Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/323830343a336132303a3a2f33322d3334203d3e20323636303732.roa
File:                     323830343a336132303a3a2f33322d3334203d3e20323636303732.roa (raw, json)
Hash identifier:          DcRrLXjj3bYnbKemDtzZMkCy++YmNA773NZreE1Eu/4=
Subject key identifier:   53:FC:1A:50:FF:7A:75:E8:20:D3:6C:09:B5:CA:E6:A8:36:2D:04:34
Certificate issuer:       /CN=E4996BF8277F2DE1319C47994A7667E13E3077A7
Certificate serial:       15E45F191E817A4F5597F3291CC91D8ED61844A1
Authority key identifier: E4:99:6B:F8:27:7F:2D:E1:31:9C:47:99:4A:76:67:E1:3E:30:77:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E4996BF8277F2DE1319C47994A7667E13E3077A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/323830343a336132303a3a2f33322d3334203d3e20323636303732.roa
Signing time:             Mon 28 Nov 2022 15:32:00 +0000
ROA not before:           Mon 28 Nov 2022 15:27:00 +0000
ROA not after:            Mon 27 Nov 2023 15:32:00 +0000
asID:                     266072
IP address blocks:        2804:3a20::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e4:5f:19:1e:81:7a:4f:55:97:f3:29:1c:c9:1d:8e:d6:18:44:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4996BF8277F2DE1319C47994A7667E13E3077A7
        Validity
            Not Before: Nov 28 15:27:00 2022 GMT
            Not After : Nov 27 15:32:00 2023 GMT
        Subject: CN=3082010A0282010100CE83CE263625DDE5C40483E6FF069E84906A10735342A8808E551AAE98E2A5C7F4E29E1D9B769633224AC4FA99FF5258A972D3BD9FAF98F5A697E50BCF4AE725F9C81B92699105B339F72E575A6667224F5A94D7CE131F7BC48378FB55C60FB8F45F39144B759A5CE3AA5AFB78C53E098514FFCA731B8C12C825C31A2DBEBE174B1DEE9DDAFB520577ECD003D2602B8C3D1C36C86670111F8BC2F3ABFF9A7FCDB4EDBA09E37B6C787E735A56716B3FF20BD09D0F19FA7657E2D571AB7AECCADD8D7A4DA95DFEC53382DA07EF8342BCAB9E7CEE3C705E41B164A2C22064EF6EE80376B2BEA54179A8E50287348BE933D8E86E334C64E2F08C6E9B090D3C4DD11D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:83:ce:26:36:25:dd:e5:c4:04:83:e6:ff:06:
                    9e:84:90:6a:10:73:53:42:a8:80:8e:55:1a:ae:98:
                    e2:a5:c7:f4:e2:9e:1d:9b:76:96:33:22:4a:c4:fa:
                    99:ff:52:58:a9:72:d3:bd:9f:af:98:f5:a6:97:e5:
                    0b:cf:4a:e7:25:f9:c8:1b:92:69:91:05:b3:39:f7:
                    2e:57:5a:66:67:22:4f:5a:94:d7:ce:13:1f:7b:c4:
                    83:78:fb:55:c6:0f:b8:f4:5f:39:14:4b:75:9a:5c:
                    e3:aa:5a:fb:78:c5:3e:09:85:14:ff:ca:73:1b:8c:
                    12:c8:25:c3:1a:2d:be:be:17:4b:1d:ee:9d:da:fb:
                    52:05:77:ec:d0:03:d2:60:2b:8c:3d:1c:36:c8:66:
                    70:11:1f:8b:c2:f3:ab:ff:9a:7f:cd:b4:ed:ba:09:
                    e3:7b:6c:78:7e:73:5a:56:71:6b:3f:f2:0b:d0:9d:
                    0f:19:fa:76:57:e2:d5:71:ab:7a:ec:ca:dd:8d:7a:
                    4d:a9:5d:fe:c5:33:82:da:07:ef:83:42:bc:ab:9e:
                    7c:ee:3c:70:5e:41:b1:64:a2:c2:20:64:ef:6e:e8:
                    03:76:b2:be:a5:41:79:a8:e5:02:87:34:8b:e9:33:
                    d8:e8:6e:33:4c:64:e2:f0:8c:6e:9b:09:0d:3c:4d:
                    d1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FC:1A:50:FF:7A:75:E8:20:D3:6C:09:B5:CA:E6:A8:36:2D:04:34
            X509v3 Authority Key Identifier:
                keyid:E4:99:6B:F8:27:7F:2D:E1:31:9C:47:99:4A:76:67:E1:3E:30:77:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/E4996BF8277F2DE1319C47994A7667E13E3077A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E4996BF8277F2DE1319C47994A7667E13E3077A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/323830343a336132303a3a2f33322d3334203d3e20323636303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:19:71:78:86:f7:1a:e5:18:d6:ec:f6:86:66:16:97:7d:d1:
         c5:06:06:6d:14:ac:d9:ed:0a:4b:86:e7:2d:51:ae:d0:86:f4:
         8e:21:9e:f9:d5:d7:e9:8e:e4:67:d7:13:a3:73:62:e1:12:d2:
         f3:70:25:90:79:98:b7:96:64:4d:a1:1d:4b:13:de:d9:90:f6:
         b8:49:27:ab:ba:24:a2:35:a4:62:b4:79:61:e7:e5:a9:89:45:
         40:3b:dd:0b:7d:b6:50:03:d8:a3:fc:23:34:56:9a:f8:72:d3:
         a4:39:a0:fc:42:b4:2b:c4:2d:a5:ef:c1:9c:87:0f:6a:bd:85:
         9e:f8:fe:a2:53:73:57:9d:a3:b1:4f:58:8c:58:04:fa:65:2c:
         d6:c8:55:07:88:17:78:59:d3:2b:6f:02:49:b0:df:d6:e1:84:
         1e:2f:3c:d2:d7:f3:88:58:28:ac:76:b0:6f:9f:94:85:3c:75:
         51:93:aa:44:48:39:3d:c4:0d:69:b0:9c:9d:c4:e6:71:7b:bb:
         2e:d6:bd:3c:a9:61:ff:48:00:66:74:57:4f:65:89:41:ae:07:
         c7:ec:38:ad:1e:22:5e:30:1a:bc:c9:5a:df:e2:04:54:97:00:
         11:89:30:43:be:31:16:e9:05:b4:dc:c3:64:a7:90:1c:d7:00:
         ec:bf:c0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org