Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3734303a3a2f34322d3432203d3e20323632343638.roa
File:                     323830343a6539343a3734303a3a2f34322d3432203d3e20323632343638.roa (raw, json)
Hash identifier:          0iRBM/7PNlxKAecn0pjNCyYHBPRtSPujMoGEvoP+Ids=
Subject key identifier:   43:0F:C3:0C:16:2A:8A:B3:53:71:4A:0A:F5:09:9F:A3:F5:16:C8:86
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       4EB74576A2533BAB12730C37C4C368CCEF9201E1
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3734303a3a2f34322d3432203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:56 +0000
ROA not before:           Tue 20 Dec 2022 15:04:56 +0000
ROA not after:            Tue 19 Dec 2023 15:09:56 +0000
asID:                     262468
IP address blocks:        2804:e94:740::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b7:45:76:a2:53:3b:ab:12:73:0c:37:c4:c3:68:cc:ef:92:01:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:56 2022 GMT
            Not After : Dec 19 15:09:56 2023 GMT
        Subject: CN=430FC30C162A8AB353714A0AF5099FA3F516C886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b9:44:fe:96:d6:21:6f:4a:f4:00:49:ab:54:
                    4e:ee:93:f8:1a:b7:12:3a:df:c5:43:42:fa:9b:dc:
                    6d:8f:4f:2f:22:5d:ed:55:ad:69:f4:59:18:79:5f:
                    c9:70:b1:f0:ef:67:c7:4b:d8:ee:d3:b4:ad:15:dc:
                    c0:ce:e8:af:c5:82:72:72:25:a0:42:e6:6d:02:d5:
                    a5:7a:ec:60:2b:12:f5:b7:ef:32:4e:c8:c8:01:17:
                    64:e8:ea:4f:94:b9:02:99:a8:75:92:0f:07:50:92:
                    da:22:20:37:8d:70:a1:1b:3e:4a:ae:1d:1f:1d:85:
                    3a:62:81:26:c6:ee:06:02:ba:13:33:ea:e0:78:2a:
                    08:b1:46:69:6e:0f:9a:0f:e9:36:3b:8b:49:ab:01:
                    35:9b:6e:5d:0e:bc:06:66:fd:b6:c4:95:fe:ca:e6:
                    3d:47:dc:da:61:27:70:a9:81:17:01:1f:9e:6d:51:
                    9a:6c:2b:f9:8a:b4:4c:2c:d4:48:c7:24:8f:cc:3b:
                    1f:e4:71:c4:f7:4c:04:0c:d9:f4:16:25:24:f6:51:
                    9a:63:eb:b1:67:3f:e8:e5:b4:f6:7a:d8:47:dd:47:
                    b6:05:28:1b:ae:ac:e0:81:27:7c:22:71:77:bc:79:
                    79:04:ae:52:44:dd:32:13:3b:36:1f:54:58:b6:22:
                    4e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:0F:C3:0C:16:2A:8A:B3:53:71:4A:0A:F5:09:9F:A3:F5:16:C8:86
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3734303a3a2f34322d3432203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e94:740::/42

    Signature Algorithm: sha256WithRSAEncryption
         86:c6:4d:c4:14:2c:b0:06:4a:c8:17:42:02:f8:54:28:ef:17:
         85:b2:d3:3d:d1:1f:f0:29:5c:c9:b2:20:bf:bd:f0:c0:fe:05:
         1d:d8:67:2d:64:e2:57:b2:e5:b0:e7:70:b7:83:f1:4f:c0:12:
         eb:88:47:2f:b1:65:94:9d:bb:1d:37:42:5a:63:4d:62:ee:07:
         46:fa:5d:2a:40:b0:ae:5a:d3:a1:6e:95:79:12:d2:a1:97:bb:
         4b:59:b8:dc:9e:b7:54:83:9f:a4:4c:1e:73:76:35:91:b6:52:
         38:99:72:1c:c3:9b:98:d6:fd:7e:f6:a5:44:89:92:0e:9c:31:
         fd:a7:19:2c:5d:50:69:3c:de:b0:b8:b5:43:18:73:4c:13:d1:
         9b:57:b7:22:7e:46:3e:9f:81:41:2e:63:e3:1d:14:28:0a:98:
         94:6d:98:ce:74:43:e4:6d:51:c6:6a:5b:eb:e9:56:79:3e:15:
         c5:eb:56:3c:aa:4e:44:9c:9b:89:5c:b8:74:50:a5:f7:36:45:
         df:a5:37:0b:6e:3a:d4:aa:00:43:a9:3b:df:be:47:96:66:cd:
         c7:0a:ea:d6:da:7d:2e:87:84:06:b5:e3:f0:48:a9:ca:a6:84:
         da:dc:ab:d7:b0:54:f1:22:30:ed:98:6f:d0:3e:a4:47:ef:d3:
         44:b0:af:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org