Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3162303a3a2f34342d3434203d3e20323632343638.roa
File:                     323830343a6539343a3162303a3a2f34342d3434203d3e20323632343638.roa (raw, json)
Hash identifier:          fBhEyFEkIcXBPTccL84K0BqJeR+HUABjTz9nio4hNK0=
Subject key identifier:   90:A4:AC:56:05:AA:F6:93:85:8B:10:EF:F8:92:64:B7:CD:F0:D3:09
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       4BFA5E73D694F342495F253F704AA2DC77BB723F
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3162303a3a2f34342d3434203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:57 +0000
ROA not before:           Tue 20 Dec 2022 15:04:57 +0000
ROA not after:            Tue 19 Dec 2023 15:09:57 +0000
asID:                     262468
IP address blocks:        2804:e94:1b0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:fa:5e:73:d6:94:f3:42:49:5f:25:3f:70:4a:a2:dc:77:bb:72:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:57 2022 GMT
            Not After : Dec 19 15:09:57 2023 GMT
        Subject: CN=90A4AC5605AAF693858B10EFF89264B7CDF0D309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b6:66:c2:df:3a:40:4b:17:9a:9e:85:c4:88:
                    6f:62:82:a7:06:93:72:c6:96:b9:b1:6e:30:fd:64:
                    57:49:fc:cf:f9:e9:bc:8e:13:72:6f:31:9b:de:38:
                    ac:dc:77:df:53:8b:c0:c2:10:a0:e5:b4:9f:35:2d:
                    92:24:32:f2:8d:5d:8e:52:ee:21:74:a9:e6:c8:da:
                    73:8c:1c:a5:f1:0d:0d:9c:f0:51:12:8e:14:80:a1:
                    29:dd:a2:5e:9f:46:2d:0c:0f:02:a1:34:0c:ec:a7:
                    4d:a0:45:66:fe:6f:7a:c8:02:f8:78:84:64:40:06:
                    c8:96:f2:4f:6a:db:21:c9:e4:87:a1:fe:43:32:13:
                    07:a7:2c:60:78:ff:36:a4:a9:26:0b:bf:1d:47:cb:
                    db:c1:bd:dd:6d:4d:53:91:16:bd:52:6d:83:a8:a5:
                    54:0f:d0:a5:26:4b:70:bc:7a:6f:3f:b3:42:fd:19:
                    18:6c:eb:0a:16:a3:58:a6:93:14:da:48:12:8a:50:
                    d8:42:9b:9f:98:1d:e9:ed:25:f5:f2:c6:04:57:8b:
                    49:c8:80:b4:0a:2d:de:29:dc:f3:b8:e3:34:89:82:
                    f9:ba:f1:54:a1:75:8f:1d:a1:6f:7b:4a:e4:b4:81:
                    68:26:d6:c1:84:bc:b6:0b:f9:9a:b5:b0:bd:4c:43:
                    2d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A4:AC:56:05:AA:F6:93:85:8B:10:EF:F8:92:64:B7:CD:F0:D3:09
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3162303a3a2f34342d3434203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e94:1b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         2d:9e:4a:05:5b:e7:90:ff:85:0d:d6:7c:0f:1a:01:b2:0a:09:
         51:07:87:43:9e:8d:14:7d:f1:06:3e:32:8b:bc:2c:a8:1b:17:
         b8:29:d4:58:ee:27:d9:32:5d:86:a2:25:d4:c3:d9:8c:18:ea:
         a6:1c:73:45:86:3a:35:9c:af:61:ec:b7:4b:74:3e:11:44:02:
         0f:77:10:a2:a2:8c:49:98:1c:8c:d0:a8:49:bd:08:c7:8d:e3:
         72:26:08:75:07:10:82:03:f3:5c:b7:f8:36:8f:a4:11:75:51:
         41:ab:cd:dd:17:b9:20:22:c3:d9:73:e0:89:54:6a:b9:5f:bb:
         ea:43:62:b8:7e:61:2c:3d:0f:ab:39:b6:92:d7:88:5a:a7:dc:
         cc:2c:14:0e:62:41:f3:84:01:ba:4b:2c:68:6f:78:43:dc:6d:
         dd:6c:67:ed:76:3a:ba:75:90:69:10:85:fb:60:20:40:dd:ab:
         1d:bc:20:cb:45:c2:b2:4b:01:5d:db:8f:ea:78:9e:d7:32:e5:
         20:5e:59:c8:5e:94:ff:67:23:1b:2e:a8:52:40:2f:e2:35:42:
         49:84:d3:51:ce:4a:20:f5:d5:b1:af:9a:81:d9:ee:a0:49:02:
         d9:81:0a:db:b4:10:75:08:25:69:42:0b:c8:9a:4f:a3:4a:90:
         60:5b:07:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org