Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/0/323830343a346434343a3a2f33322d3332203d3e20323632393738.roa
File:                     323830343a346434343a3a2f33322d3332203d3e20323632393738.roa (raw, json)
Hash identifier:          mkvhxvyXh5UDKiCLaIQ3SK/IJeOkrn1UMz5MiFMkBy4=
Subject key identifier:   58:DA:2F:73:3F:E2:56:6E:A4:35:E1:A5:A0:9C:53:5C:CB:C2:E3:0C
Certificate issuer:       /CN=6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98
Certificate serial:       44A6A1E5A0B55EA9D0EE72E30F74C4E4C916121A
Authority key identifier: 62:65:00:9F:93:CC:6C:26:C0:0F:D1:D6:FE:FE:B8:01:0A:0B:DF:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/0/323830343a346434343a3a2f33322d3332203d3e20323632393738.roa
Signing time:             Sat 18 Nov 2023 04:19:11 +0000
ROA not before:           Sat 18 Nov 2023 04:14:11 +0000
ROA not after:            Sat 16 Nov 2024 04:19:11 +0000
asID:                     262978
IP address blocks:        2804:4d44::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a6:a1:e5:a0:b5:5e:a9:d0:ee:72:e3:0f:74:c4:e4:c9:16:12:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98
        Validity
            Not Before: Nov 18 04:14:11 2023 GMT
            Not After : Nov 16 04:19:11 2024 GMT
        Subject: CN=58DA2F733FE2566EA435E1A5A09C535CCBC2E30C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b9:7a:db:82:6b:d5:99:3a:25:63:3a:6e:7b:
                    e1:e9:90:6a:0d:6e:75:ee:e8:ab:42:72:72:c3:34:
                    26:0c:3c:a2:bf:12:04:aa:c5:8d:f8:66:8f:dd:6f:
                    0a:45:2b:a6:6e:60:74:1c:d4:c3:05:50:13:b8:5c:
                    75:55:13:4b:1e:5b:51:f8:51:9a:e4:13:4a:22:8d:
                    40:94:46:bb:9d:7f:7b:b5:ad:27:64:8d:54:50:05:
                    b3:fd:c6:ba:58:c7:60:c1:aa:69:d7:39:b9:e2:80:
                    46:8a:85:e9:cf:fa:e8:2a:41:8d:72:45:03:36:a7:
                    4e:90:76:89:ea:9e:66:a8:ec:85:b1:48:49:0f:ad:
                    33:28:3a:7a:09:21:7a:b2:43:5f:ff:5f:e2:63:72:
                    84:a6:68:da:42:dd:a6:59:d4:a3:03:37:b6:df:2d:
                    98:3f:e6:cf:53:3e:61:3d:c8:6c:2e:1a:ae:0d:9a:
                    92:ed:18:2d:59:7c:42:9b:b3:b0:ee:b1:30:59:95:
                    c3:e2:42:21:e2:a0:9b:19:eb:c3:04:d3:05:0b:26:
                    2b:22:fd:19:fb:bc:ea:2c:80:d5:43:b5:20:04:57:
                    ae:a2:a4:17:f7:24:3f:de:75:f7:33:7f:9b:a2:b8:
                    6d:05:72:fc:42:89:80:07:8b:6f:a6:72:fc:aa:29:
                    a0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DA:2F:73:3F:E2:56:6E:A4:35:E1:A5:A0:9C:53:5C:CB:C2:E3:0C
            X509v3 Authority Key Identifier:
                keyid:62:65:00:9F:93:CC:6C:26:C0:0F:D1:D6:FE:FE:B8:01:0A:0B:DF:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/0/6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/0/323830343a346434343a3a2f33322d3332203d3e20323632393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d44::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:30:29:44:c0:ab:d4:47:7c:3e:90:c7:c5:20:e6:35:28:c7:
         e6:a5:c8:a0:7b:67:e6:cf:4c:69:b1:ec:c4:79:46:51:0b:1e:
         ec:a9:d5:2f:1d:a6:f8:6d:2d:19:ad:86:b4:fe:1d:33:f6:c2:
         74:e0:4e:a8:dd:23:84:a2:40:85:4a:23:28:06:6f:a6:8a:b3:
         7f:8a:02:a4:18:4b:ef:4b:6c:bb:3e:80:66:0a:f6:50:a1:b6:
         9c:cc:7b:92:61:35:5a:8b:83:61:f1:b6:50:37:a2:9d:85:fe:
         c9:9c:b6:ce:b5:49:9f:e5:f1:3c:1a:51:d4:7d:51:45:bc:df:
         0f:4d:dd:c0:81:c4:20:60:42:a3:af:9e:15:9f:64:8b:fe:c3:
         6e:aa:6c:fc:93:f7:44:a2:14:79:6c:52:98:64:5f:d9:ea:96:
         8f:6e:86:fa:b8:55:b7:53:40:43:8a:62:30:97:94:80:00:24:
         38:58:28:ea:00:fb:1c:1b:ec:a8:fc:16:28:bf:3e:78:ff:70:
         3a:89:a2:a6:82:9f:86:a6:11:f0:0c:27:6c:6e:fd:80:b4:79:
         fe:47:45:80:09:f3:bf:e1:d4:56:63:fe:b4:43:4d:5e:13:35:
         30:c3:2a:c3:c4:82:a6:45:0d:fc:bd:f0:7a:18:14:f8:31:ad:
         ae:26:b7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org