Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/0/323830343a3732303a3a2f33322d3438203d3e20323632363231.roa
File:                     323830343a3732303a3a2f33322d3438203d3e20323632363231.roa (raw, json)
Hash identifier:          Dj/LQFq7eC9qjIgZAiBuUJ4WtKcm/rL5dPfUt83mhXU=
Subject key identifier:   E0:39:40:4B:8D:3D:B5:42:F4:0A:FF:F5:C3:78:99:BC:21:E2:D8:1E
Certificate issuer:       /CN=451763EEA73AF05AA3138E10173C59B220D0046A
Certificate serial:       4B8E3A87D6474544DB53DD26F3DE0AE6197E9007
Authority key identifier: 45:17:63:EE:A7:3A:F0:5A:A3:13:8E:10:17:3C:59:B2:20:D0:04:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/451763EEA73AF05AA3138E10173C59B220D0046A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/0/323830343a3732303a3a2f33322d3438203d3e20323632363231.roa
Signing time:             Thu 07 Dec 2023 12:30:56 +0000
ROA not before:           Thu 07 Dec 2023 12:25:56 +0000
ROA not after:            Thu 05 Dec 2024 12:30:56 +0000
asID:                     262621
IP address blocks:        2804:720::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:8e:3a:87:d6:47:45:44:db:53:dd:26:f3:de:0a:e6:19:7e:90:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451763EEA73AF05AA3138E10173C59B220D0046A
        Validity
            Not Before: Dec  7 12:25:56 2023 GMT
            Not After : Dec  5 12:30:56 2024 GMT
        Subject: CN=E039404B8D3DB542F40AFFF5C37899BC21E2D81E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:00:57:37:90:a6:78:6c:0d:bd:da:7a:31:4f:
                    c1:7d:45:23:c4:24:bc:f8:79:35:1c:ca:bf:a0:20:
                    4d:ee:24:58:83:2c:37:23:0a:53:49:e2:5b:ea:41:
                    02:e4:ac:f6:6b:9a:e6:4d:a9:d1:f1:e3:11:7b:2f:
                    11:34:ba:2d:a2:53:4f:40:cd:ac:1b:8c:fa:80:6e:
                    8f:fd:25:24:2d:6c:13:72:a4:d9:b7:d4:65:b1:43:
                    e3:3f:4a:6b:24:34:e7:f4:11:2b:91:63:d8:a5:a6:
                    24:9b:8e:1c:59:69:a2:0a:a5:93:dd:fb:93:80:89:
                    b8:24:47:f6:73:34:ff:98:bb:4d:c4:e3:e0:31:3e:
                    0e:a6:c5:4d:59:9c:07:a6:c7:14:77:62:f2:73:53:
                    4b:87:d0:ca:2f:f0:cc:27:06:7d:31:85:ea:15:d8:
                    5c:32:00:b2:60:de:29:da:b7:a8:0d:18:09:a7:c4:
                    1e:b2:db:d0:cd:db:c2:0b:56:25:14:03:13:46:90:
                    67:a1:65:2c:d7:7b:41:13:a7:77:8c:92:93:3c:be:
                    03:af:3e:e1:e3:71:41:87:05:17:07:57:6f:10:7a:
                    17:82:ab:d7:b6:8b:51:ba:69:e4:12:c4:94:4e:ad:
                    59:7e:3f:3e:70:36:5b:cf:98:e8:f1:1f:79:02:05:
                    dd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:39:40:4B:8D:3D:B5:42:F4:0A:FF:F5:C3:78:99:BC:21:E2:D8:1E
            X509v3 Authority Key Identifier:
                keyid:45:17:63:EE:A7:3A:F0:5A:A3:13:8E:10:17:3C:59:B2:20:D0:04:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/0/451763EEA73AF05AA3138E10173C59B220D0046A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/451763EEA73AF05AA3138E10173C59B220D0046A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/0/323830343a3732303a3a2f33322d3438203d3e20323632363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:720::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:49:48:b9:c5:17:de:80:26:b7:06:f9:c6:d4:7a:61:31:12:
         b3:ad:bd:90:dc:58:39:6a:8f:aa:81:eb:14:1b:3a:b0:f8:6f:
         0b:70:f5:a6:62:8d:07:8d:75:2f:79:7b:50:c9:06:c9:59:85:
         f9:90:9f:ce:45:f2:ac:d7:47:ba:44:42:97:39:8d:16:27:7b:
         1a:99:e5:e6:0f:29:9d:b2:f3:eb:cb:b4:bc:22:bb:d4:2b:68:
         b8:37:b8:45:78:84:4d:9a:81:d5:51:fe:52:ef:bc:be:ee:13:
         1b:75:8c:23:bf:08:f2:5a:c8:7f:30:45:ce:2d:5f:60:0c:f8:
         61:46:98:3c:0a:23:1e:f2:43:aa:53:e4:08:48:0f:d2:40:83:
         41:0e:24:fa:eb:e9:38:45:bd:30:99:cf:1f:40:4f:e7:c4:78:
         77:19:1e:b0:6e:7c:d8:3b:fc:7c:56:84:92:73:44:8b:24:0f:
         25:1f:b8:21:ce:cd:10:0b:4c:84:01:18:88:a8:5f:80:15:c9:
         51:df:a0:9c:e5:d2:59:bd:ba:a1:9d:ef:5f:34:08:01:85:79:
         b0:3e:bf:c5:fd:f5:89:4f:66:d3:62:9b:57:70:01:8d:0a:d6:
         8b:c0:da:c8:11:ad:09:c2:94:0d:34:fc:ef:51:0e:b1:59:42:
         86:00:ca:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org