Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/323830343a316139633a3a2f33322d3333203d3e203631383731.roa
File:                     323830343a316139633a3a2f33322d3333203d3e203631383731.roa (raw, json)
Hash identifier:          cnH7EjajqRAA3NcivifuXkBwg8hEm/Q6gyAscUpb0xE=
Subject key identifier:   5B:42:EF:84:5A:6E:D3:43:1B:D2:18:90:27:64:90:28:47:23:15:FD
Certificate issuer:       /CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
Certificate serial:       682A58206DE4A1E33CD1271828AA974C4C0E7876
Authority key identifier: 9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/323830343a316139633a3a2f33322d3333203d3e203631383731.roa
Signing time:             Thu 28 Dec 2023 22:42:00 +0000
ROA not before:           Thu 28 Dec 2023 22:37:00 +0000
ROA not after:            Thu 26 Dec 2024 22:42:00 +0000
asID:                     61871
IP address blocks:        2804:1a9c::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:2a:58:20:6d:e4:a1:e3:3c:d1:27:18:28:aa:97:4c:4c:0e:78:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
        Validity
            Not Before: Dec 28 22:37:00 2023 GMT
            Not After : Dec 26 22:42:00 2024 GMT
        Subject: CN=3082010A0282010100BF910172523D8B20C6BB984B00ACC2FDB5585BA8BB0277F322B8EDB6D0CCADD8512C6BE70FF49118D95B4F0FC71406CED460CBE340FF21A05632E51B9E1970B82230A483AAD8095DC7614B880C42CEECBEEAA65221576FF196F7C5A26C45148EC79B7645804448BD909E50C77254BB4E3E2B9C891A75AE1798611443AAC2E7F82D6685E4880382C231E349B4A911B062B694561F5889087A425ABB62358BC1E14D167DCDFB53C5C5DA495DCE9DF0F3067E140B942BA6CF9BEFE645161CB4EA74A77D6182C7C16A80531B08C2615D2BD9E08141768E5EAFDFC066C5905087E5A9AF0E223D7A76548E89C441BAB3C94DD0CCC35117D1A34783E33C1FBEA1771B950203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:91:01:72:52:3d:8b:20:c6:bb:98:4b:00:ac:
                    c2:fd:b5:58:5b:a8:bb:02:77:f3:22:b8:ed:b6:d0:
                    cc:ad:d8:51:2c:6b:e7:0f:f4:91:18:d9:5b:4f:0f:
                    c7:14:06:ce:d4:60:cb:e3:40:ff:21:a0:56:32:e5:
                    1b:9e:19:70:b8:22:30:a4:83:aa:d8:09:5d:c7:61:
                    4b:88:0c:42:ce:ec:be:ea:a6:52:21:57:6f:f1:96:
                    f7:c5:a2:6c:45:14:8e:c7:9b:76:45:80:44:48:bd:
                    90:9e:50:c7:72:54:bb:4e:3e:2b:9c:89:1a:75:ae:
                    17:98:61:14:43:aa:c2:e7:f8:2d:66:85:e4:88:03:
                    82:c2:31:e3:49:b4:a9:11:b0:62:b6:94:56:1f:58:
                    89:08:7a:42:5a:bb:62:35:8b:c1:e1:4d:16:7d:cd:
                    fb:53:c5:c5:da:49:5d:ce:9d:f0:f3:06:7e:14:0b:
                    94:2b:a6:cf:9b:ef:e6:45:16:1c:b4:ea:74:a7:7d:
                    61:82:c7:c1:6a:80:53:1b:08:c2:61:5d:2b:d9:e0:
                    81:41:76:8e:5e:af:df:c0:66:c5:90:50:87:e5:a9:
                    af:0e:22:3d:7a:76:54:8e:89:c4:41:ba:b3:c9:4d:
                    d0:cc:c3:51:17:d1:a3:47:83:e3:3c:1f:be:a1:77:
                    1b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:42:EF:84:5A:6E:D3:43:1B:D2:18:90:27:64:90:28:47:23:15:FD
            X509v3 Authority Key Identifier:
                keyid:9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/323830343a316139633a3a2f33322d3333203d3e203631383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a9c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:b4:93:1f:7f:97:13:61:84:32:1b:33:16:f5:8d:5b:0d:4a:
         61:af:42:4d:a0:66:ab:ac:bc:7c:45:f9:9e:c2:b5:89:96:e0:
         bd:41:2e:5f:34:bc:ce:f1:93:64:9e:53:38:c1:49:20:5c:0e:
         a5:fd:ae:75:bc:5a:aa:4c:b4:fb:6d:4e:a9:a6:49:25:45:6b:
         03:a0:44:7c:63:b7:9d:c4:df:18:09:fb:5a:ac:a5:2e:8f:ee:
         a0:e2:77:59:34:9c:15:03:47:3a:99:13:a6:69:35:04:a1:b1:
         57:c1:69:55:5e:26:7e:d2:4c:94:b1:15:54:23:7a:b8:e6:e7:
         c2:7d:6a:a3:b3:a4:f4:dc:3b:96:c7:e7:3b:60:35:b1:3d:04:
         57:2e:e3:63:b6:61:61:53:34:4a:b2:39:59:d2:b4:56:61:dd:
         2b:db:42:c5:48:18:25:2f:20:be:92:cf:56:d2:ad:a2:6d:de:
         65:24:20:da:88:74:5f:01:bd:ef:db:c4:5f:42:8b:35:cd:50:
         ee:fd:97:45:9d:ce:04:63:09:74:c4:a0:60:ed:a9:e7:ca:d2:
         de:81:8d:73:d7:6a:b5:72:08:f8:06:c6:3f:ed:6d:4a:7a:3a:
         a0:67:c2:19:af:30:6e:f2:61:02:4a:b6:31:6e:81:95:98:c3:
         47:98:99:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:20 2024 by rpki-client on console-ams.rpki-client.org