Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/323830313a62363a6330303a3a2f33382d3338203d3e20323633303833.roa
File:                     323830313a62363a6330303a3a2f33382d3338203d3e20323633303833.roa (raw, json)
Hash identifier:          6hryL8APuRjEaAjyz07DKZpHLK8mkV1vj6gE7yCG1M4=
Subject key identifier:   0A:0F:FE:96:65:EC:74:9F:09:F0:93:03:4A:75:9E:51:CF:14:19:50
Certificate issuer:       /CN=142F10DB203FAFE2CD170E5639DCA6B17B056BA3
Certificate serial:       68F796685440228AF88500BF4FEAA79CC52C2670
Authority key identifier: 14:2F:10:DB:20:3F:AF:E2:CD:17:0E:56:39:DC:A6:B1:7B:05:6B:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/142F10DB203FAFE2CD170E5639DCA6B17B056BA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/323830313a62363a6330303a3a2f33382d3338203d3e20323633303833.roa
Signing time:             Wed 25 Jan 2023 19:44:19 +0000
ROA not before:           Wed 25 Jan 2023 19:39:19 +0000
ROA not after:            Wed 24 Jan 2024 19:44:19 +0000
asID:                     263083
IP address blocks:        2801:b6:c00::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:f7:96:68:54:40:22:8a:f8:85:00:bf:4f:ea:a7:9c:c5:2c:26:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=142F10DB203FAFE2CD170E5639DCA6B17B056BA3
        Validity
            Not Before: Jan 25 19:39:19 2023 GMT
            Not After : Jan 24 19:44:19 2024 GMT
        Subject: CN=0A0FFE9665EC749F09F093034A759E51CF141950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a1:7d:41:aa:5a:57:4f:c2:e5:41:76:78:14:
                    c8:86:b6:61:d7:44:b7:d5:6a:0a:e3:94:ed:26:9b:
                    0f:5f:85:bc:13:a6:4a:95:27:bf:24:2b:27:bd:f8:
                    b3:ca:9d:ae:be:2b:b5:a2:e1:76:0b:83:74:2d:3d:
                    a3:9c:d4:9e:28:1e:d3:25:42:c7:ce:11:d1:6b:68:
                    a7:06:24:ee:4d:3f:4f:be:5d:1a:95:4b:01:c0:62:
                    2d:c2:f2:93:36:eb:e2:10:1c:a0:53:67:60:ed:1c:
                    e8:37:b0:c5:43:8b:63:10:33:af:dd:b0:eb:b2:0a:
                    31:35:13:74:4e:03:bd:7d:7c:2e:4c:16:ab:ad:c6:
                    e3:0e:4b:f9:70:9e:d4:17:ec:47:1b:80:2a:89:09:
                    f1:79:8d:85:fe:4f:66:06:7a:61:4c:bf:db:ac:3f:
                    76:34:62:2b:66:68:0f:67:e6:db:38:90:f3:fb:b9:
                    0b:63:95:f2:03:e4:14:7b:a5:23:06:bb:fb:55:3c:
                    2d:fe:90:d1:53:20:d1:c7:bb:60:c8:11:85:e6:34:
                    d2:75:9c:70:3b:f2:0a:98:82:ba:6a:ec:f2:4b:af:
                    16:50:e9:87:bb:9d:d8:5e:5b:95:f9:87:43:d1:f3:
                    79:39:8b:f6:83:0e:04:a7:6d:ec:e3:d6:32:19:73:
                    02:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0F:FE:96:65:EC:74:9F:09:F0:93:03:4A:75:9E:51:CF:14:19:50
            X509v3 Authority Key Identifier:
                keyid:14:2F:10:DB:20:3F:AF:E2:CD:17:0E:56:39:DC:A6:B1:7B:05:6B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/142F10DB203FAFE2CD170E5639DCA6B17B056BA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/142F10DB203FAFE2CD170E5639DCA6B17B056BA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/323830313a62363a6330303a3a2f33382d3338203d3e20323633303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:b6:c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         ae:3c:13:02:6e:b2:ce:82:4d:32:db:29:24:c2:e1:21:96:fd:
         53:b1:09:2e:e0:29:22:7e:ae:71:d3:fe:98:48:77:52:16:2b:
         3a:07:4b:75:59:24:19:f2:f9:0a:fa:32:ab:dc:c3:29:2f:96:
         4a:e8:25:06:34:98:14:95:ef:32:11:73:0f:91:6b:44:0c:2c:
         f4:64:5d:ac:86:03:75:df:cc:1b:b3:e5:d0:3d:a4:db:b4:f0:
         c1:75:d2:f2:9d:f2:88:21:38:9e:a6:87:ec:52:4b:a1:7b:2e:
         a2:19:c5:80:96:c4:14:74:6b:16:1d:32:d3:2e:e6:13:12:2d:
         49:6b:46:1f:7d:86:c4:ac:2b:ed:d9:50:f7:fc:aa:30:ab:5e:
         b5:3f:8d:b3:e4:85:6d:ba:6b:f0:23:c7:03:5d:d5:05:4b:62:
         8b:0d:72:e3:ba:22:03:30:0c:25:7e:34:ea:cf:a6:1f:be:42:
         53:20:8c:19:f5:f8:e1:12:39:87:4b:52:c1:07:c1:30:31:f3:
         94:f6:ea:46:38:01:25:a3:ce:fc:1c:5e:bd:41:da:8b:9a:b9:
         2d:58:9d:7e:bd:b9:98:cb:de:2c:fc:06:06:3c:8f:86:c7:7a:
         59:17:ff:32:c6:69:51:31:b0:8b:91:1c:7c:fc:53:9d:14:c5:
         98:43:3d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org