Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/323830343a313132383a343030303a3a2f33342d3334203d3e20323633363631.roa
File:                     323830343a313132383a343030303a3a2f33342d3334203d3e20323633363631.roa (raw, json)
Hash identifier:          dWc4a14fjPwuFX3iQqocrymYBcV57nATD2/OSN9egeE=
Subject key identifier:   3F:54:45:81:42:DD:9D:CA:C4:06:F1:46:AC:9A:73:EA:0A:3A:86:24
Certificate issuer:       /CN=1F461E0163E83106F84ADF1433865326051B09F5
Certificate serial:       75FD5413C2017DCE78F5422CBFD144FAB80C2FFB
Authority key identifier: 1F:46:1E:01:63:E8:31:06:F8:4A:DF:14:33:86:53:26:05:1B:09:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F461E0163E83106F84ADF1433865326051B09F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/323830343a313132383a343030303a3a2f33342d3334203d3e20323633363631.roa
Signing time:             Thu 28 Mar 2024 18:45:01 +0000
ROA not before:           Thu 28 Mar 2024 18:40:01 +0000
ROA not after:            Thu 27 Mar 2025 18:45:01 +0000
asID:                     263661
IP address blocks:        2804:1128:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:fd:54:13:c2:01:7d:ce:78:f5:42:2c:bf:d1:44:fa:b8:0c:2f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F461E0163E83106F84ADF1433865326051B09F5
        Validity
            Not Before: Mar 28 18:40:01 2024 GMT
            Not After : Mar 27 18:45:01 2025 GMT
        Subject: CN=3F54458142DD9DCAC406F146AC9A73EA0A3A8624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ae:e8:e1:c7:16:ea:69:4b:a1:19:ee:88:e2:
                    cf:75:4b:c4:9c:57:bb:48:3b:47:3e:01:83:cb:40:
                    38:3d:05:f3:3f:67:99:f8:c4:10:97:f7:9d:90:1d:
                    7b:76:7d:7a:8c:fb:04:87:39:12:53:9f:e8:58:82:
                    0d:e7:6f:14:fb:06:87:eb:36:13:e2:a1:af:0a:01:
                    81:ab:de:31:8c:88:2b:55:ed:81:46:99:17:8c:0a:
                    c9:b9:e9:d2:78:a3:46:7b:0e:0a:06:c2:3d:51:1e:
                    12:d4:58:2a:ef:4c:c5:23:cd:57:dd:26:0f:67:e0:
                    68:85:86:fd:fa:b1:53:ee:e4:00:89:04:1a:b1:c9:
                    9b:ed:e9:6b:ad:53:82:52:4b:a3:5d:28:6b:2c:ca:
                    85:dd:5e:5d:b4:38:7c:2e:d3:81:2d:13:45:da:bc:
                    bb:3a:f8:27:94:36:22:ad:8a:88:a7:1b:b9:b0:31:
                    9c:7c:60:e7:b7:16:13:dd:79:6b:79:fd:e6:5e:6f:
                    aa:7a:53:17:13:57:22:e1:98:09:63:38:7f:9b:78:
                    4c:cd:1f:03:27:da:67:cc:83:12:88:d9:c0:12:1c:
                    ce:2a:f8:fe:c3:c9:a9:82:78:86:0c:51:a0:89:77:
                    39:11:3b:c8:ff:45:27:d2:cb:12:da:6a:c5:cc:84:
                    9e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:54:45:81:42:DD:9D:CA:C4:06:F1:46:AC:9A:73:EA:0A:3A:86:24
            X509v3 Authority Key Identifier:
                keyid:1F:46:1E:01:63:E8:31:06:F8:4A:DF:14:33:86:53:26:05:1B:09:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/1F461E0163E83106F84ADF1433865326051B09F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F461E0163E83106F84ADF1433865326051B09F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/323830343a313132383a343030303a3a2f33342d3334203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1128:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         28:07:f7:3d:ab:4e:8f:f5:fa:5e:a7:fc:67:92:ee:52:27:6c:
         e4:bc:4f:de:bb:9a:fd:3a:80:82:e2:f4:60:a5:56:05:15:47:
         38:c2:94:a0:d6:b6:b2:64:45:9a:c0:6e:14:70:ec:21:5a:60:
         db:84:ad:9c:8b:73:59:4b:42:52:f2:99:21:30:3e:a4:29:d0:
         63:02:b1:80:bf:cc:02:df:f1:c7:f1:f0:8f:36:29:0d:8f:87:
         79:9c:1a:aa:2e:5a:40:a2:77:af:86:77:24:a6:06:ff:3f:4a:
         f4:10:28:66:31:c7:60:70:56:a0:b3:7a:28:f7:58:56:2f:d0:
         b2:cd:4d:26:55:c8:47:49:b1:b9:b3:31:8a:89:63:aa:57:50:
         bb:46:04:92:53:c2:42:5c:2f:e7:7d:4e:eb:57:e7:65:17:9f:
         0e:04:80:87:6e:fa:00:8c:10:19:3c:f1:6b:19:62:ef:28:61:
         c0:3a:14:19:ce:17:55:cb:0b:db:c3:1d:96:ed:d1:f3:bf:a3:
         0c:e3:b0:f3:fc:74:2a:77:b3:b1:64:e8:a3:2b:02:21:ae:02:
         d4:76:87:cf:1c:28:ae:f8:93:27:f0:4a:6e:fb:28:3d:75:fb:
         b2:14:1a:6d:cc:bf:c0:b3:58:82:af:67:c5:2e:d8:67:e1:2c:
         7b:e9:d7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org