Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/323830343a326434383a3a2f33322d3336203d3e20323635323731.roa
File:                     323830343a326434383a3a2f33322d3336203d3e20323635323731.roa (raw, json)
Hash identifier:          XHtEbQQda1X573DOmUbZ6hsFB8SwgOjFODT4Z9kcgSQ=
Subject key identifier:   BD:E6:E7:C7:EF:97:FD:73:39:BA:10:D4:AF:64:23:63:87:AF:E5:BA
Certificate issuer:       /CN=130159CF4FA60D26A7D1BD0FA88516733B676D6A
Certificate serial:       779E6C0EAED429FF7D35B615DFF4346CDC5176E1
Authority key identifier: 13:01:59:CF:4F:A6:0D:26:A7:D1:BD:0F:A8:85:16:73:3B:67:6D:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/130159CF4FA60D26A7D1BD0FA88516733B676D6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/323830343a326434383a3a2f33322d3336203d3e20323635323731.roa
Signing time:             Mon 11 Mar 2024 19:07:56 +0000
ROA not before:           Mon 11 Mar 2024 19:02:56 +0000
ROA not after:            Mon 10 Mar 2025 19:07:56 +0000
asID:                     265271
IP address blocks:        2804:2d48::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:9e:6c:0e:ae:d4:29:ff:7d:35:b6:15:df:f4:34:6c:dc:51:76:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130159CF4FA60D26A7D1BD0FA88516733B676D6A
        Validity
            Not Before: Mar 11 19:02:56 2024 GMT
            Not After : Mar 10 19:07:56 2025 GMT
        Subject: CN=BDE6E7C7EF97FD7339BA10D4AF64236387AFE5BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:28:ea:df:fb:1f:29:4c:bb:91:00:f7:98:3c:
                    68:f5:c8:d7:b6:5d:35:6a:b3:d9:b7:36:33:67:b4:
                    6b:e0:9f:19:0f:de:9e:89:3b:0d:76:1a:69:15:c9:
                    df:4b:a4:c8:6a:fc:1c:0a:f7:67:9e:a3:44:f0:32:
                    a3:09:e3:8f:0e:c7:af:e0:a2:bc:a7:e2:c4:54:09:
                    77:a7:3c:08:63:5a:0d:db:ed:84:49:00:f2:d7:7d:
                    60:bf:1e:2a:53:78:ec:af:32:5b:e8:8c:90:e6:38:
                    b1:5a:2e:dc:e5:09:91:bc:0e:2e:a0:3e:a2:4d:81:
                    76:87:35:ad:2a:95:b9:45:1d:e4:12:1a:d6:be:fc:
                    66:2d:2f:ac:3b:4b:12:4a:e3:d4:8e:d0:8f:58:27:
                    bd:95:a9:dd:e4:84:7c:2f:0f:d4:e2:90:8b:ad:e3:
                    04:94:4a:5d:3a:a0:f4:61:f4:b0:de:62:73:c3:52:
                    87:f8:6b:9c:ab:d2:ff:e7:19:4d:3a:7f:d4:28:15:
                    60:d8:16:9b:47:f0:72:0f:9c:48:1d:9e:81:bd:b0:
                    4c:d6:81:40:10:fc:70:d6:bd:b4:4a:72:87:b9:64:
                    f2:9d:e0:91:12:10:f0:f9:f6:b9:4f:c1:31:91:1e:
                    c6:9e:cc:90:5b:dc:d7:ea:ed:06:b7:04:6c:29:7c:
                    e1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E6:E7:C7:EF:97:FD:73:39:BA:10:D4:AF:64:23:63:87:AF:E5:BA
            X509v3 Authority Key Identifier:
                keyid:13:01:59:CF:4F:A6:0D:26:A7:D1:BD:0F:A8:85:16:73:3B:67:6D:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/130159CF4FA60D26A7D1BD0FA88516733B676D6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/130159CF4FA60D26A7D1BD0FA88516733B676D6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/323830343a326434383a3a2f33322d3336203d3e20323635323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d48::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:9f:d7:ba:c0:78:54:cb:db:50:e0:75:60:62:f0:71:63:15:
         50:45:84:5e:c9:ce:ec:a3:78:50:ff:28:a2:7e:91:94:25:f1:
         43:7d:5c:c8:36:54:4a:3b:c0:88:c3:43:85:2c:d8:28:43:25:
         df:9a:bd:31:60:9e:25:44:b9:e4:68:69:c0:76:e0:0e:e5:c7:
         ff:cb:6c:8f:1b:c8:25:63:32:10:f6:c3:41:7a:b3:59:8a:24:
         08:aa:72:8c:b1:81:59:69:66:32:dc:9c:be:f7:55:1d:4a:83:
         fd:2e:85:75:f2:8f:c4:ab:92:c3:e5:ee:65:1d:75:fd:73:28:
         dc:c4:13:35:4f:99:64:37:d9:c2:f5:3b:58:71:ca:be:3b:9c:
         e6:7a:1d:82:04:1d:d6:51:df:42:76:0b:cc:25:2d:2b:ec:3d:
         28:69:ad:91:0e:2c:f0:ee:b8:b7:ae:36:eb:23:bc:09:db:6f:
         6c:ff:2f:62:2b:78:fd:94:4b:be:84:fb:6a:b1:25:53:7e:cd:
         a0:c5:eb:ea:3a:9d:bc:53:14:1a:36:1a:bf:ce:8f:fe:3c:ac:
         9a:c5:24:95:da:c6:93:85:b5:75:d0:2f:cb:c9:1a:21:35:83:
         be:a7:2d:4a:91:b2:0a:3a:2a:83:6b:f5:04:05:e1:a8:95:6d:
         54:57:c6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:24 2024 by rpki-client on console-ams.rpki-client.org