Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a343a3a2f34382d3438203d3e203238323630.roa
File:                     323830343a323865343a343a3a2f34382d3438203d3e203238323630.roa (raw, json)
Hash identifier:          0B4Lql1R3RYYHQ76h0BQsyv1A0vzJVSdm6VU2+K7kUY=
Subject key identifier:   A9:BA:90:0C:63:CB:9D:F0:20:CD:82:C1:A5:C1:75:6C:51:35:7B:C3
Certificate issuer:       /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial:       4FD3FAA914F18A5D3F3A137A5E35E057BC782E97
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a343a3a2f34382d3438203d3e203238323630.roa
Signing time:             Thu 09 Mar 2023 20:17:53 +0000
ROA not before:           Thu 09 Mar 2023 20:12:53 +0000
ROA not after:            Thu 07 Mar 2024 20:17:53 +0000
asID:                     28260
IP address blocks:        2804:28e4:4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d3:fa:a9:14:f1:8a:5d:3f:3a:13:7a:5e:35:e0:57:bc:78:2e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
        Validity
            Not Before: Mar  9 20:12:53 2023 GMT
            Not After : Mar  7 20:17:53 2024 GMT
        Subject: CN=A9BA900C63CB9DF020CD82C1A5C1756C51357BC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1f:b7:66:b5:ce:ee:30:29:fc:0a:cf:1c:93:
                    cd:22:0b:ee:b2:fd:77:e3:44:92:53:17:d7:69:85:
                    c4:c7:56:9b:3f:c2:87:ae:da:cf:f3:62:c9:cd:3b:
                    36:03:80:fa:d9:55:13:fa:f2:e6:f2:35:a7:08:a0:
                    23:8b:74:91:be:63:e5:b3:5c:70:6c:cc:ae:e3:1b:
                    81:3e:ac:36:9f:3d:a0:8f:0e:f8:23:c0:89:9a:4d:
                    bc:81:81:b4:01:9f:4b:c5:c9:74:ab:fa:87:c6:7f:
                    c4:f5:91:87:91:85:c6:32:a7:11:91:e6:1d:e6:a9:
                    68:76:67:e9:86:c2:a2:56:1c:2c:8e:4e:b3:e4:0e:
                    a7:43:cb:eb:dd:d5:32:c1:4a:04:4c:44:48:f8:51:
                    71:f0:81:f2:76:f9:4c:7e:f0:5a:96:3e:7e:36:f2:
                    93:10:fc:40:34:9b:6e:ca:96:c2:88:af:6c:9e:be:
                    00:1b:3d:18:e2:b5:8f:05:fd:64:85:e5:3a:40:ac:
                    a1:38:2c:6d:4d:42:7d:d8:44:6b:1b:c1:6d:d4:b4:
                    0c:2f:79:b7:26:34:f2:1f:1c:76:5a:6f:63:4a:d8:
                    ad:d5:78:82:a4:b1:a7:a1:51:f9:b7:a6:c1:24:45:
                    0d:77:4e:09:23:17:79:65:63:19:f7:39:99:f2:e8:
                    49:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BA:90:0C:63:CB:9D:F0:20:CD:82:C1:A5:C1:75:6C:51:35:7B:C3
            X509v3 Authority Key Identifier:
                keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a343a3a2f34382d3438203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e4:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:21:83:03:83:1e:7c:22:33:ba:6f:ca:b0:f0:ac:5f:c3:38:
         71:12:6f:e8:1e:79:f0:1c:d9:dd:7c:9c:7a:1f:a8:d6:b4:5b:
         2c:f4:a7:4f:99:38:a5:98:36:41:52:ba:15:59:ae:be:36:99:
         0b:b3:6a:33:52:8b:c0:6b:37:14:9f:d5:23:92:35:fa:5d:6d:
         79:f4:3c:57:c6:df:62:26:5a:b2:c5:c9:06:a7:3f:21:a5:57:
         83:15:c8:ad:39:06:02:5c:56:c0:96:e4:59:42:fd:3f:d8:1b:
         de:9e:02:61:23:62:f6:6f:7b:63:4c:54:bd:70:71:dc:9c:37:
         35:bf:a0:90:8f:4c:5e:0c:35:f2:32:fd:a7:0d:81:5c:ae:4e:
         b9:48:33:f3:f9:dd:90:af:41:c3:97:0e:8e:b5:31:a7:95:62:
         1c:b6:03:3e:6d:ff:fb:2a:72:24:d8:62:bf:1b:3a:9a:af:7a:
         c9:20:fa:d7:fe:15:27:7e:43:bf:09:6d:18:4b:9f:a1:8d:97:
         fc:be:f3:b6:17:f9:7f:ca:56:43:8d:b9:1e:7f:c9:e8:64:18:
         38:37:db:52:5a:a7:70:9a:a6:64:9e:44:a9:e8:15:ed:c2:bc:
         c8:fe:b0:ad:1b:16:7e:a8:67:ef:51:56:2a:56:21:fa:05:0c:
         0c:a5:da:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org