Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/1/323830343a346233343a3a2f33332d3333203d3e20323637323930.roa
File:                     323830343a346233343a3a2f33332d3333203d3e20323637323930.roa (raw, json)
Hash identifier:          9PTadSj8KmyDc+QkFS8FCSesSulOMa2C/UGKZ/W+7yI=
Subject key identifier:   8B:DD:28:20:AE:96:DD:79:D0:C7:38:F0:4E:8F:34:88:D9:1E:48:05
Certificate issuer:       /CN=29D189B9A7639658160A27FD17B6D238AB9BFD4A
Certificate serial:       08C4A248628FB9FE7FAB6E3EAA1BDF7AC378B297
Authority key identifier: 29:D1:89:B9:A7:63:96:58:16:0A:27:FD:17:B6:D2:38:AB:9B:FD:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D189B9A7639658160A27FD17B6D238AB9BFD4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/1/323830343a346233343a3a2f33332d3333203d3e20323637323930.roa
Signing time:             Wed 03 Apr 2024 18:31:28 +0000
ROA not before:           Wed 03 Apr 2024 18:26:28 +0000
ROA not after:            Wed 02 Apr 2025 18:31:28 +0000
asID:                     267290
IP address blocks:        2804:4b34::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c4:a2:48:62:8f:b9:fe:7f:ab:6e:3e:aa:1b:df:7a:c3:78:b2:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29D189B9A7639658160A27FD17B6D238AB9BFD4A
        Validity
            Not Before: Apr  3 18:26:28 2024 GMT
            Not After : Apr  2 18:31:28 2025 GMT
        Subject: CN=8BDD2820AE96DD79D0C738F04E8F3488D91E4805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e8:94:2b:b2:23:4d:81:30:3f:46:38:6a:5f:
                    39:4b:9b:9d:5b:35:36:f2:ff:fc:e3:9c:3b:ba:da:
                    f4:50:59:37:2a:bb:ca:3d:1a:a8:36:1d:37:1b:6d:
                    68:26:de:94:fe:db:0a:e6:95:ed:32:cb:85:d4:41:
                    03:d9:c6:43:88:ad:1f:7c:7d:21:a1:63:89:be:33:
                    a8:40:38:19:ce:4b:e1:14:be:b1:46:51:79:f4:81:
                    19:49:8e:30:50:72:6d:41:0d:b0:63:ac:98:ce:00:
                    4a:41:dd:b3:79:89:8c:99:9e:35:7f:e5:96:cf:a7:
                    e8:39:d4:01:7e:f3:d6:28:6e:7d:ad:cd:0e:69:ac:
                    0f:5a:02:c9:03:cd:0c:98:d7:37:1b:54:1a:fb:16:
                    76:7a:0b:6d:23:f2:63:be:ed:64:2f:a0:28:49:30:
                    a0:b3:5e:5d:e0:b7:a0:ac:f9:ac:18:fa:5c:33:4a:
                    1f:ce:63:a9:fd:c1:2d:bb:53:e4:91:5d:e8:12:f7:
                    eb:50:a0:27:39:a6:c0:e0:5c:10:34:f7:b3:3d:3d:
                    df:3f:cf:e8:eb:d6:3d:a2:da:83:45:af:dc:6f:b8:
                    df:90:85:c9:59:11:b2:2e:e7:d2:78:05:7b:9f:f8:
                    65:47:e7:c1:4f:e1:e2:cc:01:ed:7c:c4:7c:2f:54:
                    d0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DD:28:20:AE:96:DD:79:D0:C7:38:F0:4E:8F:34:88:D9:1E:48:05
            X509v3 Authority Key Identifier:
                keyid:29:D1:89:B9:A7:63:96:58:16:0A:27:FD:17:B6:D2:38:AB:9B:FD:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/1/29D189B9A7639658160A27FD17B6D238AB9BFD4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D189B9A7639658160A27FD17B6D238AB9BFD4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/1/323830343a346233343a3a2f33332d3333203d3e20323637323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b34::/33

    Signature Algorithm: sha256WithRSAEncryption
         34:98:36:63:f8:d1:e8:2a:84:50:7e:38:b0:63:bc:d4:ca:4e:
         9e:38:fb:af:fc:e1:60:e9:c3:9a:27:3a:0b:8c:2a:a3:a9:7f:
         e8:dd:87:2f:fa:90:84:29:58:07:69:1d:54:0b:88:0f:ed:6c:
         18:73:fa:fa:ac:46:7b:1e:8e:2f:db:4e:35:ed:36:10:11:dd:
         4e:af:5c:bb:24:8e:11:dd:1c:f7:cc:93:9d:6b:21:5b:5b:53:
         3c:be:9c:b7:b4:0f:d8:34:4c:9a:42:15:a1:47:e7:25:ca:ab:
         f0:8f:2a:1f:05:24:b4:52:bc:91:62:36:03:c8:b3:97:69:cc:
         a6:77:92:41:80:e3:01:57:db:61:e9:7f:60:4c:95:5e:27:e6:
         2a:7a:c9:fc:ae:90:a2:3d:60:40:4a:94:6e:fe:6a:0f:3d:c1:
         69:e3:1f:9d:46:32:c3:74:21:39:54:19:80:e2:47:70:a0:17:
         b7:87:4d:4d:7c:20:88:7d:f0:c2:e9:1d:03:9d:c9:59:49:25:
         bb:1c:0c:e9:42:76:db:94:2d:f1:cf:aa:70:27:53:5c:50:bc:
         25:53:4f:4c:9e:f5:73:02:08:d5:27:73:ff:3f:c6:85:ef:ae:
         4e:bb:06:ed:6a:df:fb:3e:eb:29:13:9c:50:3d:7a:e5:f1:74:
         42:85:fc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org