Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/0/323830343a323731303a3a2f33322d3438203d3e20323633383733.roa
File:                     323830343a323731303a3a2f33322d3438203d3e20323633383733.roa (raw, json)
Hash identifier:          O14SgQPL9eraePsWEXnh+W8ztAj08RlFTSlnPzgW7iw=
Subject key identifier:   17:21:12:1A:55:F0:00:DC:05:86:B1:74:D6:E1:6E:EF:0C:53:8B:D3
Certificate issuer:       /CN=D019263BB7CC1DC5591FE5F5525650626FF98886
Certificate serial:       3410E5ECAC910E3DFE4987EC976414DE96CD88D3
Authority key identifier: D0:19:26:3B:B7:CC:1D:C5:59:1F:E5:F5:52:56:50:62:6F:F9:88:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D019263BB7CC1DC5591FE5F5525650626FF98886.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/0/323830343a323731303a3a2f33322d3438203d3e20323633383733.roa
Signing time:             Thu 11 Apr 2024 20:00:40 +0000
ROA not before:           Thu 11 Apr 2024 19:55:40 +0000
ROA not after:            Thu 10 Apr 2025 20:00:40 +0000
asID:                     263873
IP address blocks:        2804:2710::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:10:e5:ec:ac:91:0e:3d:fe:49:87:ec:97:64:14:de:96:cd:88:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D019263BB7CC1DC5591FE5F5525650626FF98886
        Validity
            Not Before: Apr 11 19:55:40 2024 GMT
            Not After : Apr 10 20:00:40 2025 GMT
        Subject: CN=1721121A55F000DC0586B174D6E16EEF0C538BD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5e:fb:d9:2e:fc:a5:39:4a:74:c8:32:9b:f4:
                    ff:78:cd:d0:f2:c7:bc:f5:27:f3:03:66:82:b0:3f:
                    9d:dc:ef:62:e0:f6:0c:da:56:a5:b2:01:f0:ea:70:
                    ba:23:85:7f:82:64:4f:90:f1:e6:2f:37:67:32:56:
                    35:2c:3a:3a:de:28:be:60:19:6f:5d:1c:f2:a8:e4:
                    b5:b6:38:88:fa:9f:48:3e:b9:d3:23:8a:1a:5e:d5:
                    12:f3:d2:de:d3:45:9a:03:cd:de:7d:88:64:d5:11:
                    d9:b1:e1:5e:df:0f:62:bc:d9:fe:ef:9e:d0:5c:7c:
                    ed:90:f7:e9:e3:da:81:9c:2e:c4:4d:54:89:4f:80:
                    00:b8:f3:91:28:12:87:b9:80:0f:eb:c2:54:3d:3e:
                    f6:f3:cb:3e:59:e1:ca:b6:6d:72:e5:4c:94:3b:6c:
                    e5:b7:d0:c3:09:6f:57:81:6c:73:83:f4:79:f6:5c:
                    50:91:09:c0:4f:9c:ae:cb:37:c7:dd:41:14:a5:42:
                    60:7c:f6:9e:48:cd:04:0c:5c:5a:26:bb:f7:38:7f:
                    d5:52:7d:24:94:c5:ac:75:97:21:9a:5b:d4:43:7b:
                    fd:f4:c7:cd:b7:59:54:d4:42:1e:c5:71:df:7d:07:
                    c8:8f:77:c4:20:b4:29:00:56:a7:a3:69:84:01:b4:
                    19:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:21:12:1A:55:F0:00:DC:05:86:B1:74:D6:E1:6E:EF:0C:53:8B:D3
            X509v3 Authority Key Identifier:
                keyid:D0:19:26:3B:B7:CC:1D:C5:59:1F:E5:F5:52:56:50:62:6F:F9:88:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/0/D019263BB7CC1DC5591FE5F5525650626FF98886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D019263BB7CC1DC5591FE5F5525650626FF98886.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/0/323830343a323731303a3a2f33322d3438203d3e20323633383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2710::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:a2:2d:c3:34:1e:cd:fa:d5:72:91:23:fd:88:68:8f:8d:bd:
         78:bf:1d:27:98:d6:d7:67:10:e6:6f:ea:e0:0d:1f:a3:b6:83:
         f8:99:33:e2:d3:37:aa:8d:50:d8:9c:64:60:83:f8:aa:aa:bb:
         bb:4d:3b:86:6f:58:65:40:2d:c4:3c:27:ee:9e:3b:fd:b6:d2:
         87:60:d0:c5:05:9d:6d:b0:cd:5f:82:2d:b8:6c:05:81:24:dc:
         21:64:93:fc:0d:03:4b:6f:4b:3a:f2:97:b0:0c:d3:cd:c9:6d:
         b5:a3:0c:81:14:b7:ba:9d:d3:16:2d:97:2d:bc:e0:3b:2e:5c:
         df:89:ca:3c:45:36:de:a6:e7:7a:52:bb:61:18:ef:e4:38:a4:
         a3:15:70:c9:d3:a4:cc:8b:d6:64:50:2a:45:62:84:5a:d1:1a:
         ed:b4:bb:aa:5a:f6:33:9f:3b:cb:b9:7b:d3:70:c6:2c:56:13:
         a6:fa:53:73:2b:97:e8:08:4e:5a:b3:4f:c2:9e:86:12:de:c5:
         77:a0:16:67:81:b7:90:35:d1:ea:b6:17:a6:de:ae:fc:4b:94:
         e4:d0:7e:46:2b:d0:7b:c5:2d:7f:2e:b7:ef:54:70:82:de:14:
         da:59:b4:94:6e:a0:86:0a:9b:a8:43:8b:34:1c:0c:48:86:b8:
         cd:58:0d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org