Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/323830343a336238343a313330303a3a2f34302d3430203d3e20323636313534.roa
File:                     323830343a336238343a313330303a3a2f34302d3430203d3e20323636313534.roa (raw, json)
Hash identifier:          bksj9cw9jLdDzlnfpFjaCdRc6zYenP24oS4iUJKjxT4=
Subject key identifier:   57:36:D8:5A:18:51:D6:DA:71:30:33:48:85:4A:74:5D:16:BC:51:12
Certificate issuer:       /CN=10B05660CB8C13B3B13E3B0810B278833D500547
Certificate serial:       3F998B482A7ECD4DC0BB4886FE872D010B0198C1
Authority key identifier: 10:B0:56:60:CB:8C:13:B3:B1:3E:3B:08:10:B2:78:83:3D:50:05:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10B05660CB8C13B3B13E3B0810B278833D500547.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/323830343a336238343a313330303a3a2f34302d3430203d3e20323636313534.roa
Signing time:             Thu 15 Jun 2023 17:34:39 +0000
ROA not before:           Thu 15 Jun 2023 17:29:39 +0000
ROA not after:            Thu 13 Jun 2024 17:34:39 +0000
asID:                     266154
IP address blocks:        2804:3b84:1300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:99:8b:48:2a:7e:cd:4d:c0:bb:48:86:fe:87:2d:01:0b:01:98:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10B05660CB8C13B3B13E3B0810B278833D500547
        Validity
            Not Before: Jun 15 17:29:39 2023 GMT
            Not After : Jun 13 17:34:39 2024 GMT
        Subject: CN=5736D85A1851D6DA71303348854A745D16BC5112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:23:55:63:09:a3:72:3c:31:8f:7c:19:77:57:
                    bf:a8:30:cb:3c:74:f5:e5:c4:90:d1:97:56:8c:47:
                    18:8f:bb:ef:40:6e:c8:b3:a9:49:eb:60:1a:05:9e:
                    f7:d8:71:b6:a9:10:bf:16:cc:5a:10:5b:22:ff:db:
                    74:74:39:88:61:17:2f:d7:9e:ea:33:7f:18:1b:65:
                    32:64:01:ec:9c:24:0c:b3:bd:ff:91:3e:5f:4d:bb:
                    e0:80:2a:37:76:24:67:0b:69:2d:6d:9d:0a:17:08:
                    87:65:bb:66:6e:2f:bc:35:72:80:75:b4:e3:ca:d1:
                    bc:65:6b:19:0e:2f:07:f5:ae:ee:b3:e6:cf:61:92:
                    85:59:76:75:e9:a4:22:8c:5e:08:ca:c6:20:1a:d9:
                    89:ea:69:2d:80:3f:ec:4a:9e:4e:67:2b:43:8c:3a:
                    89:ad:43:9f:ba:13:88:f5:83:5c:5d:e9:28:48:ad:
                    07:84:40:b8:86:22:66:b5:d8:a6:c0:14:15:dd:04:
                    0a:a2:43:f8:e1:f9:4b:81:4e:34:58:80:f9:d6:75:
                    3c:4c:99:aa:30:1e:97:55:9c:fd:f1:0a:f8:d2:57:
                    67:75:71:16:71:f5:85:43:e3:e8:3d:52:ee:ba:af:
                    f8:19:86:14:50:a7:96:89:c2:46:4a:a9:2f:3c:4c:
                    f2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:36:D8:5A:18:51:D6:DA:71:30:33:48:85:4A:74:5D:16:BC:51:12
            X509v3 Authority Key Identifier:
                keyid:10:B0:56:60:CB:8C:13:B3:B1:3E:3B:08:10:B2:78:83:3D:50:05:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/10B05660CB8C13B3B13E3B0810B278833D500547.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10B05660CB8C13B3B13E3B0810B278833D500547.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/323830343a336238343a313330303a3a2f34302d3430203d3e20323636313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b84:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         60:71:ce:ab:c4:01:8a:6b:bc:c0:d8:b7:61:da:27:10:ac:e2:
         b8:89:bb:62:50:f7:04:c4:04:a6:60:27:69:d4:fd:b5:70:31:
         bc:ea:34:8e:52:f2:28:72:b4:95:ef:59:98:ac:83:cd:42:7b:
         c6:ec:7a:83:fa:7b:1c:13:7d:c7:7f:1d:35:53:56:dd:0c:69:
         73:02:02:22:85:bb:de:d5:0c:8c:32:d5:7f:8a:4a:9f:62:d2:
         7c:dd:60:c4:e6:dd:b6:93:68:9d:29:3f:f3:f7:41:d4:f7:4b:
         18:71:18:27:60:87:76:db:04:7c:cb:ed:9e:bc:dd:61:e9:a3:
         53:00:b8:54:4a:dd:64:29:4d:f5:a3:b6:cb:e1:c2:54:6d:49:
         bd:f5:5b:49:dc:7e:3a:be:f3:cc:62:37:04:1d:4b:1b:91:3c:
         0b:86:ac:31:7e:c5:10:d9:11:33:24:e5:fe:e6:7f:d1:1c:77:
         21:df:ad:14:ec:dc:13:5e:2f:18:fc:f3:2b:df:79:bf:06:bd:
         7f:30:bf:62:45:c9:e7:41:d8:dd:1f:3a:38:8f:de:e4:56:18:
         a6:a8:04:1c:dd:8d:56:19:78:09:30:e5:12:04:22:3e:fc:03:
         bc:e9:50:cf:22:9a:19:1a:a3:71:eb:ac:72:98:cb:00:70:51:
         fb:b8:d7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org