Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a393a3a2f34382d3438203d3e203631383332.roa
File:                     323830343a316130343a393a3a2f34382d3438203d3e203631383332.roa (raw, json)
Hash identifier:          cvH4kWCXkA+aryg9ASEbQEcS7roKYVh62OOPD7PFmBA=
Subject key identifier:   0C:BD:47:59:90:0F:AC:28:92:D2:78:6B:AB:74:90:1E:B4:59:B4:9B
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       7025F7605874A0F72C307F54FD1760F6CDC8B317
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a393a3a2f34382d3438203d3e203631383332.roa
Signing time:             Thu 05 Oct 2023 17:51:49 +0000
ROA not before:           Thu 05 Oct 2023 17:46:49 +0000
ROA not after:            Thu 03 Oct 2024 17:51:49 +0000
asID:                     61832
IP address blocks:        2804:1a04:9::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:25:f7:60:58:74:a0:f7:2c:30:7f:54:fd:17:60:f6:cd:c8:b3:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Oct  5 17:46:49 2023 GMT
            Not After : Oct  3 17:51:49 2024 GMT
        Subject: CN=0CBD4759900FAC2892D2786BAB74901EB459B49B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3b:e4:c6:6a:53:92:bf:8e:48:f2:26:04:3c:
                    15:08:79:f2:74:2f:43:e4:65:37:e0:e0:62:fe:33:
                    85:17:ef:3b:a1:7d:da:db:56:31:90:87:4f:bf:5f:
                    29:86:2c:b8:bc:7c:83:a6:f7:37:88:85:48:65:bf:
                    30:1a:4a:50:f7:02:e5:75:77:b2:27:ba:ad:92:ac:
                    65:e7:f7:0e:40:b9:fa:c6:4e:1f:5c:e4:d8:f2:f7:
                    f6:59:95:8e:dd:b5:32:d6:19:f3:5f:6d:d4:bf:ee:
                    a8:55:87:7d:27:05:8c:10:c8:e6:60:17:cf:c3:44:
                    15:02:78:12:18:56:63:3c:2f:34:e7:eb:44:17:03:
                    71:2e:08:f4:cc:7a:00:9f:ae:fd:20:e6:f7:20:a0:
                    0a:64:89:f5:22:d7:e0:1d:50:72:f2:e4:1f:75:ef:
                    cc:04:51:97:13:05:76:c4:97:b4:50:7d:76:2e:c3:
                    ec:c2:fd:56:8d:fe:d2:10:09:13:43:3f:8c:6d:7a:
                    02:e2:88:17:df:c8:4c:8d:66:85:bb:8f:55:df:b4:
                    aa:0d:10:21:3c:8c:48:19:8b:d1:1d:b9:2d:32:eb:
                    fb:ae:7f:3e:0a:34:79:21:91:7f:90:b7:39:a8:f0:
                    88:86:43:43:ee:71:a1:c3:c4:e3:8a:91:70:54:a3:
                    b8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BD:47:59:90:0F:AC:28:92:D2:78:6B:AB:74:90:1E:B4:59:B4:9B
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a393a3a2f34382d3438203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a04:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:01:ce:a2:22:3c:46:49:9a:57:bc:ee:4c:e8:2f:5a:a9:28:
         50:71:32:49:ad:95:4b:03:64:16:ec:cc:b8:7d:97:45:0d:da:
         42:4e:de:7b:9f:ad:39:0e:82:af:4b:fe:fc:73:cb:3c:32:2e:
         f7:6f:7f:12:0b:e7:92:c1:b8:a7:55:93:f7:a9:14:c1:a8:c2:
         db:0f:3d:09:24:11:1e:9f:bc:62:b4:3a:7f:57:0b:cd:8f:f1:
         02:1c:39:06:4b:64:08:51:c6:a6:44:5e:d7:5f:2e:37:32:9e:
         2b:d6:d0:bc:2e:72:c6:f5:37:1b:3a:66:fa:6e:e6:bf:bd:60:
         89:b0:50:70:7e:56:2a:e8:ed:59:16:6d:cf:db:c9:b4:08:b6:
         f1:fd:fa:15:e5:a3:40:fd:f9:86:18:95:07:55:8f:57:54:ad:
         f6:83:6a:c2:4c:ea:cb:0b:23:89:b1:8d:27:50:bb:ad:1e:b5:
         f2:77:f0:75:34:90:e1:d9:a3:2f:3a:d8:8e:a1:ce:ee:39:16:
         b2:a4:9d:83:09:35:3c:71:5f:98:d6:a4:46:e1:43:96:3d:5c:
         07:65:ba:9a:48:49:f1:84:f6:3b:bb:50:da:3f:d5:82:3b:2c:
         14:97:b3:f7:53:a3:15:16:1c:fc:33:b8:68:eb:e5:01:29:22:
         c5:e1:8c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org