Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/323830343a343266383a3a2f33322d3334203d3e20323637353430.roa
File:                     323830343a343266383a3a2f33322d3334203d3e20323637353430.roa (raw, json)
Hash identifier:          /HuCAdgC+oXhCUVPAZ8OudcbS8o6NSk7dbzgKgO/ZP0=
Subject key identifier:   96:A1:AD:70:B5:DA:B5:AF:DE:86:61:02:20:65:14:0F:69:FB:9D:78
Certificate issuer:       /CN=841CE1539C5B29E2CC6DD52791EF8C91725DF71E
Certificate serial:       3F16D1BAFF493B2A1BD7AB2FD6172A03760EA5F9
Authority key identifier: 84:1C:E1:53:9C:5B:29:E2:CC:6D:D5:27:91:EF:8C:91:72:5D:F7:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/841CE1539C5B29E2CC6DD52791EF8C91725DF71E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/323830343a343266383a3a2f33322d3334203d3e20323637353430.roa
Signing time:             Wed 10 Jan 2024 10:42:34 +0000
ROA not before:           Wed 10 Jan 2024 10:37:34 +0000
ROA not after:            Wed 08 Jan 2025 10:42:34 +0000
asID:                     267540
IP address blocks:        2804:42f8::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:16:d1:ba:ff:49:3b:2a:1b:d7:ab:2f:d6:17:2a:03:76:0e:a5:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=841CE1539C5B29E2CC6DD52791EF8C91725DF71E
        Validity
            Not Before: Jan 10 10:37:34 2024 GMT
            Not After : Jan  8 10:42:34 2025 GMT
        Subject: CN=96A1AD70B5DAB5AFDE8661022065140F69FB9D78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ea:52:21:fc:d7:8b:6c:cb:17:6a:fa:df:12:
                    0c:6b:bf:57:78:0b:e0:53:d1:5e:fb:6a:3a:17:13:
                    88:4a:76:69:15:bb:27:1e:38:57:36:52:5c:80:c2:
                    e4:2e:3f:95:23:e7:46:6e:25:a5:73:71:1d:5d:e4:
                    0b:51:d4:c2:61:2d:7d:c4:b7:25:89:1a:f3:44:bd:
                    87:f1:ff:93:af:20:e5:59:bf:37:aa:9c:ea:80:8f:
                    6f:6f:3e:aa:2e:c5:5e:70:d3:48:cc:68:21:1b:f0:
                    21:8d:bb:b8:d5:d8:1a:67:b1:aa:a7:97:af:c3:95:
                    39:8c:a8:99:c6:5b:bf:a4:45:0b:76:19:8a:9b:70:
                    4b:27:82:5a:c8:b5:97:73:3c:ae:7a:5a:13:e1:40:
                    9d:2b:d9:10:ce:62:aa:c8:f9:28:39:ec:86:46:a0:
                    57:f8:1b:69:71:54:2b:1b:fb:66:a6:bf:89:4d:a4:
                    05:52:76:dc:04:86:78:b7:48:5f:47:0e:33:a2:c6:
                    86:a5:7f:bd:de:b3:57:23:d8:9b:8e:05:16:35:b5:
                    b5:43:c5:b0:43:07:48:58:f6:72:16:13:ea:6c:86:
                    01:dc:05:93:96:bb:5d:7b:c5:27:37:75:ca:aa:53:
                    3c:7c:0d:a9:a9:14:b4:9a:96:8c:92:3a:89:d5:15:
                    42:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A1:AD:70:B5:DA:B5:AF:DE:86:61:02:20:65:14:0F:69:FB:9D:78
            X509v3 Authority Key Identifier:
                keyid:84:1C:E1:53:9C:5B:29:E2:CC:6D:D5:27:91:EF:8C:91:72:5D:F7:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/841CE1539C5B29E2CC6DD52791EF8C91725DF71E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/841CE1539C5B29E2CC6DD52791EF8C91725DF71E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/323830343a343266383a3a2f33322d3334203d3e20323637353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:42f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:d2:ed:11:ba:43:58:f1:16:d4:d4:5d:85:02:58:60:d2:4b:
         23:bc:c7:f3:fa:00:1c:c5:17:ce:c3:9f:47:c0:46:c3:d9:25:
         55:c9:45:7f:0e:1b:9e:95:a9:45:ea:80:03:7d:2b:47:61:00:
         30:b9:96:28:83:cf:99:d5:78:f9:68:cc:b6:68:47:a6:e6:34:
         80:12:39:bb:f6:0c:bf:34:10:03:a5:75:e4:d4:79:da:f7:ba:
         24:f2:08:14:ae:9b:45:24:89:7a:b7:ea:da:16:ee:15:9f:ad:
         c5:c5:6a:91:45:88:23:57:e6:50:35:46:c3:34:61:41:12:cb:
         9b:eb:4c:8a:d2:4c:4d:ba:08:e9:0e:fa:57:4f:64:68:96:eb:
         a2:fe:bb:03:a6:94:a7:cc:65:0d:19:83:7a:ee:71:6c:cb:ee:
         64:85:09:39:ee:4a:32:6b:6e:27:fb:f0:ce:63:22:20:97:da:
         c7:3d:e4:f1:c5:ce:fb:7d:26:df:99:c0:58:66:24:75:e9:04:
         e6:58:41:a2:0b:9d:f6:23:52:5b:e0:64:40:7b:ed:98:79:2e:
         52:6f:e3:62:f4:5f:4e:a2:f5:66:8e:0a:c5:4a:ee:8a:6b:49:
         4e:0e:3d:38:32:1b:34:c4:b9:af:3d:d5:be:ed:2b:6a:23:ee:
         fe:1a:ef:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org