Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/323830343a316263343a3a2f33332d3333203d3e203631373438.roa
File:                     323830343a316263343a3a2f33332d3333203d3e203631373438.roa (raw, json)
Hash identifier:          QbvuR+C+Sr+PR9XRLZcf6diBByg0oezGDElo74rEW2g=
Subject key identifier:   4D:6C:60:4B:21:A7:28:36:7F:E4:85:3C:A2:87:A5:0B:AF:18:60:50
Certificate issuer:       /CN=2483D2805F2966A13A1FF7E130907B7443BE7FB6
Certificate serial:       24A9E1ABFFF88D08BFDA319B53796438F48908B7
Authority key identifier: 24:83:D2:80:5F:29:66:A1:3A:1F:F7:E1:30:90:7B:74:43:BE:7F:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2483D2805F2966A13A1FF7E130907B7443BE7FB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/323830343a316263343a3a2f33332d3333203d3e203631373438.roa
Signing time:             Wed 10 Apr 2024 19:18:38 +0000
ROA not before:           Wed 10 Apr 2024 19:13:38 +0000
ROA not after:            Wed 09 Apr 2025 19:18:38 +0000
asID:                     61748
IP address blocks:        2804:1bc4::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:a9:e1:ab:ff:f8:8d:08:bf:da:31:9b:53:79:64:38:f4:89:08:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2483D2805F2966A13A1FF7E130907B7443BE7FB6
        Validity
            Not Before: Apr 10 19:13:38 2024 GMT
            Not After : Apr  9 19:18:38 2025 GMT
        Subject: CN=4D6C604B21A728367FE4853CA287A50BAF186050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:de:ff:f8:b7:63:18:f9:e4:4f:2b:59:45:2c:
                    f3:b6:2e:9c:41:df:ef:64:0d:ec:b9:89:2f:77:55:
                    59:1b:c9:5e:05:cf:86:94:ea:da:2f:a4:a8:ac:4c:
                    0f:bb:6a:6e:36:3e:ef:97:2d:ab:5f:10:e4:df:85:
                    51:dd:13:3e:c3:d3:4c:84:00:19:32:72:0a:e0:21:
                    9c:48:47:bf:32:8f:13:0f:aa:c0:5a:96:f1:2c:a6:
                    1b:12:70:12:2a:3a:98:b2:be:6a:b7:2b:9b:da:a4:
                    86:09:36:84:24:d7:83:b2:a3:f4:58:01:5e:cd:03:
                    53:e8:b8:14:31:d7:3a:78:df:45:41:66:45:7b:bb:
                    3e:1d:89:3a:cc:49:52:49:ae:e1:38:64:ff:0e:0f:
                    2c:2c:a9:dd:3b:48:03:d9:bd:c5:c7:7d:bb:a0:8e:
                    ae:35:d0:0d:cb:7d:4d:ce:97:9c:0b:66:3f:54:ff:
                    b4:e5:f0:07:06:ad:f8:9c:99:55:0b:37:ef:1d:59:
                    9c:97:f6:df:b1:f5:1f:b5:3b:32:4e:04:30:24:63:
                    68:f4:d6:52:be:34:e5:dd:58:17:ce:f4:b5:7f:2b:
                    66:3c:64:25:f8:7b:c2:7c:e3:76:e8:55:87:b6:b9:
                    c4:b5:dc:f3:30:66:9e:9d:0f:d4:57:0d:5f:4b:4c:
                    31:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6C:60:4B:21:A7:28:36:7F:E4:85:3C:A2:87:A5:0B:AF:18:60:50
            X509v3 Authority Key Identifier:
                keyid:24:83:D2:80:5F:29:66:A1:3A:1F:F7:E1:30:90:7B:74:43:BE:7F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/2483D2805F2966A13A1FF7E130907B7443BE7FB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2483D2805F2966A13A1FF7E130907B7443BE7FB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/323830343a316263343a3a2f33332d3333203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1bc4::/33

    Signature Algorithm: sha256WithRSAEncryption
         60:d6:2f:65:4e:16:03:47:27:97:2a:73:c2:40:9a:74:e3:31:
         0e:bf:32:71:54:f9:2c:0a:65:1b:fd:93:ef:00:98:f8:a0:cd:
         ff:13:97:31:24:01:cb:69:9f:24:2c:5b:af:62:e7:bd:85:dd:
         87:2f:d6:8d:c7:0d:ee:56:94:86:e4:ed:b8:3d:ad:10:8f:38:
         e0:16:50:f5:02:84:a7:1c:fe:43:a6:cd:1a:cb:90:35:2b:1a:
         49:2d:16:8b:39:e8:0d:90:76:41:54:4f:ba:bd:e8:94:08:ca:
         02:cf:15:9b:4d:e5:f5:61:4c:78:51:3f:83:91:4c:0a:5e:eb:
         12:97:6a:20:85:07:fe:54:e1:41:6a:c9:ce:8a:5f:ad:ab:b6:
         b8:d6:f8:9a:56:20:87:a8:21:e5:68:2d:86:73:d1:de:09:d4:
         e2:23:25:e5:70:5a:56:5c:da:b4:35:dc:79:7e:89:0d:46:0f:
         ab:52:11:ba:4e:aa:36:a1:8d:eb:8e:08:0b:12:0f:0c:f8:59:
         ed:18:0f:9b:f8:b2:af:cd:db:ef:92:16:b5:5c:bf:d9:28:e4:
         21:5d:02:0c:16:d5:c8:36:bb:f7:e4:c6:cc:91:49:68:b8:95:
         0d:8e:3e:15:4e:d5:45:3e:fb:23:dd:b3:9f:4d:ac:05:97:c8:
         55:44:e1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org