Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/323830343a356562383a383030303a3a2f33332d3333203d3e20323632383636.roa
File:                     323830343a356562383a383030303a3a2f33332d3333203d3e20323632383636.roa (raw, json)
Hash identifier:          J/cUKX6nDQZLu+D1yYDa7PvoXui7tis2CimX5yKZpuU=
Subject key identifier:   74:F4:91:E8:98:AB:ED:8F:41:E3:0D:89:6F:34:78:6A:A7:3E:71:1E
Certificate issuer:       /CN=E1420DF098810B8B6F41BD0334D08AD27E0BDC1C
Certificate serial:       7500E88A4A712AF2120ACAF13FB1628CAAD1C979
Authority key identifier: E1:42:0D:F0:98:81:0B:8B:6F:41:BD:03:34:D0:8A:D2:7E:0B:DC:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/323830343a356562383a383030303a3a2f33332d3333203d3e20323632383636.roa
Signing time:             Fri 12 Jan 2024 18:11:18 +0000
ROA not before:           Fri 12 Jan 2024 18:06:18 +0000
ROA not after:            Fri 10 Jan 2025 18:11:18 +0000
asID:                     262866
IP address blocks:        2804:5eb8:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:00:e8:8a:4a:71:2a:f2:12:0a:ca:f1:3f:b1:62:8c:aa:d1:c9:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1420DF098810B8B6F41BD0334D08AD27E0BDC1C
        Validity
            Not Before: Jan 12 18:06:18 2024 GMT
            Not After : Jan 10 18:11:18 2025 GMT
        Subject: CN=74F491E898ABED8F41E30D896F34786AA73E711E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:09:7e:2c:9b:13:56:90:73:ca:22:2a:95:bd:
                    b5:7f:3f:1d:c9:6b:75:09:b9:e1:e5:8d:55:7e:4c:
                    ee:6f:9a:4c:66:61:91:d1:8e:5b:bf:88:7f:04:8b:
                    89:18:b4:38:29:52:f5:af:64:70:0a:e4:44:d3:94:
                    9d:7d:55:40:96:08:3e:a9:da:f9:62:ea:0c:0f:65:
                    2f:c3:ed:80:90:69:c3:60:1e:fd:8e:f6:d4:a2:4d:
                    fe:cf:fb:0d:92:1f:4f:40:0d:e2:da:0f:8b:fb:f8:
                    b4:7a:08:05:6b:37:4c:80:0f:44:54:ad:14:4d:35:
                    57:54:fe:5b:1d:66:a4:0c:73:af:32:53:a8:f5:17:
                    de:4f:82:12:22:93:c9:57:b8:39:40:2c:84:da:a9:
                    e1:e1:10:56:c5:8a:39:55:87:73:a2:ff:05:36:f4:
                    8b:fb:50:71:f6:14:76:e7:9b:53:57:b4:54:2b:c9:
                    78:a0:94:8d:9b:b8:98:e1:46:27:28:9e:c4:99:b4:
                    a9:4a:8e:c8:70:c0:09:bb:06:11:a6:9e:f0:62:a4:
                    e8:12:c6:8c:fe:04:0e:e0:34:ce:4c:c8:c6:6b:f9:
                    9a:38:8b:1e:47:77:f7:eb:6f:98:95:46:d9:54:fd:
                    85:19:84:5f:09:dc:9c:c1:27:09:5b:ef:4f:08:67:
                    ec:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F4:91:E8:98:AB:ED:8F:41:E3:0D:89:6F:34:78:6A:A7:3E:71:1E
            X509v3 Authority Key Identifier:
                keyid:E1:42:0D:F0:98:81:0B:8B:6F:41:BD:03:34:D0:8A:D2:7E:0B:DC:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/323830343a356562383a383030303a3a2f33332d3333203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5eb8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8c:bf:15:71:9e:0c:53:0d:2e:54:03:f0:a5:5e:98:20:10:b8:
         16:d4:9c:83:ba:0e:7e:e2:1c:61:55:20:1c:1e:be:0a:60:46:
         55:15:9b:48:32:b4:9b:7b:76:ea:df:19:6a:1a:fb:54:61:80:
         38:aa:d9:26:b9:e4:11:96:b4:66:ce:dc:7f:10:3b:b0:cc:48:
         bc:3e:bc:48:25:fc:92:ad:9d:cc:af:c0:6f:f7:83:b7:73:10:
         ba:81:22:3a:ff:38:30:bb:0a:e9:10:97:5c:ee:5c:ba:ed:64:
         f3:a8:bb:76:dc:ae:08:81:2c:9e:87:32:0a:88:ad:87:87:f8:
         cb:ac:8a:2f:50:07:db:a7:79:2a:71:e6:37:81:33:4a:05:93:
         67:e8:97:dd:55:4b:44:78:06:9a:71:8d:c4:b8:e1:22:8e:a0:
         1c:6c:0f:af:1c:33:49:10:87:00:f8:4c:4b:9c:00:bd:2e:7e:
         dc:e1:34:40:fa:c8:ab:3a:15:4d:85:69:aa:06:35:fb:8f:06:
         93:76:99:28:df:92:d9:22:58:aa:66:10:09:70:e9:09:2f:bd:
         9f:33:d9:aa:95:b3:b0:b5:9a:bb:b0:8b:88:bc:53:cc:f0:85:
         65:8e:1a:0b:f9:25:3f:95:91:a8:e3:f4:48:71:b1:0d:91:10:
         3d:23:ce:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org