Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8JZbs1V7f3pQmhZnjs3nfZqZp3ZeHtYtQiDToyF16qR/0/323830343a326633383a3a2f33322d3438203d3e20323634383738.roa
File:                     323830343a326633383a3a2f33322d3438203d3e20323634383738.roa (raw, json)
Hash identifier:          FYi1rbeYw3cSvBNdP8MKvIuAy1mNYdsfq3dh4r44HbY=
Subject key identifier:   46:6D:3E:1E:87:02:B0:4F:E4:02:B8:21:66:D2:43:19:8D:F9:C3:67
Certificate issuer:       /CN=D4C8F646F1ADB9F0D84282A75C65B603DDDE8365
Certificate serial:       25B90295F742DAF33FF9A84B89D849F467543A37
Authority key identifier: D4:C8:F6:46:F1:AD:B9:F0:D8:42:82:A7:5C:65:B6:03:DD:DE:83:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4C8F646F1ADB9F0D84282A75C65B603DDDE8365.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8JZbs1V7f3pQmhZnjs3nfZqZp3ZeHtYtQiDToyF16qR/0/323830343a326633383a3a2f33322d3438203d3e20323634383738.roa
Signing time:             Tue 20 Feb 2024 14:34:04 +0000
ROA not before:           Tue 20 Feb 2024 14:29:04 +0000
ROA not after:            Tue 18 Feb 2025 14:34:04 +0000
asID:                     264878
IP address blocks:        2804:2f38::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b9:02:95:f7:42:da:f3:3f:f9:a8:4b:89:d8:49:f4:67:54:3a:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4C8F646F1ADB9F0D84282A75C65B603DDDE8365
        Validity
            Not Before: Feb 20 14:29:04 2024 GMT
            Not After : Feb 18 14:34:04 2025 GMT
        Subject: CN=466D3E1E8702B04FE402B82166D243198DF9C367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2a:d4:f8:9d:91:c7:20:a7:1f:cd:1b:9b:2d:
                    d8:86:69:67:48:a8:2a:a5:93:ac:90:18:77:e9:cc:
                    3a:92:35:7d:86:24:bb:31:e0:8f:ea:9c:ef:d0:34:
                    ba:05:eb:c1:78:62:e3:cd:da:d5:91:ac:ae:fb:b4:
                    d3:44:05:7b:e2:ec:5d:27:b2:bd:06:83:f5:c8:b8:
                    8c:e4:c4:df:52:4c:2e:d7:b6:e7:e5:45:77:51:f0:
                    8a:23:20:8c:53:ac:47:4a:60:74:c6:de:89:90:52:
                    db:6a:dd:70:6a:2c:5c:19:18:91:c8:e6:77:87:e5:
                    57:b2:10:d4:ed:cc:65:dc:ac:09:0b:22:a3:35:48:
                    70:fb:76:97:20:bc:8d:e3:5f:93:fe:36:d5:ea:20:
                    70:ab:3c:30:05:20:9c:19:c6:5f:bb:d0:0b:e7:64:
                    b6:3a:68:1f:71:5d:73:ad:81:70:40:a7:c2:cf:14:
                    80:f9:1c:44:6f:9a:15:c4:bf:67:6d:09:e1:97:ce:
                    5e:da:3c:07:6b:e7:6f:fd:fc:17:a9:0e:29:28:b3:
                    3a:90:05:7b:fd:b9:04:22:a0:b4:e1:1e:f9:52:ee:
                    83:4b:b8:44:d9:1b:ed:09:d5:15:3f:88:bd:97:4c:
                    03:a7:9f:53:b4:88:9c:b9:0c:75:7c:7b:47:7d:8e:
                    f1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6D:3E:1E:87:02:B0:4F:E4:02:B8:21:66:D2:43:19:8D:F9:C3:67
            X509v3 Authority Key Identifier:
                keyid:D4:C8:F6:46:F1:AD:B9:F0:D8:42:82:A7:5C:65:B6:03:DD:DE:83:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8JZbs1V7f3pQmhZnjs3nfZqZp3ZeHtYtQiDToyF16qR/0/D4C8F646F1ADB9F0D84282A75C65B603DDDE8365.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4C8F646F1ADB9F0D84282A75C65B603DDDE8365.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8JZbs1V7f3pQmhZnjs3nfZqZp3ZeHtYtQiDToyF16qR/0/323830343a326633383a3a2f33322d3438203d3e20323634383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f38::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:90:bf:f6:2f:aa:4b:0d:21:14:ec:ad:23:0d:24:e1:49:61:
         02:90:17:6f:73:9e:bb:ae:22:d4:94:53:37:83:3e:b9:c8:2c:
         73:f0:bc:74:08:a7:b5:05:30:60:b8:82:b1:ae:9f:3c:44:7e:
         df:2b:ab:4c:1b:9d:8c:26:25:96:fa:76:8b:9b:02:74:74:09:
         ac:6d:cd:17:9d:d9:86:82:73:19:8d:a0:6e:8a:5f:a2:42:87:
         86:16:07:b2:bf:b3:ad:30:45:a6:d7:b9:0e:7c:a4:24:a2:e7:
         53:bb:fe:e9:37:fe:92:de:ab:80:7b:0d:d5:6f:b3:cc:3a:a9:
         3e:3f:69:4c:d9:c9:50:bc:82:c6:09:a1:ea:bf:2b:b6:92:a2:
         cd:e1:c9:f4:2c:ab:c4:8b:69:a4:f5:c4:46:b5:9e:20:bf:8b:
         6f:30:54:93:d2:00:1e:a5:79:b3:c0:38:38:97:bf:fe:48:3e:
         5b:7b:cf:50:2f:84:9b:fd:dd:a1:b0:b4:77:c1:33:b1:0a:78:
         2b:bd:ea:04:81:32:65:89:5c:c3:e5:b1:a7:6b:03:47:58:a5:
         2c:4b:2c:f6:49:59:f4:7b:03:f0:8f:02:c1:3f:ee:bd:b1:a1:
         36:6f:2c:74:31:5c:62:a5:71:7e:8c:9e:32:c2:4c:21:48:7b:
         99:05:23:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:44 2024 by rpki-client on console-ams.rpki-client.org