Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/323830343a323663343a3a2f33322d3332203d3e20323633383535.roa
File:                     323830343a323663343a3a2f33322d3332203d3e20323633383535.roa (raw, json)
Hash identifier:          kk2khV5sYxUk4V19s3ORV7kSO1fvxBl7FgcUWrXRAIA=
Subject key identifier:   64:25:BD:98:41:1D:25:E4:21:91:EC:7E:64:C5:73:4D:92:9A:EF:EA
Certificate issuer:       /CN=CB79DFC1DF1822D301F97D5B20B19091DB3700ED
Certificate serial:       481D5B30BEADA7863676058B618C0960B5A10D8E
Authority key identifier: CB:79:DF:C1:DF:18:22:D3:01:F9:7D:5B:20:B1:90:91:DB:37:00:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB79DFC1DF1822D301F97D5B20B19091DB3700ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/323830343a323663343a3a2f33322d3332203d3e20323633383535.roa
Signing time:             Fri 20 Jan 2023 15:32:24 +0000
ROA not before:           Fri 20 Jan 2023 15:27:24 +0000
ROA not after:            Fri 19 Jan 2024 15:32:24 +0000
asID:                     263855
IP address blocks:        2804:26c4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1d:5b:30:be:ad:a7:86:36:76:05:8b:61:8c:09:60:b5:a1:0d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB79DFC1DF1822D301F97D5B20B19091DB3700ED
        Validity
            Not Before: Jan 20 15:27:24 2023 GMT
            Not After : Jan 19 15:32:24 2024 GMT
        Subject: CN=6425BD98411D25E42191EC7E64C5734D929AEFEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9b:d6:1a:92:5a:77:e8:ca:e8:ff:6c:18:e8:
                    b8:4a:d2:60:a6:a0:4f:9f:1d:cd:b2:72:31:a1:b0:
                    cd:9a:f0:7c:7b:39:c2:1e:28:8a:a1:3d:b1:e6:a7:
                    70:c0:a3:ff:0d:b3:75:83:8a:c2:a8:37:61:93:f2:
                    bb:11:d9:2d:23:e2:35:8b:28:6c:1b:5f:87:1e:f0:
                    3a:32:4c:99:28:64:ee:e4:2b:24:27:3e:62:b8:f5:
                    0d:2b:12:4b:2f:c5:34:06:df:a8:7d:a2:9b:a4:a4:
                    e1:71:6f:d7:27:7f:2d:58:44:0d:0a:10:e4:f8:a5:
                    e3:43:1e:05:08:16:7b:72:ca:65:03:8e:fb:92:da:
                    2a:f8:e9:11:71:b5:22:6d:69:05:c7:0d:5b:aa:26:
                    83:42:b9:22:3b:38:64:3d:64:84:db:73:38:ad:ef:
                    2a:37:ba:35:d6:fc:f2:8a:2a:b1:d5:4a:45:27:b0:
                    2f:0a:7a:c1:c6:7f:6f:2d:95:c7:26:9a:3d:e4:f1:
                    64:5d:b8:c6:72:64:be:9f:d9:1e:42:8b:92:b4:6e:
                    e8:ae:6f:57:a4:6d:46:59:68:6c:f9:81:7d:6b:ee:
                    bf:3a:14:15:18:fd:5c:8c:af:45:9c:cd:b5:a6:bc:
                    32:be:a8:fd:f3:10:5e:eb:4f:be:d2:ef:63:4d:0d:
                    64:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:25:BD:98:41:1D:25:E4:21:91:EC:7E:64:C5:73:4D:92:9A:EF:EA
            X509v3 Authority Key Identifier:
                keyid:CB:79:DF:C1:DF:18:22:D3:01:F9:7D:5B:20:B1:90:91:DB:37:00:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/CB79DFC1DF1822D301F97D5B20B19091DB3700ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB79DFC1DF1822D301F97D5B20B19091DB3700ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/323830343a323663343a3a2f33322d3332203d3e20323633383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:a5:9f:26:3f:43:1c:a4:02:0f:0c:e0:47:ac:95:9c:1b:e3:
         44:30:bc:b3:11:a9:d8:be:6c:d3:64:c3:f9:d8:dd:fe:da:37:
         78:84:f6:d0:16:20:d6:17:b2:4f:dc:cb:90:42:3a:f6:4b:65:
         5f:8c:39:51:2f:85:3d:7f:12:51:e3:42:23:35:b7:d5:c9:6f:
         6c:f0:b3:f3:d0:7b:9a:45:0e:28:00:50:ed:fd:a9:00:e5:4b:
         73:e5:6a:70:e9:9f:37:47:3a:e1:65:89:f9:15:ee:f9:be:d9:
         e7:f3:b5:c8:63:d2:1f:aa:0d:7c:74:3f:ed:c7:dc:44:d4:a5:
         7f:10:de:34:8a:7b:1d:80:6b:b8:15:b4:a3:84:06:e0:f4:04:
         4f:48:dd:0f:9d:92:54:32:cb:2d:ff:6d:24:da:57:67:10:91:
         2f:70:69:c6:22:5b:25:e3:de:e5:80:d6:df:03:a7:c8:08:77:
         17:99:4b:be:41:bb:bf:68:21:4b:dd:c6:4b:ee:b3:7a:e2:bf:
         78:94:09:de:98:f7:d7:36:1d:0c:4e:47:31:c1:85:10:b7:f2:
         94:e1:2c:fa:cd:54:da:94:90:3f:6a:d4:71:22:0b:90:81:a7:
         ce:be:60:83:c9:f1:aa:31:55:37:29:4c:68:43:4e:e6:f2:a2:
         68:9a:36:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org