Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a3330303a3a2f34302d3434203d3e20323637333235.roa
File:                     323830343a346262343a3330303a3a2f34302d3434203d3e20323637333235.roa (raw, json)
Hash identifier:          mKJb6m+woRy/JcAryWxxZjQi2hc7bbzzlx9jgnm1gx0=
Subject key identifier:   59:18:5E:61:3A:AB:1F:D2:80:6B:AB:F4:84:18:1B:7B:E7:D2:F4:CB
Certificate issuer:       /CN=4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1
Certificate serial:       084C2A020D4982FA81F2E68893ABF25CC61664D4
Authority key identifier: 4E:8D:4C:17:D9:B3:A5:16:35:36:69:5F:0B:2F:1F:0C:0B:24:A7:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a3330303a3a2f34302d3434203d3e20323637333235.roa
Signing time:             Fri 23 Feb 2024 12:30:52 +0000
ROA not before:           Fri 23 Feb 2024 12:25:52 +0000
ROA not after:            Fri 21 Feb 2025 12:30:52 +0000
asID:                     267325
IP address blocks:        2804:4bb4:300::/40 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:4c:2a:02:0d:49:82:fa:81:f2:e6:88:93:ab:f2:5c:c6:16:64:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1
        Validity
            Not Before: Feb 23 12:25:52 2024 GMT
            Not After : Feb 21 12:30:52 2025 GMT
        Subject: CN=59185E613AAB1FD2806BABF484181B7BE7D2F4CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:06:bf:38:3e:e3:4d:ec:ce:42:91:ea:01:6d:
                    82:bd:88:60:f4:f1:65:4d:20:cf:8d:77:cb:4f:e2:
                    74:39:78:32:00:f2:54:af:b5:77:b2:1c:c1:ed:bf:
                    c6:ee:79:c9:cb:08:11:ee:ed:ad:f4:9a:f2:ef:cb:
                    0e:f4:f8:fb:1b:a1:71:fe:7f:11:b5:1b:56:80:22:
                    5f:27:32:7e:e2:39:6f:03:b4:61:cf:9c:0a:56:0e:
                    b5:01:85:6b:e4:85:df:36:71:a2:3c:ff:70:0f:e7:
                    f5:27:56:f9:46:bb:57:49:23:3c:09:5f:f3:48:87:
                    2d:48:72:50:8c:7b:82:90:bd:18:e5:72:3b:8a:4c:
                    a7:78:00:fb:b8:62:e0:32:b0:09:c8:2e:93:91:46:
                    44:36:47:ad:16:9d:fc:d0:55:f1:90:e4:25:d8:b4:
                    7b:2b:02:e3:45:b3:b0:2d:7a:5f:c0:8c:b2:5d:b1:
                    ce:49:d3:53:f2:c9:20:55:ff:94:cf:a4:78:97:16:
                    a2:35:9b:b3:0d:f7:c4:aa:35:2f:ba:64:3d:b8:98:
                    b8:99:ce:d5:b9:b4:4c:97:f0:62:a0:51:17:aa:e6:
                    51:a6:4f:2c:5d:9b:ca:a6:2f:29:42:85:a6:77:f7:
                    64:59:86:ae:f8:d7:4c:c5:5b:0a:25:80:84:33:bf:
                    1e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:18:5E:61:3A:AB:1F:D2:80:6B:AB:F4:84:18:1B:7B:E7:D2:F4:CB
            X509v3 Authority Key Identifier:
                keyid:4E:8D:4C:17:D9:B3:A5:16:35:36:69:5F:0B:2F:1F:0C:0B:24:A7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a3330303a3a2f34302d3434203d3e20323637333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bb4:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         77:f0:ca:41:0e:8d:1d:68:a7:62:32:38:a2:b7:f7:7e:a7:0b:
         ea:58:b1:89:b8:45:e1:54:a0:f8:43:45:69:ca:e4:09:3f:79:
         3a:2a:01:52:f5:a1:7c:d0:7a:30:56:ea:38:b2:35:c4:63:c6:
         1f:e1:2d:43:96:a8:5f:b3:7b:63:e2:da:e9:c2:8e:a3:3f:f2:
         3d:0f:b1:3b:42:80:16:81:0f:ac:11:63:c5:1b:a8:b0:36:83:
         81:a5:94:3c:a9:7e:1f:8f:1e:9a:0e:f3:45:4d:73:c5:84:fe:
         e7:fe:7c:20:e5:04:1e:23:8b:44:78:da:ec:53:cb:0c:a9:47:
         a3:18:ef:3d:4c:b8:6b:c4:c3:f2:9e:86:02:0f:79:57:36:d8:
         8a:e8:e5:03:ce:e8:f1:24:4e:f4:57:0f:fa:cd:4d:00:fc:76:
         68:1e:fa:7d:b2:5a:77:de:ae:25:1e:c7:4f:1c:93:51:51:2b:
         89:06:e2:2c:d4:f1:c5:44:c4:70:37:10:6e:37:36:d4:46:ee:
         75:84:5d:d7:24:98:0b:2f:11:f0:d5:34:2e:ec:67:46:1a:ef:
         60:44:01:22:77:e2:d3:c0:15:59:13:d4:be:e3:f4:8c:9c:1c:
         9c:a8:66:45:a4:fc:94:36:0c:95:57:8e:12:aa:be:ca:45:e0:
         d9:ac:b6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org