Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/323830343a323161633a3a2f33322d3333203d3e20323634353636.roa
File:                     323830343a323161633a3a2f33322d3333203d3e20323634353636.roa (raw, json)
Hash identifier:          d12m9vGWRdknCGteWBrr5LLGT2kFjSONWOd4wNEtAxg=
Subject key identifier:   EC:05:5B:42:88:40:66:1D:AB:DB:CF:52:C9:4F:D7:71:47:60:ED:CB
Certificate issuer:       /CN=A7BB17D8884EB9010E78DFDCBDB6B0E9EA543A3D
Certificate serial:       5110562C297B68D2847F46E942772764913AB382
Authority key identifier: A7:BB:17:D8:88:4E:B9:01:0E:78:DF:DC:BD:B6:B0:E9:EA:54:3A:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7BB17D8884EB9010E78DFDCBDB6B0E9EA543A3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/323830343a323161633a3a2f33322d3333203d3e20323634353636.roa
Signing time:             Mon 11 Sep 2023 19:42:57 +0000
ROA not before:           Mon 11 Sep 2023 19:37:57 +0000
ROA not after:            Mon 09 Sep 2024 19:42:57 +0000
asID:                     264566
IP address blocks:        2804:21ac::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:10:56:2c:29:7b:68:d2:84:7f:46:e9:42:77:27:64:91:3a:b3:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7BB17D8884EB9010E78DFDCBDB6B0E9EA543A3D
        Validity
            Not Before: Sep 11 19:37:57 2023 GMT
            Not After : Sep  9 19:42:57 2024 GMT
        Subject: CN=EC055B428840661DABDBCF52C94FD7714760EDCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b9:ea:de:a9:b5:7a:14:96:84:16:d0:f5:ed:
                    8e:e4:84:41:25:e0:00:9b:66:a3:dd:70:b4:69:bd:
                    8b:11:bc:f7:3f:a8:c1:09:f9:45:20:d7:06:6f:01:
                    f3:68:21:00:e9:ce:77:19:1e:d2:ac:07:18:df:ce:
                    84:5b:9e:02:ea:60:ce:2b:b8:f9:d0:b5:56:5a:db:
                    4c:2e:24:31:41:30:a0:10:c4:6b:40:be:4c:7d:75:
                    7e:c0:af:9a:99:99:98:b2:9b:82:9f:2c:84:36:45:
                    d0:c7:2c:57:e4:cc:8f:8a:07:59:9b:44:a7:5c:90:
                    75:48:cc:cf:d7:51:25:d3:50:38:61:ec:0a:7f:f6:
                    ff:78:4b:f0:b3:c5:88:12:f6:44:85:1b:0d:30:d4:
                    ae:d6:34:56:5e:70:49:ae:1c:e2:b8:71:4d:db:eb:
                    2d:3a:ea:97:db:24:57:19:b7:9e:e1:b8:5b:e6:69:
                    9d:cd:a0:5f:de:ea:d0:85:fe:90:62:6e:67:a3:e3:
                    16:90:71:d8:cf:cc:fc:44:56:09:0b:3d:b4:f0:82:
                    3e:ce:bc:31:e7:8c:92:56:c0:01:d9:f8:6c:14:94:
                    43:95:37:f3:cd:ab:16:28:2d:fb:bb:47:ec:23:62:
                    54:2f:32:da:5a:56:69:dc:42:d1:e1:9f:fe:2b:1d:
                    53:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:05:5B:42:88:40:66:1D:AB:DB:CF:52:C9:4F:D7:71:47:60:ED:CB
            X509v3 Authority Key Identifier:
                keyid:A7:BB:17:D8:88:4E:B9:01:0E:78:DF:DC:BD:B6:B0:E9:EA:54:3A:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/A7BB17D8884EB9010E78DFDCBDB6B0E9EA543A3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7BB17D8884EB9010E78DFDCBDB6B0E9EA543A3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/323830343a323161633a3a2f33322d3333203d3e20323634353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:0d:1a:34:19:d3:10:27:49:38:3a:bc:d4:47:0f:aa:86:7d:
         03:60:23:05:a7:b2:fc:1a:8e:ce:af:85:4f:86:8f:0a:68:d6:
         4a:3e:94:ae:58:55:05:7c:fd:66:68:4b:85:1a:cf:7c:17:d1:
         46:9a:fa:32:c4:7a:ad:9b:9e:69:44:98:a6:90:96:67:a4:9f:
         7f:2f:26:b1:11:1b:68:c0:10:5c:f0:0f:31:1b:b7:8a:f3:1d:
         d2:0d:55:b8:32:75:9a:11:a3:f6:e7:f7:bf:21:00:c2:ae:70:
         3f:92:fe:76:4b:54:e7:f3:10:b0:02:0b:3b:57:3d:36:fa:b8:
         8f:f4:8c:e7:12:bd:e1:75:c6:fe:7c:28:5b:fb:e5:63:57:c2:
         fb:fd:13:41:a9:1a:fa:6c:56:05:59:24:72:ca:91:4e:82:65:
         84:14:0c:af:04:7e:51:7e:58:06:72:a5:9e:86:0f:2f:5d:5e:
         2f:3a:45:18:44:4e:fa:0c:5e:c3:82:04:dc:4b:03:da:83:2a:
         be:89:c3:10:82:0c:a3:c4:0f:4b:d7:b8:de:2a:71:66:ac:47:
         09:8b:d7:00:7d:28:a0:c9:6e:0e:23:15:cb:74:dc:cc:df:4d:
         a7:7b:aa:be:5c:b3:85:e8:e7:aa:55:0a:f8:9c:87:93:97:5d:
         58:f5:8e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org