Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/1/323830343a343564343a3a2f33322d3332203d3e20323636393532.roa
File:                     323830343a343564343a3a2f33322d3332203d3e20323636393532.roa (raw, json)
Hash identifier:          AeE0p0DFzJE7j8+zrRtcxiJWgjDmuKiMM3fhcOO5fsI=
Subject key identifier:   32:24:51:CB:19:60:C6:24:9C:19:68:7C:19:74:00:B3:C8:19:C2:6F
Certificate issuer:       /CN=67C9B36E52F1BDDD88B130F32B29E9230A0FAD43
Certificate serial:       038E3309764815CF392649BE648DAB3FE264F5F8
Authority key identifier: 67:C9:B3:6E:52:F1:BD:DD:88:B1:30:F3:2B:29:E9:23:0A:0F:AD:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67C9B36E52F1BDDD88B130F32B29E9230A0FAD43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/1/323830343a343564343a3a2f33322d3332203d3e20323636393532.roa
Signing time:             Mon 08 Apr 2024 16:22:40 +0000
ROA not before:           Mon 08 Apr 2024 16:17:40 +0000
ROA not after:            Mon 07 Apr 2025 16:22:40 +0000
asID:                     266952
IP address blocks:        2804:45d4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:8e:33:09:76:48:15:cf:39:26:49:be:64:8d:ab:3f:e2:64:f5:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67C9B36E52F1BDDD88B130F32B29E9230A0FAD43
        Validity
            Not Before: Apr  8 16:17:40 2024 GMT
            Not After : Apr  7 16:22:40 2025 GMT
        Subject: CN=322451CB1960C6249C19687C197400B3C819C26F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7b:eb:e3:d8:8a:1d:05:43:42:ed:50:a1:2e:
                    3d:72:41:54:3c:c9:6a:7b:68:dd:de:85:ba:99:c7:
                    5b:2b:d3:96:d5:7f:13:69:9f:df:e1:d6:9e:fc:72:
                    b3:b4:f2:94:bd:c8:e5:5c:d4:5a:c9:04:51:2d:db:
                    3c:1e:68:17:49:65:c2:b0:56:fd:e6:2a:67:13:2d:
                    e6:97:53:56:22:8a:e4:84:70:e8:45:58:79:59:1b:
                    42:ba:21:8d:83:d0:06:6a:ac:31:d4:60:79:5f:42:
                    fc:62:9f:67:33:47:73:a2:1e:34:69:b9:88:23:5b:
                    7a:18:f0:bd:c0:d4:7b:ac:3a:6a:10:fe:f2:f0:02:
                    7a:ac:00:90:64:4a:68:5d:c4:8b:53:cb:04:b0:6d:
                    e6:d3:8e:f4:2b:b1:bb:d5:ed:de:67:96:15:9b:3e:
                    e1:ae:b0:77:98:2d:9e:35:5e:73:6e:69:b8:f5:5f:
                    d7:0f:f4:ea:69:62:c6:73:46:72:88:3c:a7:a7:d6:
                    67:16:01:b5:0b:ad:90:f9:5b:17:9e:7e:bb:e1:b1:
                    17:7f:cf:e3:ae:0c:07:40:c8:de:ae:d7:a9:36:56:
                    58:6d:fe:77:3a:a4:59:a7:c1:c7:c7:35:a0:14:aa:
                    9c:03:3e:eb:7c:e1:42:b6:e3:2c:c5:c9:66:7d:51:
                    f1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:24:51:CB:19:60:C6:24:9C:19:68:7C:19:74:00:B3:C8:19:C2:6F
            X509v3 Authority Key Identifier:
                keyid:67:C9:B3:6E:52:F1:BD:DD:88:B1:30:F3:2B:29:E9:23:0A:0F:AD:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/1/67C9B36E52F1BDDD88B130F32B29E9230A0FAD43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67C9B36E52F1BDDD88B130F32B29E9230A0FAD43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/1/323830343a343564343a3a2f33322d3332203d3e20323636393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:45d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:1b:57:95:99:20:79:32:26:8d:c7:04:0b:8f:2f:a4:80:65:
         c1:8d:ef:6c:de:a4:a7:6b:5f:94:87:b7:63:93:b3:30:29:69:
         1c:61:3c:b0:e6:b7:bb:a0:0c:20:29:33:ef:ed:8a:fc:79:62:
         d0:1d:d9:cd:42:34:d8:df:f3:6a:1c:6a:26:14:eb:a6:df:52:
         a6:56:23:d1:36:11:46:ae:2d:9a:ba:f2:fd:9b:11:70:a7:f7:
         75:1a:a9:43:8e:2f:b0:fd:4e:90:a1:6c:52:7e:1c:03:60:72:
         dc:68:65:b7:af:6e:a0:1f:7a:de:13:62:69:b6:60:78:45:5f:
         6d:8b:c7:83:f7:d6:81:e6:83:08:f2:a1:98:90:2c:f3:dd:69:
         64:41:e7:c5:1c:27:3b:f1:b9:73:2f:aa:49:04:2a:3c:25:d5:
         84:1d:72:37:44:83:70:f4:d8:e4:4f:f1:c7:67:13:7e:d7:b3:
         3a:8a:73:ec:f1:6f:d4:1d:cc:47:eb:fd:ec:a5:00:64:94:ce:
         fe:9f:1b:8f:2a:36:39:26:92:54:f0:e4:7b:89:47:a1:6d:b7:
         90:2f:d0:cf:68:04:86:1e:7b:5c:c7:7f:7e:69:a1:64:ab:5e:
         b8:f3:61:4f:c9:a3:58:2a:43:83:85:2b:62:0b:ef:2c:57:f5:
         f9:22:7e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org