Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/323830343a323062303a3a2f33322d3438203d3e20323634353038.roa
File:                     323830343a323062303a3a2f33322d3438203d3e20323634353038.roa (raw, json)
Hash identifier:          sIr11Vd68UOw5IwWb1+v1dJZSxwh4xYiAbwsSsawt8c=
Subject key identifier:   20:31:32:C8:28:36:A4:8D:96:C7:F7:24:31:3E:A3:AD:45:90:D6:1F
Certificate issuer:       /CN=862D64BA1F2E38D183BAB30E4E49393D5BE74D8F
Certificate serial:       60A7C601399DD1A5A891A380807773A08F3D6177
Authority key identifier: 86:2D:64:BA:1F:2E:38:D1:83:BA:B3:0E:4E:49:39:3D:5B:E7:4D:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/862D64BA1F2E38D183BAB30E4E49393D5BE74D8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/323830343a323062303a3a2f33322d3438203d3e20323634353038.roa
Signing time:             Sat 24 Sep 2022 20:56:44 +0000
ROA not before:           Sat 24 Sep 2022 20:51:44 +0000
ROA not after:            Sat 23 Sep 2023 20:56:44 +0000
asID:                     264508
IP address blocks:        2804:20b0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a7:c6:01:39:9d:d1:a5:a8:91:a3:80:80:77:73:a0:8f:3d:61:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=862D64BA1F2E38D183BAB30E4E49393D5BE74D8F
        Validity
            Not Before: Sep 24 20:51:44 2022 GMT
            Not After : Sep 23 20:56:44 2023 GMT
        Subject: CN=203132C82836A48D96C7F724313EA3AD4590D61F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cd:34:02:a2:52:7e:b9:3d:ab:97:bb:f1:3d:
                    9d:e4:c8:ad:9e:79:49:71:64:f3:d5:5f:f3:cf:04:
                    f1:2e:4f:4c:6b:0f:b7:40:b6:7b:57:f8:90:10:e8:
                    ec:41:e7:69:9c:5f:e3:e5:a8:7d:8c:db:f5:d3:63:
                    14:f8:a3:5c:79:c9:00:0d:8a:26:c0:6e:76:db:f3:
                    e3:7f:51:80:20:c3:36:8e:4f:53:4d:7f:64:53:61:
                    3a:f0:47:41:98:c3:4b:d2:8c:64:91:22:63:b9:75:
                    98:e2:99:c0:c2:a3:75:e6:d3:4b:86:31:3f:18:12:
                    ac:fa:c7:8f:df:96:51:31:21:5c:d7:4d:e3:10:18:
                    b3:c5:ee:5f:69:d1:50:3e:25:3d:b9:02:ed:b9:f3:
                    94:2d:6a:5a:68:21:0f:d3:e8:fe:d5:e2:19:22:36:
                    05:be:5e:d1:fa:6d:47:77:3d:56:c2:50:8e:29:21:
                    e6:c2:60:a6:c9:38:72:48:fe:c9:4c:11:82:b7:4f:
                    d5:e2:ea:69:25:7e:c7:c2:b8:7a:7e:56:ab:0d:fa:
                    5b:a7:f6:a8:6e:9b:cf:95:1a:d0:d8:73:39:b4:a1:
                    f2:7d:46:36:5d:8b:14:95:0a:65:be:ac:06:bb:ed:
                    c4:de:e2:bb:87:77:3f:29:fd:c3:89:0a:d9:ec:11:
                    9a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:31:32:C8:28:36:A4:8D:96:C7:F7:24:31:3E:A3:AD:45:90:D6:1F
            X509v3 Authority Key Identifier:
                keyid:86:2D:64:BA:1F:2E:38:D1:83:BA:B3:0E:4E:49:39:3D:5B:E7:4D:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/862D64BA1F2E38D183BAB30E4E49393D5BE74D8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/862D64BA1F2E38D183BAB30E4E49393D5BE74D8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/323830343a323062303a3a2f33322d3438203d3e20323634353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:80:0b:1d:38:eb:78:b3:d8:b6:8f:17:d8:54:8d:06:03:d0:
         b0:b0:21:bc:cc:cc:a8:c0:ca:1b:8e:cd:f8:4e:ca:79:36:25:
         5e:d0:aa:b7:7e:04:2e:67:31:b4:9d:7b:0d:41:7f:bf:8e:cb:
         59:67:31:ba:9e:06:6f:0b:b6:b8:82:c0:b8:7b:23:93:91:21:
         e4:2d:5c:7c:5c:f7:89:70:79:5e:9d:20:a0:88:e7:f4:be:fc:
         7c:3a:13:bb:f5:d5:c4:b4:a7:a4:24:dc:d0:f0:46:f3:d4:cf:
         eb:43:0d:32:f5:6e:dc:8b:c3:e1:b2:86:0d:3c:87:e0:b1:cd:
         93:08:17:0e:f2:39:0c:0e:3c:8a:ec:13:ab:ee:cc:e2:8b:dc:
         59:95:5d:91:81:a1:4d:0a:e4:6f:14:eb:46:14:17:39:76:4c:
         c5:a7:ec:08:40:a1:a7:54:cc:15:95:39:a3:da:af:e7:d3:95:
         12:ad:af:e3:6d:28:31:a6:46:c3:fd:88:03:c7:c3:92:8b:4e:
         e2:0d:47:4a:9f:48:7a:53:ae:fe:d5:bb:b9:86:6c:2a:ca:fe:
         8f:42:8b:24:0d:ec:30:77:c7:6e:13:b8:33:e8:16:65:a7:97:
         e3:48:87:ec:bb:d7:08:fc:6d:5d:4a:08:27:63:c6:a5:d6:86:
         25:70:3b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org