Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/323830343a3738343a3a2f33322d3438203d3e20323632363533.roa
File:                     323830343a3738343a3a2f33322d3438203d3e20323632363533.roa (raw, json)
Hash identifier:          NsjXorcD1fzzao17woOfiGm4x1R+mlI+MRTTiDNwiTo=
Subject key identifier:   21:83:11:A3:47:EC:C4:1B:B8:28:B3:A1:8A:69:73:AC:7C:46:D2:6F
Certificate issuer:       /CN=93226D8AC4BC0705864DAB3FB6AD47C0B2A17E12
Certificate serial:       3C45700AA1DFC4DCA30D750595E5D738EF2B67D0
Authority key identifier: 93:22:6D:8A:C4:BC:07:05:86:4D:AB:3F:B6:AD:47:C0:B2:A1:7E:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93226D8AC4BC0705864DAB3FB6AD47C0B2A17E12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/323830343a3738343a3a2f33322d3438203d3e20323632363533.roa
Signing time:             Fri 29 Oct 2021 14:16:00 +0000
ROA not before:           Fri 29 Oct 2021 14:11:00 +0000
ROA not after:            Fri 28 Oct 2022 14:16:00 +0000
asID:                     262653
IP address blocks:        2804:784::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:45:70:0a:a1:df:c4:dc:a3:0d:75:05:95:e5:d7:38:ef:2b:67:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93226D8AC4BC0705864DAB3FB6AD47C0B2A17E12
        Validity
            Not Before: Oct 29 14:11:00 2021 GMT
            Not After : Oct 28 14:16:00 2022 GMT
        Subject: CN=3082010A0282010100D43DC5A3173FF11C4F4E854B1189F672AEF52F14C0164F78353D5CD02E233E4A6A059FB95690E7E1D729651C27100DE8CEAE1CACFEEA59A8C975049E2298EAE050432CF43E23F9DA115D4C60B3EA4A76C25B9DB0FD8AADC3EE4D766D0EDD53F02D58B3EF6B463D7D3E61FCDE2493346C8F3ACB15AEB555727532E9AE51DF54F7AFB24CFF7AD51B5068460A16615CDA3370C071807CD286B757BA291D4732DC7E437B212F829AC686EBB2BA4BB948AD897705BBABA10601FB0E59F7D1908BABA60E1596C44EFBEC546DDF4015AB093EDBE69A098B6CEC4B71DEE775C3BF646EED0F53C73A19331E7B9A468F896727850630165D92691955F61A2279326596C4970203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3d:c5:a3:17:3f:f1:1c:4f:4e:85:4b:11:89:
                    f6:72:ae:f5:2f:14:c0:16:4f:78:35:3d:5c:d0:2e:
                    23:3e:4a:6a:05:9f:b9:56:90:e7:e1:d7:29:65:1c:
                    27:10:0d:e8:ce:ae:1c:ac:fe:ea:59:a8:c9:75:04:
                    9e:22:98:ea:e0:50:43:2c:f4:3e:23:f9:da:11:5d:
                    4c:60:b3:ea:4a:76:c2:5b:9d:b0:fd:8a:ad:c3:ee:
                    4d:76:6d:0e:dd:53:f0:2d:58:b3:ef:6b:46:3d:7d:
                    3e:61:fc:de:24:93:34:6c:8f:3a:cb:15:ae:b5:55:
                    72:75:32:e9:ae:51:df:54:f7:af:b2:4c:ff:7a:d5:
                    1b:50:68:46:0a:16:61:5c:da:33:70:c0:71:80:7c:
                    d2:86:b7:57:ba:29:1d:47:32:dc:7e:43:7b:21:2f:
                    82:9a:c6:86:eb:b2:ba:4b:b9:48:ad:89:77:05:bb:
                    ab:a1:06:01:fb:0e:59:f7:d1:90:8b:ab:a6:0e:15:
                    96:c4:4e:fb:ec:54:6d:df:40:15:ab:09:3e:db:e6:
                    9a:09:8b:6c:ec:4b:71:de:e7:75:c3:bf:64:6e:ed:
                    0f:53:c7:3a:19:33:1e:7b:9a:46:8f:89:67:27:85:
                    06:30:16:5d:92:69:19:55:f6:1a:22:79:32:65:96:
                    c4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:83:11:A3:47:EC:C4:1B:B8:28:B3:A1:8A:69:73:AC:7C:46:D2:6F
            X509v3 Authority Key Identifier:
                keyid:93:22:6D:8A:C4:BC:07:05:86:4D:AB:3F:B6:AD:47:C0:B2:A1:7E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/93226D8AC4BC0705864DAB3FB6AD47C0B2A17E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93226D8AC4BC0705864DAB3FB6AD47C0B2A17E12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/323830343a3738343a3a2f33322d3438203d3e20323632363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:784::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:9c:55:39:ea:a9:d2:9e:4d:af:0d:3d:c9:7f:e5:b5:e1:07:
         bd:9b:d0:69:4d:4f:31:bf:46:df:0a:03:b2:b8:13:fe:e2:3b:
         0a:00:e9:89:de:88:98:72:67:27:f2:70:aa:c3:88:44:b3:8f:
         7d:67:97:ed:db:01:c4:fa:a2:e2:e3:fa:e3:9f:bc:7f:00:d6:
         e9:56:69:12:56:c7:bc:21:5b:2e:1a:72:26:b2:bf:89:56:05:
         9d:06:48:be:c9:fb:79:b2:dd:f8:e0:bd:c1:58:4a:15:c2:fe:
         77:20:35:7d:4a:5f:cc:14:7a:40:d0:0d:5e:bb:12:b5:8d:34:
         56:c1:e9:11:a2:0b:df:c9:15:d2:de:43:39:0e:91:47:7e:cb:
         d2:07:42:1e:bc:bc:61:01:74:0b:1f:0b:aa:89:6a:ee:7f:ec:
         d9:a0:44:48:49:de:6a:08:74:23:a9:32:12:57:c7:68:6e:69:
         c5:5b:e8:c8:b0:10:4b:3b:ab:05:36:ff:ed:4f:c3:b2:33:ed:
         1f:e4:de:f5:7f:ca:45:05:76:f9:08:f6:ab:90:a2:44:f6:01:
         9f:55:f8:ec:57:3c:6c:50:2f:7c:86:27:49:5a:f6:33:fd:38:
         c9:0c:5c:98:55:de:dd:ec:e5:5c:3a:3c:68:66:5b:ae:68:9c:
         97:70:07:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org