Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/0/323830343a363331343a3a2f33322d3438203d3e20323639333337.roa
File:                     323830343a363331343a3a2f33322d3438203d3e20323639333337.roa (raw, json)
Hash identifier:          NsyhtVlArahhOi7nQ1cgechYl26l/ziROhp5u1wWiRE=
Subject key identifier:   62:CE:54:5D:AD:2D:B5:4D:47:DC:71:DF:E6:C7:B6:41:4B:68:F3:AD
Certificate issuer:       /CN=97DC73C1A77476398E6D6D372160DDABE4E6CCBF
Certificate serial:       6DDF0D55256FA69D64906614E48068402A1073A0
Authority key identifier: 97:DC:73:C1:A7:74:76:39:8E:6D:6D:37:21:60:DD:AB:E4:E6:CC:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97DC73C1A77476398E6D6D372160DDABE4E6CCBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/0/323830343a363331343a3a2f33322d3438203d3e20323639333337.roa
Signing time:             Wed 13 Mar 2024 18:47:29 +0000
ROA not before:           Wed 13 Mar 2024 18:42:29 +0000
ROA not after:            Wed 12 Mar 2025 18:47:29 +0000
asID:                     269337
IP address blocks:        2804:6314::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:df:0d:55:25:6f:a6:9d:64:90:66:14:e4:80:68:40:2a:10:73:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97DC73C1A77476398E6D6D372160DDABE4E6CCBF
        Validity
            Not Before: Mar 13 18:42:29 2024 GMT
            Not After : Mar 12 18:47:29 2025 GMT
        Subject: CN=62CE545DAD2DB54D47DC71DFE6C7B6414B68F3AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a3:c8:a3:ef:e6:21:47:8a:0e:82:db:de:0d:
                    84:9c:65:2b:be:8e:78:49:be:ca:42:0f:19:5d:1e:
                    c9:ef:47:4a:62:0c:81:0a:fa:11:12:53:9a:22:ce:
                    ac:d4:8b:21:f6:38:7e:8a:0f:96:62:92:5f:6c:22:
                    7b:0f:90:d8:3d:77:e1:aa:84:d6:b9:a2:a8:ac:ee:
                    48:8b:b5:95:89:54:ba:3d:c7:39:b0:15:c0:da:6f:
                    fc:3a:ae:87:3e:8a:24:18:8c:aa:8b:e8:39:35:8c:
                    92:c0:07:92:55:8d:cf:ed:8b:14:32:70:f1:85:5d:
                    2f:a5:de:02:f2:35:3b:db:3a:7d:34:54:c1:8d:f3:
                    2e:9c:dc:56:f9:2f:39:4c:09:fa:02:48:33:e6:8f:
                    7b:96:23:1b:cb:15:7b:b2:7a:a8:1e:26:e2:97:d8:
                    af:be:7e:78:ac:ad:35:b5:6b:5a:d8:ac:98:05:b7:
                    7d:42:22:f3:6c:96:4f:de:b1:13:09:f1:27:e2:69:
                    d7:0d:47:08:80:48:a4:31:34:09:de:5d:62:8e:5b:
                    8d:02:f8:7a:d4:2f:8e:3d:86:fe:85:8e:ee:5a:54:
                    44:da:f8:a0:a1:a3:d0:86:26:c6:fe:c9:8b:7b:bf:
                    3b:30:b4:a0:02:8c:7c:a5:67:65:3d:22:de:18:8a:
                    6f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CE:54:5D:AD:2D:B5:4D:47:DC:71:DF:E6:C7:B6:41:4B:68:F3:AD
            X509v3 Authority Key Identifier:
                keyid:97:DC:73:C1:A7:74:76:39:8E:6D:6D:37:21:60:DD:AB:E4:E6:CC:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/0/97DC73C1A77476398E6D6D372160DDABE4E6CCBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97DC73C1A77476398E6D6D372160DDABE4E6CCBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/0/323830343a363331343a3a2f33322d3438203d3e20323639333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6314::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:ac:0a:b3:4d:fd:84:b2:a5:80:55:00:a0:86:d0:8d:f3:46:
         84:d2:31:85:96:e8:25:ad:da:92:a5:28:3d:19:eb:4d:b6:6c:
         e9:ca:f4:0f:20:9a:6c:c3:d9:d2:93:a4:74:93:03:52:a5:3b:
         ba:e1:5c:68:13:44:25:da:9d:04:9d:6d:13:13:00:47:05:95:
         82:2d:8d:80:77:c6:c1:af:e3:42:80:61:01:3b:94:69:d2:d8:
         9d:5d:5e:94:53:22:61:34:cb:fe:15:04:ac:c5:2e:80:24:df:
         1b:25:b1:57:ea:02:ac:76:b1:fa:08:97:51:e0:d7:1e:6b:ee:
         c1:81:04:5a:7a:08:1a:18:5c:71:37:21:2f:30:9d:8c:ca:1c:
         f8:da:7d:48:c3:c3:73:fa:5e:a2:67:82:05:81:fd:14:f7:7d:
         54:f0:bc:b8:79:20:22:51:d8:f8:21:56:15:08:36:13:09:72:
         92:fe:e5:55:64:8a:a1:dc:5d:62:78:7c:37:36:bd:b9:33:66:
         ca:5b:c9:29:35:f6:7e:e8:76:2b:04:2f:8c:69:83:db:74:c8:
         ed:70:c8:e0:2c:42:96:cf:28:71:3b:7d:8b:f7:d9:5a:77:6f:
         f1:34:d1:04:76:e8:f5:40:00:01:24:86:9c:8b:a4:70:85:7c:
         56:18:5d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org