Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/1/323830343a373235633a3a2f33322d313238203d3e20323632353036.roa
File:                     323830343a373235633a3a2f33322d313238203d3e20323632353036.roa (raw, json)
Hash identifier:          f9yw+Sz23qd/1TW6SUK5nD0DhjenI/4H8hNOVTcp+Pg=
Subject key identifier:   94:41:81:E5:2A:4D:C0:1A:FE:40:FC:A6:04:FE:DB:D1:2C:9B:8C:71
Certificate issuer:       /CN=2CBB75030A47D2F3C18B047E0F096CF787337032
Certificate serial:       7DEC12A43C56396BDF7E0361D0B3F23397537C36
Authority key identifier: 2C:BB:75:03:0A:47:D2:F3:C1:8B:04:7E:0F:09:6C:F7:87:33:70:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CBB75030A47D2F3C18B047E0F096CF787337032.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/1/323830343a373235633a3a2f33322d313238203d3e20323632353036.roa
Signing time:             Thu 11 Apr 2024 13:40:19 +0000
ROA not before:           Thu 11 Apr 2024 13:35:19 +0000
ROA not after:            Thu 10 Apr 2025 13:40:19 +0000
asID:                     262506
IP address blocks:        2804:725c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ec:12:a4:3c:56:39:6b:df:7e:03:61:d0:b3:f2:33:97:53:7c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CBB75030A47D2F3C18B047E0F096CF787337032
        Validity
            Not Before: Apr 11 13:35:19 2024 GMT
            Not After : Apr 10 13:40:19 2025 GMT
        Subject: CN=944181E52A4DC01AFE40FCA604FEDBD12C9B8C71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:01:52:33:13:90:09:c9:46:06:4b:ca:68:21:
                    d8:01:bb:1a:39:72:e8:5c:20:54:46:91:c2:26:d9:
                    2d:9f:4b:6f:d4:6b:ab:3c:0b:ca:01:64:b2:50:f6:
                    99:83:35:6a:b6:29:41:e4:d1:98:42:e0:70:6e:3e:
                    54:e6:1b:06:89:35:b3:20:99:fc:ff:b1:ff:23:a4:
                    47:98:09:a9:68:45:ac:20:88:c2:d4:5f:54:86:78:
                    14:a2:a8:40:c3:af:ca:df:89:50:bf:ff:3d:63:57:
                    99:8c:08:bb:74:53:60:72:56:70:97:df:44:bd:b2:
                    1b:d5:58:0d:18:ce:75:ef:0f:a0:56:7a:b9:c7:fa:
                    da:0f:7d:b0:8a:b4:88:7d:6b:35:23:25:4a:a6:33:
                    b5:75:61:14:b1:fb:7a:08:8f:61:c7:e7:2c:9e:02:
                    51:a8:b5:ab:a4:a4:60:66:ea:11:7d:95:c9:0a:47:
                    f3:7d:5f:d4:45:28:8c:9e:45:4d:c3:de:9d:cf:05:
                    7f:d8:c7:b9:78:cf:0f:59:e7:f3:4d:e2:7d:0a:e4:
                    b2:b0:e2:2f:17:af:3d:3e:30:dc:52:3f:91:35:a0:
                    79:59:ac:b0:75:ca:e6:f9:cd:24:52:6d:7e:a0:c4:
                    d4:10:0c:2d:ee:ec:2a:e8:d3:5a:d5:58:cd:65:fd:
                    90:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:41:81:E5:2A:4D:C0:1A:FE:40:FC:A6:04:FE:DB:D1:2C:9B:8C:71
            X509v3 Authority Key Identifier:
                keyid:2C:BB:75:03:0A:47:D2:F3:C1:8B:04:7E:0F:09:6C:F7:87:33:70:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/1/2CBB75030A47D2F3C18B047E0F096CF787337032.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CBB75030A47D2F3C18B047E0F096CF787337032.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/1/323830343a373235633a3a2f33322d313238203d3e20323632353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:725c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:8b:73:5a:0d:46:b2:ca:00:c8:5a:ff:0e:74:d0:89:cd:0c:
         b9:58:75:7f:47:5c:3c:1d:dd:2a:b6:f7:9c:3d:83:21:bc:c6:
         bb:87:27:74:e4:2d:56:b7:f9:cb:88:31:45:3b:5b:0d:dc:98:
         c9:51:ee:c8:78:8c:2f:a1:46:fd:eb:6a:54:46:b1:19:96:cd:
         0a:21:ce:46:95:66:9a:16:09:af:4e:55:2f:65:69:e6:8b:e8:
         f1:91:a6:c2:5f:bb:14:9b:61:47:25:fb:ca:c7:88:dd:cd:fe:
         36:2d:2b:3f:23:f0:54:2b:9a:1c:9c:5a:d2:61:c1:54:1a:dc:
         7a:eb:43:d1:40:ba:e1:be:b9:11:55:f4:7e:64:67:98:1f:e7:
         fd:0e:4b:7e:a4:b9:73:0b:0f:88:ba:3f:10:ba:ac:12:3a:92:
         0f:b9:02:49:df:ba:40:8c:d8:96:ee:2a:35:82:f2:9b:1b:23:
         9f:e0:c8:84:20:c2:2d:23:bf:d3:21:d8:49:c4:b7:c0:6a:03:
         de:ed:d5:12:ee:32:ce:e2:c5:6e:a7:fd:f7:5d:6a:b9:4b:c3:
         ec:99:60:a2:f5:71:b5:25:9b:0a:df:c9:5b:31:ae:e7:48:c2:
         35:2b:69:30:00:a4:3c:5d:4d:4b:97:b0:df:56:79:5e:35:f5:
         d6:4b:27:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org