Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/323830343a343837633a3a2f33322d3332203d3e20323637313234.roa
File:                     323830343a343837633a3a2f33322d3332203d3e20323637313234.roa (raw, json)
Hash identifier:          hvZ40cEllzacRyurKrGO7E4yOQW7OyxWW+yZ+vAP7OE=
Subject key identifier:   6D:91:89:DF:15:86:7F:A1:65:00:C4:29:CC:0E:7D:F5:5B:08:16:94
Certificate issuer:       /CN=DA644F4C6FB419A941C003A03AB9EF864AA72A1F
Certificate serial:       45320E39FA0C77C0B0DF6C6DBBEB5E8DC8688C74
Authority key identifier: DA:64:4F:4C:6F:B4:19:A9:41:C0:03:A0:3A:B9:EF:86:4A:A7:2A:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA644F4C6FB419A941C003A03AB9EF864AA72A1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/323830343a343837633a3a2f33322d3332203d3e20323637313234.roa
Signing time:             Fri 08 Mar 2024 14:15:23 +0000
ROA not before:           Fri 08 Mar 2024 14:10:23 +0000
ROA not after:            Fri 07 Mar 2025 14:15:23 +0000
asID:                     267124
IP address blocks:        2804:487c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:32:0e:39:fa:0c:77:c0:b0:df:6c:6d:bb:eb:5e:8d:c8:68:8c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA644F4C6FB419A941C003A03AB9EF864AA72A1F
        Validity
            Not Before: Mar  8 14:10:23 2024 GMT
            Not After : Mar  7 14:15:23 2025 GMT
        Subject: CN=6D9189DF15867FA16500C429CC0E7DF55B081694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:23:54:b5:85:70:98:3e:e1:ad:23:21:2b:01:
                    5b:f0:77:3a:3c:2a:80:9e:84:c4:f5:98:45:99:30:
                    36:6e:42:6a:df:31:7d:8c:29:79:6c:49:04:dd:ed:
                    81:d4:86:4a:6f:7a:48:92:d8:c9:2d:02:79:00:15:
                    4d:50:b4:c8:e9:2d:9d:54:26:f3:6f:93:86:61:1f:
                    0c:a0:95:0e:8d:a1:62:c2:34:f5:bc:3e:2d:55:0d:
                    cc:9b:b8:5e:6c:15:d2:b2:9c:57:78:74:b8:bb:e2:
                    27:3a:41:f7:0f:b5:2c:42:fd:b1:a6:50:3f:36:f1:
                    32:bd:9b:9e:74:90:e4:9b:2c:f0:4a:d2:12:fd:8d:
                    58:6e:cf:f6:3b:ab:c6:2b:40:ae:e5:28:ec:cd:e2:
                    e8:91:e6:3a:35:ae:51:47:b5:2c:8e:0c:cc:30:30:
                    23:34:21:90:08:43:48:e6:5d:09:9c:2e:21:63:0b:
                    f3:b1:e1:2a:1a:a4:a6:6d:98:08:f9:8f:d5:ee:e0:
                    0b:f1:58:ad:d7:f2:01:6d:75:b4:25:ef:59:b8:1f:
                    33:1b:10:3e:d6:29:9b:64:1f:52:7f:5b:cd:6a:db:
                    59:82:6d:1d:c5:90:80:38:e7:bd:bf:db:04:19:1b:
                    46:6e:75:5c:ba:ff:d7:9e:49:21:f1:a3:40:c5:a3:
                    69:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:91:89:DF:15:86:7F:A1:65:00:C4:29:CC:0E:7D:F5:5B:08:16:94
            X509v3 Authority Key Identifier:
                keyid:DA:64:4F:4C:6F:B4:19:A9:41:C0:03:A0:3A:B9:EF:86:4A:A7:2A:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/DA644F4C6FB419A941C003A03AB9EF864AA72A1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA644F4C6FB419A941C003A03AB9EF864AA72A1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/323830343a343837633a3a2f33322d3332203d3e20323637313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:487c::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:e6:c0:04:db:47:25:6a:23:26:eb:09:07:85:6f:5f:ba:82:
         f9:4e:6b:79:ba:aa:82:15:d5:88:38:22:80:de:4c:51:bc:c7:
         68:26:03:4f:57:82:42:bb:19:3f:7b:5d:b4:e9:33:fe:22:64:
         f1:4c:e6:60:52:a6:15:7d:2a:23:36:10:20:0b:49:ee:73:75:
         bf:43:bd:67:1f:5b:16:a2:5b:a9:0c:14:3e:21:b0:c1:1e:b8:
         41:bc:f5:1a:e4:d9:e3:c8:a8:aa:b1:ce:f3:95:5c:b1:23:b9:
         2b:44:c3:56:2b:9b:8c:9d:a6:e8:17:60:85:f1:c4:84:74:e0:
         80:02:5c:75:bb:3c:8d:10:de:a1:af:ec:37:36:83:9e:b1:f8:
         9f:d9:95:2f:6c:70:4e:30:57:95:cf:a5:47:8b:30:4b:2d:7b:
         1d:f3:49:13:3a:dc:87:29:44:64:e7:6a:c7:4d:69:63:64:75:
         98:74:d2:ee:f4:8a:ac:5c:41:a2:7e:a2:b3:6a:1f:f9:6a:62:
         4e:ca:fe:d8:55:ab:91:a0:62:cf:30:7b:45:6c:4a:db:83:16:
         33:11:c0:ce:d7:0f:33:68:b5:d3:8b:eb:a1:e6:72:a3:4b:b4:
         37:62:48:6c:64:00:c7:a9:48:72:11:15:f4:b5:a2:2c:66:53:
         69:15:66:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:53 2024 by rpki-client on console-ams.rpki-client.org