Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/323830343a343837633a3a2f33322d3438203d3e20323637313234.roa
File:                     323830343a343837633a3a2f33322d3438203d3e20323637313234.roa (raw, json)
Hash identifier:          6/Ks5BB1bWf6oIm9fDFojyQql0BcUh/DteNpoonbWDs=
Subject key identifier:   21:AC:8C:05:AB:C3:D0:B9:30:BD:05:52:87:55:7A:E6:2B:DC:83:19
Certificate issuer:       /CN=4A0CF634A638CADFFABAC397E0D1615D2CA89C53
Certificate serial:       62683800C9E7AD9EDB70DFA822618ABAF3FB3003
Authority key identifier: 4A:0C:F6:34:A6:38:CA:DF:FA:BA:C3:97:E0:D1:61:5D:2C:A8:9C:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A0CF634A638CADFFABAC397E0D1615D2CA89C53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/323830343a343837633a3a2f33322d3438203d3e20323637313234.roa
Signing time:             Fri 15 Dec 2023 12:49:39 +0000
ROA not before:           Fri 15 Dec 2023 12:44:39 +0000
ROA not after:            Fri 13 Dec 2024 12:49:39 +0000
asID:                     267124
IP address blocks:        2804:487c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:68:38:00:c9:e7:ad:9e:db:70:df:a8:22:61:8a:ba:f3:fb:30:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A0CF634A638CADFFABAC397E0D1615D2CA89C53
        Validity
            Not Before: Dec 15 12:44:39 2023 GMT
            Not After : Dec 13 12:49:39 2024 GMT
        Subject: CN=21AC8C05ABC3D0B930BD055287557AE62BDC8319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6e:bf:44:1c:74:57:7d:69:77:de:c1:52:bd:
                    19:3e:8d:0d:ea:2b:b2:f0:a4:62:db:9a:cb:c1:e3:
                    a4:ac:43:e2:53:8b:08:b0:85:05:c6:13:c5:7f:01:
                    0f:84:fc:e6:f5:ff:ea:b8:cc:f8:2e:bf:0c:a0:b4:
                    64:14:b6:75:a1:19:b0:af:4a:03:1f:4a:e0:d2:13:
                    64:2b:bb:87:5f:e8:11:a5:3b:cc:ea:05:d5:48:d7:
                    1b:ff:3e:b6:b0:47:0f:4a:bb:08:1a:01:52:4d:91:
                    a4:5d:4a:71:3a:32:eb:c6:55:52:f2:9a:bc:f8:70:
                    7b:38:b6:db:23:cf:5b:a3:84:f1:f9:0b:5c:0b:99:
                    03:c7:e0:e0:40:f9:b6:4b:a9:69:06:1d:d3:77:f1:
                    36:ce:af:08:5c:24:9b:91:5c:0f:00:8e:46:a7:ca:
                    0d:85:19:4f:82:72:2d:91:40:d2:a0:5e:c7:3e:37:
                    fa:b3:9d:3b:93:85:63:7a:d0:8f:12:ba:7f:fa:c8:
                    9a:ff:8e:27:fb:bd:68:e0:8c:7b:20:5a:af:22:9e:
                    d1:94:89:b8:fd:de:1b:45:be:99:1a:fd:8c:d7:4c:
                    92:4b:ac:3e:b9:48:92:5d:09:a2:8e:e8:b7:6c:5a:
                    ee:53:c0:77:e7:dd:d0:f3:04:3b:48:4a:87:0b:5f:
                    2f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AC:8C:05:AB:C3:D0:B9:30:BD:05:52:87:55:7A:E6:2B:DC:83:19
            X509v3 Authority Key Identifier:
                keyid:4A:0C:F6:34:A6:38:CA:DF:FA:BA:C3:97:E0:D1:61:5D:2C:A8:9C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/4A0CF634A638CADFFABAC397E0D1615D2CA89C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A0CF634A638CADFFABAC397E0D1615D2CA89C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/323830343a343837633a3a2f33322d3438203d3e20323637313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:487c::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:c4:51:8b:68:77:40:fc:61:61:f7:a0:a8:cf:a8:7a:bf:5b:
         89:8f:20:38:83:2d:ed:c1:14:40:cb:df:5e:84:41:14:bb:8f:
         eb:52:4d:30:96:8e:50:a1:97:7e:75:e8:66:88:fd:35:41:33:
         4e:c3:45:d6:31:27:7a:3c:35:51:58:45:86:e4:6b:c1:0d:ed:
         28:98:7d:68:7d:ce:33:b6:a7:bd:79:7d:71:40:de:88:ed:b6:
         3c:69:49:0f:2d:4e:4a:4e:7f:ba:d2:6d:33:5e:b4:e0:96:d5:
         39:c2:d3:a4:5b:22:04:d3:08:21:b2:54:52:2f:ca:49:bf:41:
         3f:eb:73:b8:67:6c:68:9b:00:70:1e:bf:8e:4c:5e:3b:54:21:
         2e:1b:e3:77:75:86:84:c3:9c:44:82:34:31:58:cc:35:c3:5e:
         db:26:5b:bf:ed:7e:78:b0:5b:65:48:58:65:84:e0:ee:57:11:
         e3:5f:75:fd:fc:56:41:59:c2:48:2e:48:8c:e0:ca:44:b1:4e:
         f0:44:9e:fb:c4:9b:37:f5:63:97:d6:c0:0d:15:91:54:86:cf:
         2a:25:95:4e:92:04:cb:64:ba:50:00:aa:15:7a:2b:9c:49:eb:
         17:c2:f3:18:78:2e:38:12:d3:0a:3b:ec:ec:8e:c4:e9:6a:a4:
         a7:18:67:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org