Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a31303a3a2f34342d3434203d3e20323632343638.roa
File:                     323830343a6539343a31303a3a2f34342d3434203d3e20323632343638.roa (raw, json)
Hash identifier:          mgaYXV8MUQ56TMnOUUpwbPbhfqupgTPGumJu/KM7WyI=
Subject key identifier:   F5:6F:7C:16:EF:BF:23:8F:1D:6B:7A:A3:0A:0A:E0:75:47:38:BF:E9
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       4A205BB2194638291DD6767E85582D6056EAC3B7
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a31303a3a2f34342d3434203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:58 +0000
ROA not before:           Tue 20 Dec 2022 15:04:58 +0000
ROA not after:            Tue 19 Dec 2023 15:09:58 +0000
asID:                     262468
IP address blocks:        2804:e94:10::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:20:5b:b2:19:46:38:29:1d:d6:76:7e:85:58:2d:60:56:ea:c3:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:58 2022 GMT
            Not After : Dec 19 15:09:58 2023 GMT
        Subject: CN=F56F7C16EFBF238F1D6B7AA30A0AE0754738BFE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a2:9a:91:32:e0:74:82:3d:e0:a0:9c:f5:b2:
                    da:94:06:e8:07:0e:35:19:d3:52:c4:de:2d:a2:5d:
                    35:3d:3b:d6:e1:1f:58:19:ad:2f:16:70:15:74:d6:
                    af:dd:93:c4:a3:cd:00:e7:b3:f0:8a:a0:82:f9:79:
                    82:c8:41:48:ff:e5:ca:e3:22:c0:61:4d:f1:cf:60:
                    9a:f2:c4:df:fd:7c:e2:79:89:7e:c8:6e:1d:dd:e3:
                    2a:78:bc:14:b0:d0:8c:aa:d3:dd:56:6c:c2:e3:f2:
                    45:6d:f5:82:dd:87:9e:b4:4f:68:c8:1e:5b:0c:2d:
                    a5:4d:c7:a3:21:87:70:a2:07:aa:91:74:00:72:55:
                    3c:b4:6c:8f:3e:90:e7:c4:db:c2:8d:cc:97:95:8d:
                    4f:63:dc:00:26:af:81:80:80:78:c7:39:b8:be:ef:
                    9b:ed:d7:2c:16:e9:2e:77:79:78:27:6a:dd:33:e8:
                    32:2f:40:8f:41:db:2d:1d:0a:03:7b:f8:83:cc:32:
                    80:28:49:55:1e:e8:b5:23:87:7d:ba:1d:5f:94:5b:
                    bc:24:b2:e0:ca:a2:ad:b3:ca:e1:85:18:d0:8f:92:
                    f1:d6:cb:b0:a3:dd:0b:ff:18:27:ea:8e:98:9d:58:
                    e1:51:03:12:b2:1b:09:f6:6a:ec:c0:5a:56:4d:2d:
                    7e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6F:7C:16:EF:BF:23:8F:1D:6B:7A:A3:0A:0A:E0:75:47:38:BF:E9
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a31303a3a2f34342d3434203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e94:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         aa:cc:22:9b:0a:3f:6e:a7:38:40:ba:4c:b7:90:6f:cd:14:f2:
         b8:f8:c5:e6:ac:40:89:19:70:ab:65:93:a2:26:c0:3b:7a:54:
         6c:af:d6:b4:b6:30:d9:1d:40:d3:2d:c7:c8:0d:9f:9e:63:3e:
         54:7a:53:eb:43:85:51:20:50:8b:db:02:20:f8:a8:ec:d3:01:
         67:6a:ad:94:f7:59:28:1f:d2:b3:2a:11:41:60:8b:83:55:32:
         80:4e:12:ad:72:f0:3b:bd:3e:25:ec:24:fe:80:69:4b:0c:10:
         e6:75:96:9f:eb:45:6c:8d:45:ef:1b:cc:77:20:15:67:30:ce:
         42:b2:c4:14:f2:fd:75:cf:46:24:ff:54:b3:96:f5:28:6c:6d:
         9c:7b:f3:79:19:85:30:de:1f:34:bd:40:27:55:60:7e:ab:83:
         ee:82:4f:7f:44:b6:ea:b6:21:52:87:1c:bb:41:fc:d1:0b:29:
         c8:16:3f:d3:36:7a:db:d4:bc:c4:53:51:ea:ce:50:f9:28:5a:
         db:fa:f1:bd:7a:ab:b5:d8:c2:a6:f4:18:a8:4d:e3:9d:5a:6e:
         d7:35:91:7f:61:46:83:8c:c7:21:9c:04:ff:9d:69:0f:04:c0:
         60:2c:86:19:10:da:dd:8a:68:64:81:dc:2d:2f:78:0a:27:85:
         54:59:ea:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org