Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/1/323830343a313737343a3a2f33322d3336203d3e20323633313435.roa
File:                     323830343a313737343a3a2f33322d3336203d3e20323633313435.roa (raw, json)
Hash identifier:          VImvGpZCb0ETg5wpPKQLhCPSZCRscsgkm75uTJpDUYU=
Subject key identifier:   11:DE:19:A0:05:EA:76:1C:F5:C2:06:BD:32:B8:9E:7B:94:89:A7:76
Certificate issuer:       /CN=DAFBE65FF96BBA89F467D4F20B0549C579F099DA
Certificate serial:       1DACACD611F0011B51B89CFAE6A31C74858067D9
Authority key identifier: DA:FB:E6:5F:F9:6B:BA:89:F4:67:D4:F2:0B:05:49:C5:79:F0:99:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DAFBE65FF96BBA89F467D4F20B0549C579F099DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/1/323830343a313737343a3a2f33322d3336203d3e20323633313435.roa
Signing time:             Wed 04 Oct 2023 23:00:00 +0000
ROA not before:           Wed 04 Oct 2023 22:55:00 +0000
ROA not after:            Wed 02 Oct 2024 23:00:00 +0000
asID:                     263145
IP address blocks:        2804:1774::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ac:ac:d6:11:f0:01:1b:51:b8:9c:fa:e6:a3:1c:74:85:80:67:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAFBE65FF96BBA89F467D4F20B0549C579F099DA
        Validity
            Not Before: Oct  4 22:55:00 2023 GMT
            Not After : Oct  2 23:00:00 2024 GMT
        Subject: CN=3082010A0282010100E1416A8808802A06D18F81D02C14C5B2296F6D0916F901790F8A6B067749F55925E1350CC7DD3CFFD994A5B4191BE821E043D96D62553C4F4E3312CE9E8C6FE347FF3C571EB5E5998BD409C4CAFDA5E9EE410AC2FD0D50E5812E2F184EB01D2E79DB9092B083DA78C6F1CDAA99D609AEDE321FF8713B99376A7CC7B7FEC42DA5A0B7EC8111DCE6A1AC1266D630F8773560B83ED7F9EBB89C9EC62C3E8A90FF8EFDE7F6EA8AA958CC4A031FB86EF8C856E2A1E60E8B974A36EB7942E46A34E2C390E0C17461277805BE5D3A9D86E133D638D798DB5CDA504FB9DE987B15217F9A567FCDD14B4754DDB41C2FECC0F4C190E7617650250A089B5F53E9C4532797030203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:41:6a:88:08:80:2a:06:d1:8f:81:d0:2c:14:
                    c5:b2:29:6f:6d:09:16:f9:01:79:0f:8a:6b:06:77:
                    49:f5:59:25:e1:35:0c:c7:dd:3c:ff:d9:94:a5:b4:
                    19:1b:e8:21:e0:43:d9:6d:62:55:3c:4f:4e:33:12:
                    ce:9e:8c:6f:e3:47:ff:3c:57:1e:b5:e5:99:8b:d4:
                    09:c4:ca:fd:a5:e9:ee:41:0a:c2:fd:0d:50:e5:81:
                    2e:2f:18:4e:b0:1d:2e:79:db:90:92:b0:83:da:78:
                    c6:f1:cd:aa:99:d6:09:ae:de:32:1f:f8:71:3b:99:
                    37:6a:7c:c7:b7:fe:c4:2d:a5:a0:b7:ec:81:11:dc:
                    e6:a1:ac:12:66:d6:30:f8:77:35:60:b8:3e:d7:f9:
                    eb:b8:9c:9e:c6:2c:3e:8a:90:ff:8e:fd:e7:f6:ea:
                    8a:a9:58:cc:4a:03:1f:b8:6e:f8:c8:56:e2:a1:e6:
                    0e:8b:97:4a:36:eb:79:42:e4:6a:34:e2:c3:90:e0:
                    c1:74:61:27:78:05:be:5d:3a:9d:86:e1:33:d6:38:
                    d7:98:db:5c:da:50:4f:b9:de:98:7b:15:21:7f:9a:
                    56:7f:cd:d1:4b:47:54:dd:b4:1c:2f:ec:c0:f4:c1:
                    90:e7:61:76:50:25:0a:08:9b:5f:53:e9:c4:53:27:
                    97:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DE:19:A0:05:EA:76:1C:F5:C2:06:BD:32:B8:9E:7B:94:89:A7:76
            X509v3 Authority Key Identifier:
                keyid:DA:FB:E6:5F:F9:6B:BA:89:F4:67:D4:F2:0B:05:49:C5:79:F0:99:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/1/DAFBE65FF96BBA89F467D4F20B0549C579F099DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DAFBE65FF96BBA89F467D4F20B0549C579F099DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/1/323830343a313737343a3a2f33322d3336203d3e20323633313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1774::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:26:cd:56:27:61:18:76:b4:ee:13:17:f9:27:93:e4:53:69:
         93:2d:94:fa:90:1c:d1:e5:e9:0d:82:d2:66:19:2b:5d:82:a3:
         a4:ca:55:d2:b4:8d:e8:79:c5:3b:7a:65:8d:a8:12:1f:4c:42:
         3f:7e:0e:4a:8a:1d:48:eb:2d:c1:64:80:f1:39:82:09:ad:87:
         02:5e:e9:83:61:9a:e8:4f:25:6c:ad:8d:f6:07:f2:77:8f:08:
         46:19:10:89:cb:fa:bc:25:10:54:47:57:51:d5:f5:97:1d:77:
         35:a0:4f:e0:65:65:e1:8d:66:de:3e:7d:95:3f:38:87:b9:ca:
         31:30:23:80:e2:60:fd:df:11:0d:c3:ef:b3:83:c7:f2:2d:b9:
         0a:4f:4d:98:ca:d8:10:63:ed:91:7e:96:45:d3:b5:32:70:3f:
         4f:9e:31:b8:d0:27:fe:c0:f3:13:6c:67:e2:bd:73:4c:d4:db:
         d8:0c:93:89:75:fc:19:49:83:18:93:bc:a1:4a:33:df:ff:35:
         9a:45:c9:3d:70:9c:63:74:cb:c8:8f:6c:7d:51:e8:ea:8b:ab:
         24:aa:8b:90:81:b6:fe:39:71:c9:d5:48:a0:0c:8c:ae:8f:54:
         9b:ab:db:62:ac:b3:69:33:93:c6:d3:df:7c:32:80:62:67:76:
         a7:b2:8b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org