Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/323830343a333961303a3a2f33322d3334203d3e20323636303430.roa
File:                     323830343a333961303a3a2f33322d3334203d3e20323636303430.roa (raw, json)
Hash identifier:          NQRym4mSFwwUSnzjp/GBuPckPGd/pGjI/zUheJ5Q23I=
Subject key identifier:   E2:8D:CB:D3:99:3A:F6:89:38:77:58:D5:34:D1:F4:57:B4:C7:84:A1
Certificate issuer:       /CN=186100CD22AE8C45D9A5ECA2F927E59970780DB1
Certificate serial:       29A7B4166BF914F774D28C612A38E4A20B7A55B4
Authority key identifier: 18:61:00:CD:22:AE:8C:45:D9:A5:EC:A2:F9:27:E5:99:70:78:0D:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/186100CD22AE8C45D9A5ECA2F927E59970780DB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/323830343a333961303a3a2f33322d3334203d3e20323636303430.roa
Signing time:             Tue 04 Apr 2023 14:50:14 +0000
ROA not before:           Tue 04 Apr 2023 14:45:14 +0000
ROA not after:            Tue 02 Apr 2024 14:50:14 +0000
asID:                     266040
IP address blocks:        2804:39a0::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a7:b4:16:6b:f9:14:f7:74:d2:8c:61:2a:38:e4:a2:0b:7a:55:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=186100CD22AE8C45D9A5ECA2F927E59970780DB1
        Validity
            Not Before: Apr  4 14:45:14 2023 GMT
            Not After : Apr  2 14:50:14 2024 GMT
        Subject: CN=E28DCBD3993AF689387758D534D1F457B4C784A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ba:6f:26:37:a1:09:83:41:f8:58:3c:8a:fa:
                    8c:39:39:b4:10:28:17:b5:f4:f5:5b:d1:83:2a:f5:
                    52:de:4e:12:e8:c4:be:e5:54:68:31:10:af:bf:56:
                    8e:af:df:1a:03:10:17:e5:3b:ff:02:13:aa:58:be:
                    65:bb:cc:a5:11:d3:78:a0:dd:47:23:84:5b:69:42:
                    38:d2:26:a0:cd:1f:64:cc:3e:1c:4f:74:62:ba:be:
                    8e:f7:ae:58:ce:3c:95:fb:93:8b:a7:1f:6b:0c:b1:
                    7d:b3:1b:6f:f4:dd:e1:c9:1c:43:0d:b1:d1:23:b7:
                    69:73:b4:3b:d7:8e:43:4e:df:c8:00:36:c4:e0:a1:
                    84:d7:18:5b:31:90:72:90:93:7a:22:ae:d6:0a:c8:
                    36:2f:94:76:aa:11:4f:de:0b:e9:f3:6e:8e:a4:5d:
                    7d:5b:33:b9:38:28:34:de:5e:96:b2:6e:cf:76:94:
                    51:be:82:c8:e5:4a:3b:d5:16:66:ac:74:8e:21:db:
                    25:bc:19:fd:04:38:1a:50:01:5d:80:82:aa:85:69:
                    ed:20:8c:cd:4a:78:13:5b:b5:6e:89:2d:85:92:df:
                    f1:1d:a2:b1:73:80:b0:61:c2:62:c5:e6:a6:0d:73:
                    fa:2b:1d:fa:6c:a5:bd:28:17:38:38:8a:1b:32:ad:
                    d6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:8D:CB:D3:99:3A:F6:89:38:77:58:D5:34:D1:F4:57:B4:C7:84:A1
            X509v3 Authority Key Identifier:
                keyid:18:61:00:CD:22:AE:8C:45:D9:A5:EC:A2:F9:27:E5:99:70:78:0D:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/186100CD22AE8C45D9A5ECA2F927E59970780DB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/186100CD22AE8C45D9A5ECA2F927E59970780DB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/323830343a333961303a3a2f33322d3334203d3e20323636303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:2a:a1:cf:04:24:19:f5:2c:2d:46:d5:aa:a9:e2:0e:0d:5e:
         d2:ab:d0:1a:d1:52:b8:df:35:88:c9:5b:77:f8:74:28:74:c3:
         a4:0f:65:ea:24:8c:99:26:2e:2e:62:3d:e2:f1:86:b2:c5:8b:
         1f:a1:bc:80:95:fc:07:8f:86:ac:e1:a4:8d:18:4f:98:e6:56:
         54:1b:a0:c6:95:08:8b:db:33:bc:10:d5:2f:70:9b:62:e9:c6:
         da:b8:bd:fb:d2:64:21:af:32:7e:9f:06:1a:19:a4:ba:9d:1b:
         9f:bb:9f:34:9d:55:7a:13:0b:82:3a:6e:33:29:af:7f:23:1b:
         3e:f3:8a:01:de:04:b2:f6:97:f5:a5:06:83:4b:2c:48:e3:ee:
         4e:f2:40:b0:9d:ec:df:55:f6:63:0f:8d:2c:fc:ba:c2:86:17:
         ff:8f:ff:ac:ab:61:15:58:b1:c4:7b:16:b8:47:ef:d1:c6:96:
         2f:de:84:03:7d:10:37:1d:53:11:8a:00:52:51:7d:16:ba:f6:
         92:de:52:63:d2:4b:d7:ad:1a:a5:55:64:c6:b9:2e:a4:00:ac:
         04:26:26:34:6a:2e:d5:52:ee:18:02:aa:91:19:d2:5a:1d:cb:
         71:f7:8d:5d:81:c4:eb:f4:0a:d8:78:e3:25:d0:ee:32:37:be:
         8c:81:d3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org