Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a3830303a3a2f34302d3430203d3e20323639313735.roa
File:                     323830343a316634633a3830303a3a2f34302d3430203d3e20323639313735.roa (raw, json)
Hash identifier:          HbUsQRZxrWKOb02ks0wSb8sYIiyoJIBWLCpSHaZinzc=
Subject key identifier:   01:50:F3:11:4A:D5:75:2E:A1:F8:F6:14:26:88:24:F8:8A:5A:0F:38
Certificate issuer:       /CN=E3E0BE7F45FADF2C1604B1DD7C195996B74858E9
Certificate serial:       2ECEE8CDEC52A11FC93B899C6E63DC3B6DC29720
Authority key identifier: E3:E0:BE:7F:45:FA:DF:2C:16:04:B1:DD:7C:19:59:96:B7:48:58:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3E0BE7F45FADF2C1604B1DD7C195996B74858E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a3830303a3a2f34302d3430203d3e20323639313735.roa
Signing time:             Mon 26 Feb 2024 14:58:40 +0000
ROA not before:           Mon 26 Feb 2024 14:53:40 +0000
ROA not after:            Mon 24 Feb 2025 14:58:40 +0000
asID:                     269175
IP address blocks:        2804:1f4c:800::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ce:e8:cd:ec:52:a1:1f:c9:3b:89:9c:6e:63:dc:3b:6d:c2:97:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0BE7F45FADF2C1604B1DD7C195996B74858E9
        Validity
            Not Before: Feb 26 14:53:40 2024 GMT
            Not After : Feb 24 14:58:40 2025 GMT
        Subject: CN=0150F3114AD5752EA1F8F614268824F88A5A0F38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e4:04:f2:89:f3:ba:c4:14:a8:1f:a8:6d:b2:
                    b8:9b:15:13:75:dc:1e:b1:5c:22:57:a3:41:bd:f3:
                    97:15:af:ce:a0:2d:e3:4f:c8:04:0d:0b:ac:40:69:
                    37:8a:a8:eb:b3:2c:60:a3:42:fd:21:bb:5a:95:8f:
                    c1:4f:ed:d4:a8:04:e3:e1:f4:66:36:4a:c1:20:c4:
                    1b:36:d2:df:2e:63:c4:8a:d8:fe:83:97:a5:82:aa:
                    38:2b:60:27:1d:94:80:6e:4f:27:18:e8:3b:47:47:
                    1a:a2:ee:7c:e6:ac:79:6f:cd:04:88:9d:d6:c0:46:
                    2b:c1:9f:d2:b3:ee:79:60:ad:c7:26:06:0a:8c:80:
                    aa:03:a4:cb:f9:33:1d:00:24:c8:89:11:8f:a4:95:
                    b5:ac:79:cf:40:d4:16:24:28:94:40:20:d6:ee:ed:
                    b6:de:e4:90:6f:32:f1:df:82:ce:ab:65:b6:ad:49:
                    a3:86:8b:16:c1:47:14:7e:c0:fb:b6:92:72:26:cd:
                    0d:76:da:31:73:4d:46:c1:5b:e6:3c:69:54:e4:8f:
                    02:03:45:0f:8d:ed:f0:c9:69:83:9e:86:21:1b:65:
                    fb:31:a6:a0:6a:b7:c7:88:0b:a1:e7:b1:bc:84:b1:
                    29:66:73:cd:13:37:d5:41:3a:98:f3:32:d2:70:25:
                    df:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:50:F3:11:4A:D5:75:2E:A1:F8:F6:14:26:88:24:F8:8A:5A:0F:38
            X509v3 Authority Key Identifier:
                keyid:E3:E0:BE:7F:45:FA:DF:2C:16:04:B1:DD:7C:19:59:96:B7:48:58:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/E3E0BE7F45FADF2C1604B1DD7C195996B74858E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3E0BE7F45FADF2C1604B1DD7C195996B74858E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a3830303a3a2f34302d3430203d3e20323639313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f4c:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         12:05:a9:e5:88:f9:41:25:ca:de:28:a7:69:0a:e7:ab:0e:7c:
         43:77:30:01:60:e0:64:63:9b:07:72:29:ec:97:b1:2d:21:bd:
         67:25:61:0b:37:ac:c9:d6:16:ac:e5:dd:8a:f8:36:ed:5f:ed:
         9a:a2:f3:56:94:a1:20:0f:b6:f2:72:05:56:1a:31:4b:3e:64:
         8f:b9:e1:e5:79:bb:9c:43:64:bc:de:09:78:c1:0d:03:05:0d:
         f3:ae:a6:d4:bb:d9:b6:ba:e8:62:8b:ae:db:26:2f:50:b2:76:
         90:ab:d2:69:65:a9:3e:48:16:95:3a:3d:a6:32:2f:31:58:20:
         c2:86:f6:ee:d4:32:ac:64:7d:f5:7a:89:bc:0d:93:01:bf:0c:
         9e:8c:90:f8:e6:67:5f:a7:da:af:0a:3f:79:04:01:36:ce:fd:
         53:95:5f:a0:ee:8d:4b:ea:be:cc:21:03:22:3a:3e:2c:c3:40:
         d7:5f:bd:bc:de:2f:93:9f:ad:5c:65:ca:8b:0f:a4:d8:8b:f9:
         18:30:86:fa:b3:e7:d6:33:43:4d:b7:03:a4:0c:13:1e:62:f6:
         68:bf:b2:47:b0:d9:3d:09:fa:99:04:60:73:23:c7:87:7b:07:
         f4:3b:20:0b:bc:c9:5b:3f:c1:c6:df:ba:ff:a4:77:d7:aa:2e:
         ac:e4:0f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:41 2024 by rpki-client on console-fra.rpki-client.org