Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/323830343a346235633a633030303a3a2f33342d3334203d3e20323637333031.roa
File:                     323830343a346235633a633030303a3a2f33342d3334203d3e20323637333031.roa (raw, json)
Hash identifier:          BpKUvWdKWkKWmIg48I021klwsl4jgGJfIQ2fokEhBKs=
Subject key identifier:   0E:61:84:28:89:AC:66:56:01:34:7B:C2:51:08:D2:35:A0:7E:27:56
Certificate issuer:       /CN=194101A33D960E2E468EFE8D2E2E701E8A073261
Certificate serial:       1162592ECF699EF6BC47FE83F4C1D39D9EED1581
Authority key identifier: 19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/323830343a346235633a633030303a3a2f33342d3334203d3e20323637333031.roa
Signing time:             Mon 15 May 2023 21:02:08 +0000
ROA not before:           Mon 15 May 2023 20:57:08 +0000
ROA not after:            Mon 13 May 2024 21:02:08 +0000
asID:                     267301
IP address blocks:        2804:4b5c:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:62:59:2e:cf:69:9e:f6:bc:47:fe:83:f4:c1:d3:9d:9e:ed:15:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194101A33D960E2E468EFE8D2E2E701E8A073261
        Validity
            Not Before: May 15 20:57:08 2023 GMT
            Not After : May 13 21:02:08 2024 GMT
        Subject: CN=0E61842889AC665601347BC25108D235A07E2756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4e:90:3e:93:b0:2e:3b:ba:8c:68:f7:93:83:
                    7a:4d:d6:cf:a8:ab:04:90:9f:22:c6:83:f6:3e:f4:
                    0c:47:75:51:44:5f:b7:e7:48:4f:16:4b:bf:c3:fe:
                    30:c9:cb:e5:9e:8b:2d:e1:dd:a0:70:3c:38:c0:2a:
                    81:67:62:a7:9a:80:87:fb:ec:77:66:d2:e1:03:cd:
                    a2:fe:c3:8c:6e:d3:eb:31:bf:f4:de:98:ed:ca:75:
                    6d:2a:93:bd:37:cf:e8:f2:97:fe:06:5a:a3:89:2e:
                    51:cf:4e:0f:96:f1:c7:39:4c:1b:80:a9:53:a7:eb:
                    80:5d:4c:90:f7:d3:93:42:e4:dc:65:34:37:73:78:
                    a0:27:0f:ae:92:ff:5d:d0:13:02:93:ca:ad:84:85:
                    75:e3:c7:fb:ac:b4:7f:fb:56:40:10:c7:42:8c:01:
                    60:b6:d9:c4:25:68:09:25:4a:0d:1b:7a:ab:c6:70:
                    39:6a:35:62:b9:bf:93:2a:64:72:d1:7d:a4:96:4c:
                    f3:b9:97:31:5e:cb:6b:08:7c:75:48:29:48:e9:dd:
                    2f:8e:a6:2c:09:d5:2b:5b:03:25:ba:0f:9c:e4:49:
                    37:d0:1d:67:3b:30:ec:08:97:65:63:64:72:78:2e:
                    05:d2:29:e0:fe:b0:97:b4:48:b4:ca:3f:cc:c5:54:
                    f9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:61:84:28:89:AC:66:56:01:34:7B:C2:51:08:D2:35:A0:7E:27:56
            X509v3 Authority Key Identifier:
                keyid:19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/194101A33D960E2E468EFE8D2E2E701E8A073261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/323830343a346235633a633030303a3a2f33342d3334203d3e20323637333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b5c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         58:bd:f6:af:c0:65:61:3f:db:ab:dd:1f:9c:fe:02:d0:36:ad:
         cf:54:22:dd:a6:1b:bd:8e:3c:5d:f7:9f:fb:df:e4:91:d7:a4:
         d8:ef:b0:4b:8d:b5:5f:99:89:67:ba:65:36:ff:98:4b:20:bd:
         24:ff:37:1a:60:c6:12:51:66:70:6e:eb:5d:86:10:75:dc:16:
         45:0a:47:94:5c:06:18:de:b2:25:ee:a9:8d:d8:75:70:b8:ee:
         27:46:af:b3:3f:26:af:94:0f:a6:10:8c:38:6b:4f:85:ca:a8:
         78:82:81:53:ad:2b:85:44:bc:f8:a4:90:49:8d:63:64:92:08:
         1a:9b:24:ca:67:74:d9:5b:91:ca:c1:d0:32:02:51:dc:12:9e:
         9f:02:8e:86:10:26:82:6e:a4:ff:ac:e5:dc:52:29:f7:75:b5:
         97:ce:aa:59:d9:42:9c:6c:80:ba:d0:fa:87:de:8a:e6:80:44:
         00:cd:9d:75:0f:64:88:6e:94:29:b3:e1:b8:63:e5:ac:28:1c:
         05:a4:c3:a0:57:4c:64:24:1a:c4:0a:ec:41:39:62:cd:4f:c1:
         6e:db:45:e3:51:86:a6:44:c2:71:57:b7:ac:f8:d8:59:a4:dc:
         13:60:61:c1:69:0c:ce:e1:55:17:56:da:4b:7f:9b:0b:7a:5c:
         fe:89:b4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org