Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/323830343a353331633a3233383a3a2f34352d313238203d3e20323638353634.roa
File:                     323830343a353331633a3233383a3a2f34352d313238203d3e20323638353634.roa (raw, json)
Hash identifier:          nRDpKR7zEF7MyroqHNQP/JOqz4+LDvxMe3amVG4DniQ=
Subject key identifier:   42:83:A4:53:A5:A4:8A:5B:1A:1F:E2:C6:66:2F:23:D7:B0:31:92:79
Certificate issuer:       /CN=4B36F6F61A74C627935F4971F2A9C165761A178A
Certificate serial:       016AB40D93E83FBBACABAC1F9BE50FB9C78DEA33
Authority key identifier: 4B:36:F6:F6:1A:74:C6:27:93:5F:49:71:F2:A9:C1:65:76:1A:17:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B36F6F61A74C627935F4971F2A9C165761A178A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/323830343a353331633a3233383a3a2f34352d313238203d3e20323638353634.roa
Signing time:             Thu 19 Sep 2024 14:22:01 +0000
ROA not before:           Thu 19 Sep 2024 14:17:01 +0000
ROA not after:            Thu 18 Sep 2025 14:22:01 +0000
asID:                     268564
IP address blocks:        2804:531c:238::/45 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:6a:b4:0d:93:e8:3f:bb:ac:ab:ac:1f:9b:e5:0f:b9:c7:8d:ea:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B36F6F61A74C627935F4971F2A9C165761A178A
        Validity
            Not Before: Sep 19 14:17:01 2024 GMT
            Not After : Sep 18 14:22:01 2025 GMT
        Subject: CN=4283A453A5A48A5B1A1FE2C6662F23D7B0319279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fb:c1:f6:4a:fc:55:8c:53:88:e3:1d:e7:51:
                    23:68:40:c8:2d:73:14:89:6f:f0:05:fd:df:f6:2b:
                    a9:f4:92:6d:15:c8:e7:0c:db:3b:46:fd:3a:2b:0a:
                    39:f2:29:d8:5f:f0:62:e9:f1:56:84:a3:e7:98:5e:
                    60:42:43:95:2e:f2:ad:31:38:40:49:ec:72:2a:4d:
                    30:b0:97:fb:5d:5e:9e:f0:91:bc:e7:64:37:e5:60:
                    b7:6a:0d:5e:f2:fa:ac:9a:8d:97:cc:88:36:a3:d0:
                    d5:3f:34:27:8f:fa:63:ae:6b:6a:18:66:4e:da:1f:
                    d2:16:62:7f:01:b2:a0:d4:31:e1:f6:dd:3b:a4:b3:
                    88:ee:83:d5:79:7c:58:aa:12:71:96:2b:e2:ef:bd:
                    df:dc:d0:4b:23:8a:b5:20:20:0f:c5:58:46:3b:97:
                    de:bc:bf:ff:31:20:80:e9:49:21:fe:6c:bd:96:56:
                    d4:14:36:ca:08:da:e3:90:fe:b5:56:25:99:b9:51:
                    f7:d1:90:5f:a4:7c:42:e9:8a:a4:cb:de:a8:ca:07:
                    98:24:34:2f:db:99:04:9e:84:ff:6a:96:bf:fc:30:
                    16:9b:3a:e3:b9:88:27:5a:1b:01:b4:b4:ab:e7:a2:
                    03:d9:02:8d:18:64:78:5f:14:ab:f4:3b:3f:ed:bd:
                    57:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:83:A4:53:A5:A4:8A:5B:1A:1F:E2:C6:66:2F:23:D7:B0:31:92:79
            X509v3 Authority Key Identifier:
                keyid:4B:36:F6:F6:1A:74:C6:27:93:5F:49:71:F2:A9:C1:65:76:1A:17:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/4B36F6F61A74C627935F4971F2A9C165761A178A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B36F6F61A74C627935F4971F2A9C165761A178A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/323830343a353331633a3233383a3a2f34352d313238203d3e20323638353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:531c:238::/45

    Signature Algorithm: sha256WithRSAEncryption
         43:15:87:00:64:56:21:87:21:fb:03:a0:2c:8b:65:6a:77:69:
         3d:33:3f:fd:98:bb:10:64:b6:98:a6:ac:0c:07:b4:fb:ca:0e:
         ec:42:0a:23:2d:13:6e:23:03:c5:f5:cb:8b:1f:ea:c4:67:13:
         fc:90:5e:8c:2c:4c:6f:50:1f:09:2f:fa:e1:67:2e:4d:24:9a:
         af:1b:29:08:3e:cd:34:b0:7e:fa:77:3b:7c:2c:f9:aa:bd:72:
         bc:90:8f:ed:54:5c:fe:da:93:70:4f:85:5f:03:6a:8f:63:70:
         31:cc:02:cb:3d:d5:0e:03:f4:d1:e6:07:e7:3f:25:81:90:f5:
         2e:87:39:15:9d:37:29:c9:85:56:24:fb:26:64:04:13:2f:aa:
         6c:06:59:37:78:66:dd:92:ee:2e:f6:21:e4:0e:f7:61:4b:76:
         a1:9a:86:00:d9:10:41:f1:b6:3c:73:aa:97:92:a2:43:f9:b5:
         1b:43:87:a9:50:ad:70:76:0f:8f:b4:6e:6b:24:c3:72:ec:5d:
         a9:90:94:39:73:c2:fb:f6:4f:e8:e6:13:e6:fe:ab:32:6a:bd:
         f2:3b:ef:ff:c6:e3:73:fb:d8:e8:be:f7:33:a7:ab:25:c2:50:
         28:58:ec:04:0c:f5:f2:9d:1c:08:ba:a7:1b:65:e7:af:b9:d0:
         27:30:53:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 21:35:09 2024 by rpki-client on console-ams.rpki-client.org