Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/323830343a353134303a3a2f33332d3333203d3e20323638343430.roa
File:                     323830343a353134303a3a2f33332d3333203d3e20323638343430.roa (raw, json)
Hash identifier:          R2+fEhVPnyFYgNr+ilc1+yUIxetQRUmz40ERcB8TQlo=
Subject key identifier:   27:A5:E9:4B:51:A2:CD:15:52:E5:C9:8E:5A:AF:FA:FB:C9:1C:3E:37
Certificate issuer:       /CN=C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4
Certificate serial:       735346D6AB4A292DCF06B93B459EDF9C71724783
Authority key identifier: C1:93:B6:89:79:B0:F1:89:D2:AD:1B:E1:F4:E7:C6:A8:05:8B:41:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/323830343a353134303a3a2f33332d3333203d3e20323638343430.roa
Signing time:             Mon 18 Dec 2023 19:05:06 +0000
ROA not before:           Mon 18 Dec 2023 19:00:06 +0000
ROA not after:            Mon 16 Dec 2024 19:05:06 +0000
asID:                     268440
IP address blocks:        2804:5140::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:53:46:d6:ab:4a:29:2d:cf:06:b9:3b:45:9e:df:9c:71:72:47:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4
        Validity
            Not Before: Dec 18 19:00:06 2023 GMT
            Not After : Dec 16 19:05:06 2024 GMT
        Subject: CN=27A5E94B51A2CD1552E5C98E5AAFFAFBC91C3E37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b5:3e:d3:05:7e:6d:ea:6c:f6:bd:6f:17:eb:
                    68:c6:17:ce:40:b7:90:fb:03:fd:fd:a3:bb:b5:ce:
                    00:a1:17:78:4e:0c:85:5e:d5:c7:bc:fa:10:05:8a:
                    bb:89:29:39:f9:86:66:a2:33:06:78:ed:41:aa:24:
                    be:9a:a0:5c:2f:9e:ef:05:55:35:e5:c5:95:17:f0:
                    ba:b8:0f:8f:76:d8:34:4e:31:13:fc:81:8f:2c:2f:
                    d6:71:ba:ee:a7:e3:80:14:9d:bd:36:d4:c0:af:a9:
                    28:77:96:f5:a7:c3:0a:c5:c9:71:50:77:47:9a:d5:
                    2b:4d:76:70:0a:25:5b:f3:26:79:91:40:8a:fc:0e:
                    7a:09:22:0d:ae:45:88:a7:02:39:fc:42:2f:c6:97:
                    aa:f7:35:ce:ac:37:a9:c2:03:58:f8:db:50:e1:30:
                    75:de:5c:98:07:a3:da:38:b6:ca:a9:77:09:2b:a7:
                    86:15:73:77:27:01:05:43:05:e2:73:b4:a1:b2:c5:
                    39:ee:bc:f1:c4:d1:8c:b7:27:4f:30:4b:5b:0b:6e:
                    17:4f:0c:e5:7b:d5:27:8c:78:43:6d:d2:da:94:b8:
                    c4:21:85:b0:5f:d1:d5:d2:c2:0e:2f:bb:ef:0c:ac:
                    f8:5b:5b:1d:98:14:80:b4:93:be:3e:7e:71:89:93:
                    e0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A5:E9:4B:51:A2:CD:15:52:E5:C9:8E:5A:AF:FA:FB:C9:1C:3E:37
            X509v3 Authority Key Identifier:
                keyid:C1:93:B6:89:79:B0:F1:89:D2:AD:1B:E1:F4:E7:C6:A8:05:8B:41:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/323830343a353134303a3a2f33332d3333203d3e20323638343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5140::/33

    Signature Algorithm: sha256WithRSAEncryption
         b1:0c:4f:34:2e:28:70:d9:66:01:96:f8:7f:c8:b5:cb:5c:41:
         4b:e6:86:35:4c:df:6c:b9:60:e6:ba:64:0f:2e:3d:85:e8:f2:
         d0:f9:8e:df:dd:90:fc:45:04:c5:d7:e7:06:25:dc:7c:50:1f:
         92:d4:c5:88:9c:b8:7a:a4:9c:68:5e:54:f7:9d:d3:c7:46:df:
         86:50:b2:13:95:fe:d0:fd:f8:1d:bd:c0:ea:d6:80:f2:dd:e3:
         b5:6a:a5:90:8b:e3:2a:96:44:86:c2:ca:d1:ce:65:93:02:a1:
         70:f4:11:b3:22:5e:3d:60:bb:8a:8e:d1:b3:9c:c8:37:1d:01:
         a9:9c:0f:8a:53:5e:63:29:62:c9:3c:7a:90:77:3a:27:4c:8a:
         c0:21:65:bc:5f:87:f3:fa:2f:c6:8f:15:03:a5:71:3a:3c:c1:
         91:8e:97:b9:8d:66:f0:0e:13:d4:67:62:3e:86:52:c2:c5:28:
         74:9f:51:b5:8f:20:dc:79:18:e9:7d:ac:a7:46:27:57:1f:9a:
         de:ef:2d:4e:61:d7:ea:a3:a2:e4:e9:b3:d6:e9:00:02:e7:26:
         43:60:b2:15:e7:6c:e6:48:90:08:18:82:dd:fc:ec:40:7d:45:
         ac:f3:a8:b7:c5:e8:1b:12:be:4a:bb:13:d6:a9:3d:c6:d7:9b:
         cc:d0:35:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:12 2024 by rpki-client on console-fra.rpki-client.org