Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/0/323830343a376262303a3a2f33322d3332203d3e20323731343438.roa
File:                     323830343a376262303a3a2f33322d3332203d3e20323731343438.roa (raw, json)
Hash identifier:          TUYj/pUrOoAUdf9hT8wkUsCYrGalN9/Ze88PzWdIwqo=
Subject key identifier:   44:B8:17:63:7E:7A:97:D5:51:22:46:93:E2:B7:9D:71:1A:54:51:A9
Certificate issuer:       /CN=4C8EFB2104E4A0336600AE0D7FB96B6C2B1B04EC
Certificate serial:       76836916B86F6FF46DCF7852C04EF6C1D21D2C87
Authority key identifier: 4C:8E:FB:21:04:E4:A0:33:66:00:AE:0D:7F:B9:6B:6C:2B:1B:04:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C8EFB2104E4A0336600AE0D7FB96B6C2B1B04EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/0/323830343a376262303a3a2f33322d3332203d3e20323731343438.roa
Signing time:             Fri 12 Apr 2024 01:53:43 +0000
ROA not before:           Fri 12 Apr 2024 01:48:43 +0000
ROA not after:            Fri 11 Apr 2025 01:53:43 +0000
asID:                     271448
IP address blocks:        2804:7bb0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:83:69:16:b8:6f:6f:f4:6d:cf:78:52:c0:4e:f6:c1:d2:1d:2c:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C8EFB2104E4A0336600AE0D7FB96B6C2B1B04EC
        Validity
            Not Before: Apr 12 01:48:43 2024 GMT
            Not After : Apr 11 01:53:43 2025 GMT
        Subject: CN=44B817637E7A97D551224693E2B79D711A5451A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:45:8e:8e:ad:05:ba:76:c6:fb:ca:47:d6:cf:
                    8c:37:68:93:42:e5:7c:8a:5d:21:e9:ae:0c:92:68:
                    da:52:9b:45:e2:f0:b4:d4:74:16:be:e5:33:98:b6:
                    f7:30:61:6f:6d:ae:ab:b4:67:59:0f:9b:26:66:40:
                    58:f7:8c:dc:d5:db:26:0c:87:df:cb:99:73:51:de:
                    1d:67:db:d7:3b:50:3c:84:ef:a4:e4:cb:e0:a5:1f:
                    46:3a:cc:f3:7d:44:c5:7a:b9:f2:8c:22:86:81:21:
                    c0:18:c2:b8:98:7f:4f:1b:14:f7:a9:ab:fa:8b:79:
                    60:9c:a4:8d:5d:e2:a2:63:38:d2:3e:82:64:88:2b:
                    c1:5e:8f:e3:40:85:ac:20:e6:19:57:7d:4e:13:a5:
                    a5:ce:91:6f:50:b7:ae:c8:f1:89:79:fb:06:6d:14:
                    b6:0b:24:4c:ec:a1:38:7f:ad:ae:7f:91:14:7f:0d:
                    ea:bb:8a:eb:d0:64:60:2a:1d:b9:c0:d0:0c:51:83:
                    6f:8f:8e:56:bb:a2:7e:37:1a:a5:f2:38:d1:12:b4:
                    84:ac:b4:f8:2e:fd:b2:13:15:5c:c9:09:31:54:df:
                    96:12:8c:cb:b7:62:25:6b:5b:2d:b0:5d:4f:57:18:
                    c6:56:af:55:67:e9:4b:e2:8f:dc:31:75:57:a0:c6:
                    f6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B8:17:63:7E:7A:97:D5:51:22:46:93:E2:B7:9D:71:1A:54:51:A9
            X509v3 Authority Key Identifier:
                keyid:4C:8E:FB:21:04:E4:A0:33:66:00:AE:0D:7F:B9:6B:6C:2B:1B:04:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/0/4C8EFB2104E4A0336600AE0D7FB96B6C2B1B04EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C8EFB2104E4A0336600AE0D7FB96B6C2B1B04EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/0/323830343a376262303a3a2f33322d3332203d3e20323731343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:f8:27:ee:ac:bc:84:d7:c5:5d:86:92:79:cf:fa:63:88:f8:
         26:e0:03:7a:a7:5b:3f:cd:d4:91:49:70:4f:4b:09:29:13:89:
         45:04:b4:33:42:a0:b6:72:c4:4a:0b:80:31:0c:d8:68:05:4a:
         9d:41:fa:50:d1:46:8e:73:ef:ea:6c:fe:a6:95:87:57:df:89:
         cf:56:19:d5:c2:3f:92:f4:84:c6:ee:13:26:90:13:a9:36:3d:
         7e:40:ea:66:a8:d8:08:e2:28:6a:f6:88:27:01:fd:2a:7a:dc:
         a3:8f:a3:8e:14:de:b7:2f:02:4f:2c:04:77:a8:b1:91:33:3d:
         0e:d8:4e:53:30:3a:d5:95:33:55:f6:79:9d:c3:3b:a6:9c:c6:
         a2:f3:a3:a5:14:f2:e0:7a:a4:8d:63:75:25:62:ac:17:83:8b:
         42:7d:31:8a:04:82:af:69:12:1c:a0:5c:56:09:5c:cd:c9:1b:
         00:7e:49:b9:e7:fa:8c:e6:74:ea:5c:9f:0f:b4:ef:15:db:b2:
         37:57:ef:b6:b6:8c:9c:0f:7c:1f:19:ed:b4:8e:cd:fb:68:6e:
         16:74:2e:6f:ec:17:22:98:69:66:9f:94:db:5f:0a:e0:de:b9:
         48:57:65:f3:06:97:f6:a7:80:40:a2:15:3b:78:4d:9b:26:7d:
         73:ba:94:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org