Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/0/323830343a3234343a3a2f33322d3332203d3e20323632383031.roa
File:                     323830343a3234343a3a2f33322d3332203d3e20323632383031.roa (raw, json)
Hash identifier:          4gn17lsezvPtwzK8iuPQTbNIxJCeNejzOeMNNG0rEMk=
Subject key identifier:   A1:AA:B3:58:E5:98:E9:F9:C0:3C:46:38:26:14:50:C4:90:35:D6:B7
Certificate issuer:       /CN=7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6
Certificate serial:       2670B0B49EFAE5A70298735E0A60B2BD97A7EE9B
Authority key identifier: 7D:45:E1:D0:EB:BF:C0:C5:8C:5B:59:B5:14:11:98:B5:B3:2C:99:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/0/323830343a3234343a3a2f33322d3332203d3e20323632383031.roa
Signing time:             Sun 28 Jan 2024 00:17:20 +0000
ROA not before:           Sun 28 Jan 2024 00:12:20 +0000
ROA not after:            Sun 26 Jan 2025 00:17:20 +0000
asID:                     262801
IP address blocks:        2804:244::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:70:b0:b4:9e:fa:e5:a7:02:98:73:5e:0a:60:b2:bd:97:a7:ee:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6
        Validity
            Not Before: Jan 28 00:12:20 2024 GMT
            Not After : Jan 26 00:17:20 2025 GMT
        Subject: CN=A1AAB358E598E9F9C03C4638261450C49035D6B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0a:45:96:e5:da:ff:c7:a0:84:06:4a:eb:cc:
                    58:43:0b:92:94:70:44:19:91:61:f0:8f:ef:e4:ba:
                    9d:d5:a0:0b:47:68:5d:57:3e:27:4e:30:e1:f8:f4:
                    af:6d:fa:85:3b:4a:3c:aa:8b:9e:0c:77:34:2b:56:
                    e2:a3:40:ae:c9:cd:89:f4:b1:33:ec:5e:24:83:f4:
                    05:a2:ee:46:27:7e:a8:b1:67:9d:b5:0b:df:3d:70:
                    54:ba:1e:8e:9a:b8:69:4a:4b:19:32:db:b4:7e:75:
                    f0:41:f5:ff:97:d0:9d:d9:11:07:fc:79:4a:99:41:
                    ad:6f:4e:e1:2a:4e:7f:4c:cc:5d:8b:0b:db:1b:ff:
                    1d:19:10:ef:00:a1:3d:b0:21:3c:c0:a7:af:0a:fd:
                    db:32:09:9e:70:26:e9:fd:6a:9a:3a:78:7c:c1:6a:
                    90:27:e3:b1:88:dc:65:40:55:16:75:d9:cf:05:66:
                    98:ca:e7:2a:47:a9:24:fa:09:0a:04:90:c6:51:bd:
                    ba:ed:6c:52:8b:a0:b1:7e:e5:66:eb:91:e3:37:be:
                    5d:ab:b2:16:c3:a7:12:d4:e1:5a:55:a1:35:fe:48:
                    92:0a:5e:8e:d6:71:2b:9b:3d:31:28:ca:f5:e5:e4:
                    2f:ef:42:3f:c5:c8:1d:12:17:e8:71:54:a8:93:17:
                    ba:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AA:B3:58:E5:98:E9:F9:C0:3C:46:38:26:14:50:C4:90:35:D6:B7
            X509v3 Authority Key Identifier:
                keyid:7D:45:E1:D0:EB:BF:C0:C5:8C:5B:59:B5:14:11:98:B5:B3:2C:99:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/0/7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/0/323830343a3234343a3a2f33322d3332203d3e20323632383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:244::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:c7:0f:aa:c2:5a:2f:59:e9:12:27:9f:b6:17:1a:38:9c:8b:
         21:35:a8:3e:01:7b:78:cf:21:d9:62:1d:47:8a:21:cf:1d:3d:
         dd:cf:ab:ec:fc:55:c5:26:98:7f:fa:da:03:19:19:06:2e:92:
         b4:9f:70:8e:62:b7:a1:b4:08:4d:7d:19:f2:38:1b:e2:59:ea:
         d9:cc:ab:bf:11:c5:ff:18:30:d0:da:ae:5d:80:b8:8a:da:16:
         7e:c8:5a:62:2e:07:bb:94:e7:97:2e:58:6f:98:a5:2f:4f:70:
         a6:56:1b:12:bf:6c:90:54:bc:57:40:2b:b2:53:59:a2:f4:0c:
         f5:6e:b8:8f:e8:10:59:d9:37:f0:89:72:8e:99:d0:63:05:87:
         ac:e6:21:0e:ee:48:a1:de:6a:41:0d:9b:b0:ca:9f:6f:3d:eb:
         c4:01:79:23:29:11:a9:5c:10:16:b2:1d:87:f3:10:7a:13:35:
         9d:59:a2:85:7f:64:db:42:54:67:23:06:16:8f:6e:be:2a:e8:
         5c:72:56:db:6c:a2:26:9d:ae:21:27:c8:4a:73:bf:77:c5:75:
         52:b0:a6:33:fc:3c:d0:fc:19:41:84:82:66:da:b6:f2:0b:3f:
         61:55:af:b0:79:ee:7d:06:29:b6:a4:1a:24:5f:d6:2f:45:11:
         1b:c5:50:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org