Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/0/323830343a346234633a3230303a3a2f34302d3430203d3e20323637323936.roa
File:                     323830343a346234633a3230303a3a2f34302d3430203d3e20323637323936.roa (raw, json)
Hash identifier:          lAxoKFEbOEXZrNK+LKLvdKMkSIB8pE+jcJPBs7j1CFk=
Subject key identifier:   82:25:58:C3:59:CC:D4:66:8B:54:84:26:70:C7:E9:45:52:13:13:6F
Certificate issuer:       /CN=1082D004EEF136A4F997116E5B9BC5AA859752B8
Certificate serial:       39E77939B6C00998AFC9DC93713E4D60E4477448
Authority key identifier: 10:82:D0:04:EE:F1:36:A4:F9:97:11:6E:5B:9B:C5:AA:85:97:52:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1082D004EEF136A4F997116E5B9BC5AA859752B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/0/323830343a346234633a3230303a3a2f34302d3430203d3e20323637323936.roa
Signing time:             Wed 14 Jun 2023 03:00:00 +0000
ROA not before:           Wed 14 Jun 2023 02:55:00 +0000
ROA not after:            Wed 12 Jun 2024 03:00:00 +0000
asID:                     267296
IP address blocks:        2804:4b4c:200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e7:79:39:b6:c0:09:98:af:c9:dc:93:71:3e:4d:60:e4:47:74:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1082D004EEF136A4F997116E5B9BC5AA859752B8
        Validity
            Not Before: Jun 14 02:55:00 2023 GMT
            Not After : Jun 12 03:00:00 2024 GMT
        Subject: CN=3082010A0282010100E4FFA5DC159B22E528F5EA51BD76C494243D2E5E91159F257AD4D457B6D1F4A8BBB53854C6FB0ABE6C9D91BB48F534CDAE5AAF330B6102CB55AAAAB250585F4DBB409FA7B5AF1D8D690B2EEF4CEFCC3FC91F6F42DE3C37C6F9FDECEF86200144148D2094A84520D5788887E3F3DDB315BFE42805C99E7B0F0850D563990407AAE7BA1AD2A7EE11F19CD9ACB15E36449BE461799083FC5CF367FFB5D653007238750AFBE7A0B99C12D88C6E4671BA090B5A8143D0DAC11ABEAF434C447B92B3A6A79030C9343522B43FB2469C6A186432D1F3E0BFA3CBB90207DCACC211F76EFAC312BCAEB1533CE48C24000516531E90066E497BE3A2E1F5F6718228AC4BCC290203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ff:a5:dc:15:9b:22:e5:28:f5:ea:51:bd:76:
                    c4:94:24:3d:2e:5e:91:15:9f:25:7a:d4:d4:57:b6:
                    d1:f4:a8:bb:b5:38:54:c6:fb:0a:be:6c:9d:91:bb:
                    48:f5:34:cd:ae:5a:af:33:0b:61:02:cb:55:aa:aa:
                    b2:50:58:5f:4d:bb:40:9f:a7:b5:af:1d:8d:69:0b:
                    2e:ef:4c:ef:cc:3f:c9:1f:6f:42:de:3c:37:c6:f9:
                    fd:ec:ef:86:20:01:44:14:8d:20:94:a8:45:20:d5:
                    78:88:87:e3:f3:dd:b3:15:bf:e4:28:05:c9:9e:7b:
                    0f:08:50:d5:63:99:04:07:aa:e7:ba:1a:d2:a7:ee:
                    11:f1:9c:d9:ac:b1:5e:36:44:9b:e4:61:79:90:83:
                    fc:5c:f3:67:ff:b5:d6:53:00:72:38:75:0a:fb:e7:
                    a0:b9:9c:12:d8:8c:6e:46:71:ba:09:0b:5a:81:43:
                    d0:da:c1:1a:be:af:43:4c:44:7b:92:b3:a6:a7:90:
                    30:c9:34:35:22:b4:3f:b2:46:9c:6a:18:64:32:d1:
                    f3:e0:bf:a3:cb:b9:02:07:dc:ac:c2:11:f7:6e:fa:
                    c3:12:bc:ae:b1:53:3c:e4:8c:24:00:05:16:53:1e:
                    90:06:6e:49:7b:e3:a2:e1:f5:f6:71:82:28:ac:4b:
                    cc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:25:58:C3:59:CC:D4:66:8B:54:84:26:70:C7:E9:45:52:13:13:6F
            X509v3 Authority Key Identifier:
                keyid:10:82:D0:04:EE:F1:36:A4:F9:97:11:6E:5B:9B:C5:AA:85:97:52:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/0/1082D004EEF136A4F997116E5B9BC5AA859752B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1082D004EEF136A4F997116E5B9BC5AA859752B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/0/323830343a346234633a3230303a3a2f34302d3430203d3e20323637323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b4c:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         28:0b:81:5f:6e:b1:d9:02:21:44:33:77:5b:b4:37:ea:d4:e4:
         85:d7:a1:51:24:56:41:62:86:cf:46:64:34:63:08:f0:d1:94:
         3e:3e:94:10:ce:55:a6:e0:78:93:db:3f:51:e5:7c:15:75:de:
         31:7f:ea:e0:25:93:fa:94:99:2e:59:ac:2f:a6:22:de:63:ca:
         c3:4b:6e:d1:83:29:d4:3b:2e:64:8a:b3:26:64:73:1b:10:be:
         85:ee:26:7b:80:03:a2:be:0c:68:24:16:59:18:d2:62:b5:da:
         1b:c6:72:d9:2c:fe:93:6f:ed:a9:cc:d1:10:f2:b5:5e:a6:41:
         f9:bc:ea:82:9b:b6:43:d9:9a:7b:0b:d3:87:b4:55:5b:74:8f:
         6b:9f:7b:17:33:e1:61:99:25:12:25:30:cd:49:f6:28:01:d7:
         c9:2a:72:12:5f:3f:5e:3c:85:34:2d:f2:2b:12:89:85:a4:80:
         34:61:b2:17:de:76:1b:c2:56:2d:74:f8:fe:04:1a:61:f3:aa:
         ce:0d:a9:d7:ce:e6:c8:50:34:cf:f3:d5:61:17:ba:32:02:f4:
         88:60:4b:fa:c1:4b:aa:6b:8d:85:10:a0:a6:27:6c:45:d6:a3:
         02:77:78:de:9a:ae:81:84:38:d7:1a:47:d6:3e:c2:91:56:02:
         2c:be:59:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org