Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a3130313a3a2f34382d3438203d3e20323731343636.roa
File:                     323830343a376266383a3130313a3a2f34382d3438203d3e20323731343636.roa (raw, json)
Hash identifier:          tajSzZw48jHZZrZSBfNROGn8QBMGO23IL/pAqSNv0NQ=
Subject key identifier:   DC:07:EA:39:46:23:55:E5:54:D4:85:29:56:21:BF:DB:09:89:0C:08
Certificate issuer:       /CN=9C70B4472C9D58109895B5DC4990D4CDEA5A5723
Certificate serial:       5F27F9383ABFD8A084D1E385CCE39E6470A305DE
Authority key identifier: 9C:70:B4:47:2C:9D:58:10:98:95:B5:DC:49:90:D4:CD:EA:5A:57:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C70B4472C9D58109895B5DC4990D4CDEA5A5723.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a3130313a3a2f34382d3438203d3e20323731343636.roa
Signing time:             Sun 29 Oct 2023 23:35:31 +0000
ROA not before:           Sun 29 Oct 2023 23:30:31 +0000
ROA not after:            Sun 27 Oct 2024 23:35:31 +0000
asID:                     271466
IP address blocks:        2804:7bf8:101::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:27:f9:38:3a:bf:d8:a0:84:d1:e3:85:cc:e3:9e:64:70:a3:05:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C70B4472C9D58109895B5DC4990D4CDEA5A5723
        Validity
            Not Before: Oct 29 23:30:31 2023 GMT
            Not After : Oct 27 23:35:31 2024 GMT
        Subject: CN=DC07EA39462355E554D485295621BFDB09890C08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:aa:1e:f1:3e:e4:ca:81:18:d2:c5:ec:35:23:
                    5f:08:d4:4a:20:f5:07:3a:55:d9:4a:a2:b7:4a:3d:
                    b6:6a:59:d5:f6:fb:3c:48:26:c0:e1:a5:3e:e6:a6:
                    95:88:7c:cf:50:fe:4b:b2:05:49:f4:ce:2d:4d:0a:
                    f2:6b:46:3d:8b:53:f0:c3:1f:a5:60:88:36:25:8d:
                    5c:83:ef:78:a9:8b:16:7b:0f:82:65:36:b2:ab:ad:
                    22:e6:dc:34:fc:c7:3a:e0:3a:92:b4:0b:cd:66:91:
                    b5:54:10:dc:80:73:fc:02:64:29:67:6f:24:76:d9:
                    94:3a:7f:6f:ef:28:ba:00:5f:50:10:cc:53:99:33:
                    e0:11:94:d1:64:d1:c3:0a:4c:c3:80:a2:8a:f9:e8:
                    a2:2f:70:63:ef:b9:41:47:9c:16:f3:73:ea:03:d3:
                    b0:2e:bc:11:ec:30:0b:fc:ce:d4:da:22:14:d4:da:
                    42:83:50:ff:37:12:bc:0e:e3:6d:97:e7:2c:8b:b7:
                    b3:73:8d:e8:38:af:68:fd:18:54:f3:a2:e5:b5:21:
                    da:5a:dd:6f:8d:de:56:26:29:fa:65:fd:be:66:66:
                    89:c2:38:b7:69:48:13:40:fd:52:2c:12:ce:ee:ec:
                    66:c1:19:09:a5:a6:c0:19:f1:61:38:ae:6b:9e:89:
                    5c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:07:EA:39:46:23:55:E5:54:D4:85:29:56:21:BF:DB:09:89:0C:08
            X509v3 Authority Key Identifier:
                keyid:9C:70:B4:47:2C:9D:58:10:98:95:B5:DC:49:90:D4:CD:EA:5A:57:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/9C70B4472C9D58109895B5DC4990D4CDEA5A5723.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C70B4472C9D58109895B5DC4990D4CDEA5A5723.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a3130313a3a2f34382d3438203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bf8:101::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:f3:31:f8:08:42:7b:04:71:b4:50:90:73:1b:e3:7a:5b:cb:
         79:4d:46:c7:1e:04:0d:2e:ac:82:c9:ea:f3:38:7b:60:b1:6e:
         53:80:04:ff:aa:21:be:cd:7b:c9:d4:c9:3c:03:e5:bc:f9:b3:
         a3:9e:ff:89:24:d0:be:0a:ae:e0:d4:de:6b:54:ff:ad:c6:83:
         a2:91:47:5d:92:76:9b:a8:2c:33:0f:a9:c1:a8:6f:da:41:a4:
         ed:38:82:a8:1e:d7:f6:e5:31:56:36:26:54:b8:d8:2f:09:2c:
         8a:6c:d9:53:ff:94:00:e0:8a:1d:01:54:52:9e:d4:2b:cd:51:
         cb:6b:39:07:42:1c:fd:8e:d7:05:be:fb:45:43:0c:98:88:16:
         35:c2:5d:dc:04:28:6d:c7:7c:29:ca:03:aa:2b:04:c9:28:bf:
         c6:4e:dc:8b:ee:cb:a6:f2:dc:36:9c:76:70:e2:36:5b:a3:ed:
         1c:94:55:a6:1c:b5:d9:42:c1:da:89:ba:cc:29:2e:8e:45:69:
         5b:08:77:04:d4:61:58:85:22:23:f5:31:07:d0:d0:45:a9:2f:
         a6:28:57:05:52:58:86:a1:19:15:66:f0:97:e6:54:f1:ff:0b:
         35:e0:01:12:7b:89:2c:65:51:29:9f:58:e4:fe:bf:fe:12:8e:
         6d:ff:f4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org