Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a313531303a383030303a3a2f33342d3334203d3e20323632343934.roa
File:                     323830343a313531303a383030303a3a2f33342d3334203d3e20323632343934.roa (raw, json)
Hash identifier:          tDvqaA+ankas4kUePANYH5SrZ0XhrEoneUn8vDh9t4M=
Subject key identifier:   55:9C:67:CA:FC:54:F0:79:20:7E:4E:4B:16:EB:5A:9A:D1:92:56:11
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       26BC09716781C699534A93EE927FBB2750684CFA
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a313531303a383030303a3a2f33342d3334203d3e20323632343934.roa
Signing time:             Tue 12 Sep 2023 14:26:14 +0000
ROA not before:           Tue 12 Sep 2023 14:21:14 +0000
ROA not after:            Thu 12 Sep 2024 14:26:14 +0000
asID:                     262494
IP address blocks:        2804:1510:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:bc:09:71:67:81:c6:99:53:4a:93:ee:92:7f:bb:27:50:68:4c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Sep 12 14:21:14 2023 GMT
            Not After : Sep 12 14:26:14 2024 GMT
        Subject: CN=3082010A0282010100E263090D75477B4B28D0FB8F070663214469C9E6E76F40CBF9C2E3D6DE6D9898DB2F0A99BB5AAE0744B20F8A8E70B6369DB2746B78529D72F25A8117819406DEBAA2FDD5531A4783D6BF287B44024EF9F626045AE48D912FC15E87B7E292D578D03878532FEBC9DF166DC4AEA92A76A889867DA1F9590853F25E8B9ABCA8629AD72B5F7419A1FFB646A931B7ABB11B50C8419446E4A1FBB2E39461252A60C1604A7C2BD17EA57FE85DE6C79CA22DC0E43B7F2C35103C78EF90D7A06A50FF2EFFB496DD1FD19A8A5E3FBFEBC0D2847A46F3B72AA30DB795DC48ACAD087DBAA83A3883A347F5ABF5E5D1745AF59D78E9D0C763426ED1628A37091D174495E169230203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:63:09:0d:75:47:7b:4b:28:d0:fb:8f:07:06:
                    63:21:44:69:c9:e6:e7:6f:40:cb:f9:c2:e3:d6:de:
                    6d:98:98:db:2f:0a:99:bb:5a:ae:07:44:b2:0f:8a:
                    8e:70:b6:36:9d:b2:74:6b:78:52:9d:72:f2:5a:81:
                    17:81:94:06:de:ba:a2:fd:d5:53:1a:47:83:d6:bf:
                    28:7b:44:02:4e:f9:f6:26:04:5a:e4:8d:91:2f:c1:
                    5e:87:b7:e2:92:d5:78:d0:38:78:53:2f:eb:c9:df:
                    16:6d:c4:ae:a9:2a:76:a8:89:86:7d:a1:f9:59:08:
                    53:f2:5e:8b:9a:bc:a8:62:9a:d7:2b:5f:74:19:a1:
                    ff:b6:46:a9:31:b7:ab:b1:1b:50:c8:41:94:46:e4:
                    a1:fb:b2:e3:94:61:25:2a:60:c1:60:4a:7c:2b:d1:
                    7e:a5:7f:e8:5d:e6:c7:9c:a2:2d:c0:e4:3b:7f:2c:
                    35:10:3c:78:ef:90:d7:a0:6a:50:ff:2e:ff:b4:96:
                    dd:1f:d1:9a:8a:5e:3f:bf:eb:c0:d2:84:7a:46:f3:
                    b7:2a:a3:0d:b7:95:dc:48:ac:ad:08:7d:ba:a8:3a:
                    38:83:a3:47:f5:ab:f5:e5:d1:74:5a:f5:9d:78:e9:
                    d0:c7:63:42:6e:d1:62:8a:37:09:1d:17:44:95:e1:
                    69:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:9C:67:CA:FC:54:F0:79:20:7E:4E:4B:16:EB:5A:9A:D1:92:56:11
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a313531303a383030303a3a2f33342d3334203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1510:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ab:74:9f:7a:9a:da:c7:19:e0:f8:43:f5:08:42:6d:e7:88:45:
         14:fd:44:ee:23:c1:a9:47:98:55:fa:c7:7a:0e:4a:87:b6:00:
         e1:45:93:e9:b9:74:4f:d2:c6:a3:2d:ea:47:25:54:99:b5:4e:
         b3:40:60:91:69:7c:8d:8e:0d:2f:ee:32:f9:84:1d:18:a6:09:
         e3:53:ed:65:67:3b:3b:f0:1b:b6:5f:dc:d7:46:2b:7a:c9:99:
         73:d5:ae:94:aa:fa:10:9b:1c:14:77:e8:d3:9e:be:0b:fd:9a:
         78:12:22:08:5f:94:20:5f:9c:27:ca:8f:c1:32:80:eb:db:68:
         fd:ac:2f:1e:38:3f:22:d3:7e:61:59:0c:69:52:a1:01:92:03:
         bc:bb:7e:1f:66:eb:18:5e:40:f7:49:33:58:35:67:79:cb:64:
         5d:90:fc:7a:ca:3d:7c:30:bb:0e:e1:ea:68:47:57:e1:71:63:
         1e:43:c5:97:91:8b:d1:7d:f9:f6:bf:69:c4:32:79:96:3e:79:
         f0:f8:bd:2c:c1:d7:9e:ff:e5:c5:38:f3:cb:99:d1:14:d1:7e:
         a4:a3:d2:d1:70:75:13:e9:d6:6e:ac:3c:35:22:3a:1e:a6:29:
         9e:2c:04:14:de:8d:5b:88:74:94:df:9e:57:f4:44:8f:7b:64:
         df:d5:28:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org