Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/323830343a356237633a3a2f33332d3333203d3e20323638383438.roa
File:                     323830343a356237633a3a2f33332d3333203d3e20323638383438.roa (raw, json)
Hash identifier:          e4Tj4FhrBWRBIQCP/Pga0OMNG8oEI1guXgEVLCwIlug=
Subject key identifier:   F3:57:2F:A6:E7:70:B9:15:4E:5D:84:0A:68:2B:A1:93:3D:2D:27:8F
Certificate issuer:       /CN=331A86B1CFCE5CD752521AD91A88036C23D00242
Certificate serial:       316025ED2E0D225FBBF333E82FAB63ADDE444EF4
Authority key identifier: 33:1A:86:B1:CF:CE:5C:D7:52:52:1A:D9:1A:88:03:6C:23:D0:02:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/331A86B1CFCE5CD752521AD91A88036C23D00242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/323830343a356237633a3a2f33332d3333203d3e20323638383438.roa
Signing time:             Thu 14 Sep 2023 16:00:00 +0000
ROA not before:           Thu 14 Sep 2023 15:55:00 +0000
ROA not after:            Thu 12 Sep 2024 16:00:00 +0000
asID:                     268848
IP address blocks:        2804:5b7c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:60:25:ed:2e:0d:22:5f:bb:f3:33:e8:2f:ab:63:ad:de:44:4e:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331A86B1CFCE5CD752521AD91A88036C23D00242
        Validity
            Not Before: Sep 14 15:55:00 2023 GMT
            Not After : Sep 12 16:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:07:1a:4c:d6:7c:20:7f:10:d7:8c:35:4b:e6:
                    c8:0a:c2:f8:9c:67:90:6b:6b:da:c3:c4:c1:20:39:
                    2f:f9:af:3f:60:bf:76:a8:d9:08:2c:a9:d1:12:43:
                    bd:43:c3:e5:d6:5f:28:ea:32:df:18:50:bc:b3:09:
                    8a:4c:c0:92:07:57:96:33:e2:af:d4:73:6f:4b:b0:
                    fa:92:39:ba:ea:bc:ae:af:8f:59:86:c0:c1:90:b7:
                    94:c6:5c:43:27:75:07:9d:13:75:54:25:05:67:02:
                    b4:96:8e:9e:bb:49:04:54:58:db:b5:c3:da:08:66:
                    6d:99:59:96:0e:2e:e0:d5:bd:ab:05:b1:ed:6b:dc:
                    71:13:bd:22:d1:56:72:6b:b1:12:d7:98:15:3e:de:
                    da:6f:45:32:82:b7:f5:1a:48:fc:3d:16:94:f6:64:
                    16:73:66:cd:eb:6e:54:99:e3:bf:0a:bb:31:8c:33:
                    37:8a:ab:e1:71:38:ac:e9:ce:8e:c4:ad:f1:44:9d:
                    ac:73:b3:99:e1:05:35:77:b2:f5:e6:87:3a:a8:5e:
                    7a:e8:e1:87:9f:72:41:ca:cd:a9:db:20:93:ca:83:
                    76:4e:81:c0:67:73:46:c5:54:68:40:e3:24:2a:99:
                    09:68:d6:eb:dc:c1:ff:1e:d7:86:12:85:da:64:91:
                    1d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:57:2F:A6:E7:70:B9:15:4E:5D:84:0A:68:2B:A1:93:3D:2D:27:8F
            X509v3 Authority Key Identifier:
                keyid:33:1A:86:B1:CF:CE:5C:D7:52:52:1A:D9:1A:88:03:6C:23:D0:02:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/331A86B1CFCE5CD752521AD91A88036C23D00242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/331A86B1CFCE5CD752521AD91A88036C23D00242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/323830343a356237633a3a2f33332d3333203d3e20323638383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b7c::/33

    Signature Algorithm: sha256WithRSAEncryption
         2a:d1:67:a2:82:7a:a0:e3:7c:20:fa:9a:a1:5b:18:40:7e:27:
         a4:41:ee:fd:ce:a3:4d:80:56:56:1a:2c:d7:48:25:e8:2f:90:
         3e:25:de:60:f7:4b:04:13:d2:3e:1d:3c:a8:2d:90:b8:4b:ec:
         60:68:3d:a8:4e:aa:1c:01:07:8c:64:34:de:10:88:c6:ed:d9:
         bc:28:ba:81:ef:d0:0d:5d:b0:18:99:b3:8f:c1:bc:0d:a1:76:
         20:56:10:67:1c:3c:66:f3:fd:80:2e:1b:d6:50:df:1c:e1:dc:
         7f:dd:48:46:ae:52:cb:87:f2:7a:f8:54:73:1e:e2:85:bc:37:
         c7:ee:87:1f:04:98:de:66:49:39:a5:9e:a4:15:57:08:41:76:
         aa:5d:96:d2:3e:20:27:8b:2a:f0:50:5d:9d:51:ec:2a:73:df:
         da:12:c4:1e:4c:76:6e:85:e7:9d:6d:49:b8:9c:7f:1d:a3:11:
         33:0b:08:36:8e:fd:49:bd:25:7a:12:40:48:38:46:b9:2a:0d:
         83:d6:bd:6a:7e:76:78:d4:47:34:8e:6b:29:c6:f6:f1:db:fd:
         b4:1a:55:36:8e:85:e5:bf:de:40:15:bd:05:91:12:16:65:73:
         a3:e1:85:28:bd:a2:35:27:67:07:f5:5b:8e:de:fb:91:22:b6:
         0b:76:8e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org