Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a313030303a3a2f33362d3336203d3e20323732363439.roa
File:                     323830343a383638343a313030303a3a2f33362d3336203d3e20323732363439.roa (raw, json)
Hash identifier:          Ao0XoNQnU+X1d9Oc4nRQItHcMw8EBjMm+aCHyJlDtwc=
Subject key identifier:   A9:4A:3F:62:95:68:14:F0:97:6D:B1:9F:C4:48:C7:C4:7C:DC:3D:8B
Certificate issuer:       /CN=70427113C728F653176866A2E47D9746EA86B842
Certificate serial:       030C453D00FB89CD4572883405EFAFDE5A0BC28E
Authority key identifier: 70:42:71:13:C7:28:F6:53:17:68:66:A2:E4:7D:97:46:EA:86:B8:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70427113C728F653176866A2E47D9746EA86B842.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a313030303a3a2f33362d3336203d3e20323732363439.roa
Signing time:             Tue 21 Nov 2023 15:11:19 +0000
ROA not before:           Tue 21 Nov 2023 15:06:19 +0000
ROA not after:            Tue 19 Nov 2024 15:11:19 +0000
asID:                     272649
IP address blocks:        2804:8684:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:0c:45:3d:00:fb:89:cd:45:72:88:34:05:ef:af:de:5a:0b:c2:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70427113C728F653176866A2E47D9746EA86B842
        Validity
            Not Before: Nov 21 15:06:19 2023 GMT
            Not After : Nov 19 15:11:19 2024 GMT
        Subject: CN=A94A3F62956814F0976DB19FC448C7C47CDC3D8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4d:ca:48:84:72:d2:e3:15:dc:42:a1:c6:81:
                    ba:cf:bc:16:41:d3:2a:16:49:a8:28:57:99:25:75:
                    9b:c2:ef:dc:bc:d8:86:ca:2c:b1:9f:b2:48:72:be:
                    6e:37:d5:8e:3a:c6:af:2e:59:a9:4b:e4:7d:4d:e0:
                    be:09:d3:33:e4:54:af:e6:27:f4:f8:d7:b2:ba:fb:
                    95:53:c1:5b:ae:de:13:d7:c3:8e:ee:f2:f1:c9:e7:
                    b5:c7:2c:64:ae:fa:10:07:e6:46:a2:9b:ff:91:88:
                    59:35:48:43:b3:b2:b0:1d:38:60:ce:ae:4b:a0:2d:
                    bc:f7:a5:cb:e9:8d:22:75:07:2f:74:1d:93:45:82:
                    52:d8:97:aa:bd:8f:3a:e9:2b:6e:3a:4a:3a:25:71:
                    19:23:42:b6:20:04:b2:f0:8d:09:d1:5e:3d:7d:29:
                    52:97:91:cc:ef:07:97:af:1d:32:34:cb:5b:e8:13:
                    82:82:8e:7f:9e:43:fc:e9:65:a6:d2:01:2b:8d:4c:
                    7e:13:b2:5e:2b:23:89:f6:62:24:7a:ea:01:1b:8e:
                    a1:28:a6:ad:f9:8d:7c:a2:ae:ea:b8:ed:f3:b3:25:
                    08:18:4f:da:0b:40:75:66:f3:15:87:80:49:49:89:
                    e5:72:75:0d:a8:ca:cf:ff:ab:02:12:e1:00:08:d3:
                    43:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4A:3F:62:95:68:14:F0:97:6D:B1:9F:C4:48:C7:C4:7C:DC:3D:8B
            X509v3 Authority Key Identifier:
                keyid:70:42:71:13:C7:28:F6:53:17:68:66:A2:E4:7D:97:46:EA:86:B8:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/70427113C728F653176866A2E47D9746EA86B842.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70427113C728F653176866A2E47D9746EA86B842.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a313030303a3a2f33362d3336203d3e20323732363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8684:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8b:b3:6f:fb:a6:d0:41:a7:f9:e5:5c:b9:79:31:2f:ea:5e:fb:
         5c:03:2b:8d:f4:f0:62:5c:cc:54:03:00:8c:e5:9f:95:63:1c:
         11:c6:ea:f5:93:59:96:9a:cc:2b:05:8a:e5:d4:77:e7:fe:2f:
         f2:c3:d6:3d:21:87:2d:f6:95:f5:69:3c:d8:ac:47:d5:14:fa:
         6b:a4:21:df:4d:f9:e0:2e:6d:9e:8b:3f:8e:4d:2b:11:15:fc:
         7e:8b:0e:ef:6d:09:b3:a5:a6:c1:69:de:63:93:a6:da:bf:5f:
         8f:c0:20:f6:c5:75:74:50:b9:36:27:24:c5:a2:fc:74:aa:c2:
         19:16:b6:36:dd:e4:e5:1e:32:74:3b:51:d2:da:6d:04:c7:56:
         41:e0:53:e1:e1:9e:82:74:44:d4:5a:af:00:4f:f8:17:1f:97:
         10:25:5f:f2:43:84:42:1c:bc:ed:2e:36:62:b5:58:ae:ce:e4:
         07:ab:4a:07:84:2e:88:41:0f:c6:29:e8:f7:1b:1b:47:ac:27:
         38:59:ca:c8:d4:53:87:04:f0:d5:fc:97:30:4c:ab:bf:20:ba:
         2a:0e:5f:74:bd:f5:5f:88:b6:49:3d:c1:1d:4c:44:d5:5d:69:
         8d:a0:0f:8f:fe:0d:66:58:6d:66:9b:19:81:ae:fd:85:3a:86:
         11:2d:63:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org