Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/323830343a346235633a383030303a3a2f33342d3334203d3e20323637333031.roa
File:                     323830343a346235633a383030303a3a2f33342d3334203d3e20323637333031.roa (raw, json)
Hash identifier:          N8kwA9gmOTqYj1udygMVlTJeAHjClMHKDe/mTex3iwE=
Subject key identifier:   E5:CF:45:B6:70:AA:89:B7:8B:72:D7:89:D6:FD:57:AF:5C:93:86:23
Certificate issuer:       /CN=194101A33D960E2E468EFE8D2E2E701E8A073261
Certificate serial:       71A1947BAB8FA28BB52B00B6CA16EB7EA55B5FEF
Authority key identifier: 19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/323830343a346235633a383030303a3a2f33342d3334203d3e20323637333031.roa
Signing time:             Mon 15 May 2023 21:02:06 +0000
ROA not before:           Mon 15 May 2023 20:57:06 +0000
ROA not after:            Mon 13 May 2024 21:02:06 +0000
asID:                     267301
IP address blocks:        2804:4b5c:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a1:94:7b:ab:8f:a2:8b:b5:2b:00:b6:ca:16:eb:7e:a5:5b:5f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194101A33D960E2E468EFE8D2E2E701E8A073261
        Validity
            Not Before: May 15 20:57:06 2023 GMT
            Not After : May 13 21:02:06 2024 GMT
        Subject: CN=E5CF45B670AA89B78B72D789D6FD57AF5C938623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:78:9a:a1:da:74:ac:87:fc:46:7d:ac:5c:bf:
                    cb:1a:15:c7:4f:dd:4e:5a:23:83:11:21:4b:8c:be:
                    07:3f:48:a6:1e:2f:25:91:7b:66:20:67:5b:70:60:
                    93:7b:d0:8e:41:61:84:49:fd:b8:ca:df:97:9c:f2:
                    e1:69:1a:d6:1d:d0:51:ce:7b:7a:3c:0f:de:3f:00:
                    81:00:ba:c9:57:a8:0b:6d:3e:5c:d1:63:da:44:91:
                    50:15:b5:6c:7d:82:34:66:bd:5d:9f:61:9e:09:91:
                    88:a5:01:e6:84:09:46:bf:09:d0:01:20:3f:b7:59:
                    59:ba:fd:ce:bd:61:8a:9c:84:97:8d:a5:8c:b4:f4:
                    1e:70:37:d2:be:b2:4b:45:86:53:19:6d:c2:b2:00:
                    18:c9:5b:ae:74:38:d1:a2:8f:e4:c7:b0:40:f2:53:
                    77:9d:9f:86:e4:29:c3:32:ac:e6:ff:2f:b7:0f:e4:
                    db:98:e0:12:27:fc:07:30:13:a9:f0:63:ff:79:64:
                    9c:49:47:be:14:95:84:14:53:47:d4:e5:cb:b7:ce:
                    10:b0:d8:28:05:49:3e:78:dc:82:cd:8c:6b:c0:41:
                    a5:95:21:8e:b2:d4:a8:ad:73:62:a6:c5:91:35:b6:
                    4c:b6:50:b5:0b:77:ff:f1:cb:03:b4:45:0d:86:86:
                    56:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CF:45:B6:70:AA:89:B7:8B:72:D7:89:D6:FD:57:AF:5C:93:86:23
            X509v3 Authority Key Identifier:
                keyid:19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/194101A33D960E2E468EFE8D2E2E701E8A073261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/323830343a346235633a383030303a3a2f33342d3334203d3e20323637333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b5c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         60:59:8d:25:f2:7d:28:3f:63:02:ba:0b:a7:2f:1b:67:f9:a1:
         58:e1:8e:4c:09:9d:66:1b:cd:22:77:e2:52:62:8f:85:52:38:
         ac:8d:25:3c:6b:63:9f:ee:2c:f3:25:78:98:09:cd:74:40:11:
         9b:f6:80:8f:12:0f:ce:40:87:c3:37:0f:84:be:3e:ca:43:35:
         f4:bc:68:a1:de:60:6e:47:c8:df:64:1c:e5:f3:25:87:f3:e9:
         6a:66:54:e3:89:ea:b1:49:12:1e:8e:d5:d3:b5:51:65:d7:f7:
         da:36:26:a3:3a:94:61:dd:c6:6e:e9:10:14:fd:25:1a:00:5f:
         89:23:0f:a9:c1:68:84:aa:81:fd:02:0c:ee:01:54:99:5c:28:
         be:3e:78:1b:23:8c:4a:d5:5a:67:cb:32:c6:fc:fa:40:82:88:
         9d:0e:74:79:0e:dc:5b:b8:de:3f:fd:2f:a9:08:ce:26:e2:d1:
         69:91:25:1d:e3:15:e8:07:e7:a0:78:d1:86:b4:4c:01:8a:f8:
         d2:16:ad:63:f3:2a:18:cc:e9:1a:21:9f:52:ab:7c:05:11:fe:
         31:9d:82:51:0b:83:1f:c6:5e:61:4b:db:dc:86:68:4f:9b:30:
         cb:a5:8a:b3:bb:ae:d9:57:2d:35:36:27:de:66:d1:88:36:9e:
         11:22:e1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org