16B8FE5631DC89
        Validity
            Not Before: Apr 19 17:41:29 2023 GMT
            Not After : Apr 17 17:46:29 2024 GMT
        Subject: CN=CB7CB0F5AA8A09D3A83EB6AB4C1CCDFC576720AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:13:31:bd:2c:53:ed:0e:8d:f6:be:8d:a6:dc:
                    b3:41:b7:42:a8:8c:8e:d5:49:ba:12:1b:ce:06:c2:
                    35:25:3b:08:2e:f6:8e:e5:eb:5f:06:6c:a0:72:fb:
                    84:74:2b:7f:48:33:a6:f3:32:80:f6:ea:1a:55:12:
                    af:2b:01:67:34:2c:e2:7c:dd:bd:08:9d:f0:4e:cb:
                    e6:68:ce:70:fe:c2:b5:83:2e:fd:03:ee:50:36:77:
                    78:05:4e:e4:f9:be:fb:09:7d:3e:92:87:77:78:08:
                    ff:b6:a2:f6:67:de:67:36:dc:5c:40:8c:94:00:8a:
                    49:30:36:5a:28:fe:58:1a:a2:39:20:64:fa:f3:d2:
                    47:86:bf:b6:54:d8:5d:13:c3:ac:c4:b1:cb:84:f6:
                    d2:48:6e:50:b5:ff:ef:98:17:57:9a:41:68:42:5a:
                    c2:b6:0f:48:65:85:60:05:40:3a:42:a7:9a:ae:ce:
                    42:78:d9:bb:62:79:38:53:96:58:a4:34:46:96:df:
                    bb:af:c3:a1:48:d6:8e:0c:b6:3e:13:fd:5c:cf:20:
                    6f:84:09:e4:3b:83:79:d9:00:f3:74:cf:16:87:95:
                    cc:15:79:7d:94:3c:65:66:76:00:4d:f3:15:68:fb:
                    68:1e:74:66:69:28:ae:61:cc:08:9a:89:54:c3:32:
                    a6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:7C:B0:F5:AA:8A:09:D3:A8:3E:B6:AB:4C:1C:CD:FC:57:67:20:AD
            X509v3 Authority Key Identifier:
                keyid:34:75:90:49:05:B1:5F:9F:A7:D7:1C:D8:AC:16:B8:FE:56:31:DC:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/3475904905B15F9FA7D71CD8AC16B8FE5631DC89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3475904905B15F9FA7D71CD8AC16B8FE5631DC89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/323830343a316434633a313030303a3a2f34312d3431203d3e20323634333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d4c:1000::/41

    Signature Algorithm: sha256WithRSAEncryption
         30:de:ef:e2:d0:70:6c:d7:e5:75:ae:7f:39:da:d8:69:03:90:
         06:a1:4c:4f:a3:51:8d:e5:37:ef:c0:db:1f:a5:03:2c:29:cc:
         ac:16:ce:a6:3a:98:06:fc:22:4c:6a:28:62:b2:ed:16:63:b8:
         13:9f:f9:df:46:ef:4c:9e:66:b8:c6:c8:97:39:d3:a4:fa:0e:
         97:4b:f0:6a:95:e8:c6:ca:f2:a2:52:bb:02:3e:9d:4d:f1:d3:
         eb:a7:c2:a4:cb:85:2d:5c:33:0e:2d:23:5a:3d:67:f0:3d:85:
         c2:3e:3f:a2:47:45:e7:75:d5:1a:f3:37:8c:60:a1:4a:a6:01:
         4e:a2:40:ad:31:64:46:1d:83:85:6a:ae:d3:23:13:17:7b:aa:
         02:bf:99:fc:19:96:79:4d:9b:33:52:be:14:d1:73:0d:00:a0:
         cd:35:15:f9:3c:01:dd:51:ec:9d:41:54:10:e4:11:ae:ff:ab:
         6f:c3:91:17:5b:30:f5:0b:93:8e:73:66:a0:4d:7c:88:9b:f9:
         91:bf:b7:b2:e1:84:e0:16:81:d2:de:d2:8b:38:f6:a7:9e:d6:
         8d:5d:ce:fa:9a:f4:13:09:95:d6:0b:46:e8:63:87:85:b2:41:
         79:79:19:29:8d:0f:0b:04:be:d9:1c:55:1f:02:70:0b:3b:79:
         02:e0:ad:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org