Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/0/323830343a346234633a3330303a3a2f34302d3430203d3e20323637323936.roa
File:                     323830343a346234633a3330303a3a2f34302d3430203d3e20323637323936.roa (raw, json)
Hash identifier:          LOu6tTWsMjq1UsBgOlB9xq9PHG075W9kPJe6l2SoWBQ=
Subject key identifier:   00:F7:FB:FB:BE:99:D8:43:1C:D9:9C:99:03:DE:50:99:A9:D7:79:4A
Certificate issuer:       /CN=1082D004EEF136A4F997116E5B9BC5AA859752B8
Certificate serial:       1AAADDFFA5D85EE6896D5969F76EAB8E7255C772
Authority key identifier: 10:82:D0:04:EE:F1:36:A4:F9:97:11:6E:5B:9B:C5:AA:85:97:52:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1082D004EEF136A4F997116E5B9BC5AA859752B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/0/323830343a346234633a3330303a3a2f34302d3430203d3e20323637323936.roa
Signing time:             Wed 14 Jun 2023 03:00:00 +0000
ROA not before:           Wed 14 Jun 2023 02:55:00 +0000
ROA not after:            Wed 12 Jun 2024 03:00:00 +0000
asID:                     267296
IP address blocks:        2804:4b4c:300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:aa:dd:ff:a5:d8:5e:e6:89:6d:59:69:f7:6e:ab:8e:72:55:c7:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1082D004EEF136A4F997116E5B9BC5AA859752B8
        Validity
            Not Before: Jun 14 02:55:00 2023 GMT
            Not After : Jun 12 03:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7f:ef:59:6e:b2:1d:72:e8:4f:6e:1f:45:cc:
                    4c:0d:6f:4f:32:e0:b2:a0:f6:39:be:c4:9b:1d:17:
                    3d:b9:48:1c:7d:e0:b1:a3:3a:99:3c:21:a4:2c:19:
                    b3:e0:62:8e:9c:97:e5:0f:27:f7:24:dc:94:e4:b1:
                    7c:94:43:0d:a3:b7:33:6c:30:89:f2:81:53:f6:78:
                    15:a3:5e:9f:19:90:d1:64:9d:d0:6f:cc:39:8b:17:
                    02:a5:aa:9f:f8:ab:c0:06:ef:e7:18:f2:2b:26:d9:
                    71:fb:b8:bb:21:3c:4d:d3:b9:a1:49:11:b7:da:0f:
                    96:cf:2c:7d:93:e0:21:9f:8a:4e:70:e3:ab:7f:7f:
                    36:d2:ee:ac:70:af:4e:2f:00:93:be:1b:6a:9d:a3:
                    93:51:0d:4e:73:bd:09:b8:61:73:89:d4:80:e7:5d:
                    b0:47:3b:d7:23:23:8d:fc:be:5d:04:a2:29:39:2a:
                    3e:30:56:c1:2a:fb:70:ce:72:52:29:5e:62:0b:70:
                    1d:5a:11:9d:e3:f5:f1:b0:9e:fa:69:f2:63:74:e7:
                    c1:8c:e4:1e:a8:e2:6d:bb:78:85:83:f5:50:bf:8f:
                    4a:26:11:f7:c7:b8:a4:a9:cb:88:e2:57:7b:05:73:
                    99:86:c2:00:1f:18:b0:2b:33:bd:dc:ef:ff:b2:41:
                    4d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F7:FB:FB:BE:99:D8:43:1C:D9:9C:99:03:DE:50:99:A9:D7:79:4A
            X509v3 Authority Key Identifier:
                keyid:10:82:D0:04:EE:F1:36:A4:F9:97:11:6E:5B:9B:C5:AA:85:97:52:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/0/1082D004EEF136A4F997116E5B9BC5AA859752B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1082D004EEF136A4F997116E5B9BC5AA859752B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/0/323830343a346234633a3330303a3a2f34302d3430203d3e20323637323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b4c:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         29:9e:fb:15:10:35:48:55:0c:d2:2d:38:cb:bb:24:b4:ec:29:
         c5:ef:38:6c:2a:a1:55:38:d2:ff:6c:88:44:50:27:f0:b7:a3:
         fc:91:51:9d:fc:6a:0d:20:24:34:5a:f1:d0:e8:26:f5:ae:1b:
         1c:df:de:5f:31:16:06:c8:f9:4f:3c:9d:1f:47:dd:f3:c7:f4:
         db:2e:58:ee:2b:e8:71:c9:46:1a:fb:43:d1:a9:1e:32:85:67:
         4a:4b:a5:ed:2c:9c:97:52:70:fe:2c:8f:3f:48:59:50:40:92:
         19:b9:88:4b:86:7f:8b:2c:02:17:f4:8b:0f:66:47:cc:6f:b6:
         5d:16:89:5b:b8:2d:bc:80:64:b9:9e:bb:05:fc:37:52:08:d3:
         2f:d3:58:2a:d9:a5:a2:b1:35:5a:83:aa:a5:40:40:d1:84:c1:
         33:b9:17:6d:d9:88:4d:7a:96:ea:da:21:a3:71:09:b6:6b:ba:
         ab:6c:7b:04:47:0e:cc:66:62:ce:84:ad:2a:7c:1b:a2:fd:26:
         45:14:63:6a:da:2d:58:e5:4c:6e:f5:d1:06:cc:0f:56:be:8a:
         dd:e9:e6:62:05:2d:6c:90:fe:81:dc:70:33:a6:58:2f:33:76:
         3b:5f:eb:93:d0:20:8d:1e:24:7b:23:bd:42:83:33:60:83:ab:
         d4:d2:82:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org