Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/323830343a363538303a3a2f33322d3332203d3e20323639343935.roa
File:                     323830343a363538303a3a2f33322d3332203d3e20323639343935.roa (raw, json)
Hash identifier:          xdDIG2Pc7MNH3v8n5qWl2kUjQhT2ECGVQNVyUv01HW0=
Subject key identifier:   66:38:8C:92:E5:95:CD:2C:67:01:EE:57:A4:FB:DD:7F:64:46:AC:79
Certificate issuer:       /CN=9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB
Certificate serial:       3303CD96623A1134441F4BD934E414CED3A10E62
Authority key identifier: 9F:E3:B7:F3:F1:B2:F9:BC:01:D0:2D:F1:2E:5D:31:AA:14:E0:60:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/323830343a363538303a3a2f33322d3332203d3e20323639343935.roa
Signing time:             Tue 11 Jul 2023 15:19:23 +0000
ROA not before:           Tue 11 Jul 2023 15:14:23 +0000
ROA not after:            Tue 09 Jul 2024 15:19:23 +0000
asID:                     269495
IP address blocks:        2804:6580::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:03:cd:96:62:3a:11:34:44:1f:4b:d9:34:e4:14:ce:d3:a1:0e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB
        Validity
            Not Before: Jul 11 15:14:23 2023 GMT
            Not After : Jul  9 15:19:23 2024 GMT
        Subject: CN=66388C92E595CD2C6701EE57A4FBDD7F6446AC79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:83:28:28:ef:bf:58:ec:b8:61:1e:38:1d:27:
                    20:26:e0:3b:b4:af:46:cd:0f:0d:1e:83:dd:52:34:
                    ff:3a:ef:a8:44:0d:94:08:ee:ca:5e:af:12:66:4b:
                    4c:54:b7:c1:4a:44:7f:1a:e5:c2:2d:fe:5c:62:ca:
                    98:d4:99:5b:91:48:03:b6:bd:36:d1:75:b4:5c:fa:
                    98:92:58:0c:01:36:16:c4:59:0b:76:cd:3f:16:9d:
                    d8:fb:79:83:f6:3c:7c:87:f0:e8:96:70:8b:d4:ce:
                    cc:60:89:23:2b:8f:60:24:51:3f:34:d3:87:ee:79:
                    fd:ba:3f:cd:6a:7b:56:e0:c7:7e:ee:2f:50:fd:a3:
                    0a:2e:ff:30:33:af:33:21:b8:76:19:a3:de:37:d1:
                    74:ca:74:72:82:b8:3d:79:1b:04:50:c6:71:7c:65:
                    e0:e1:4e:d9:e6:73:5b:b2:88:21:d7:84:1c:b9:78:
                    0d:f6:a7:d7:09:af:c4:01:c8:63:49:80:b1:e2:d9:
                    22:63:86:95:aa:82:53:33:c3:2b:ce:c7:01:6b:a7:
                    61:1b:ff:52:48:d6:c2:a6:14:2b:e5:c3:09:74:35:
                    54:27:76:c7:8b:1f:a8:3e:70:74:1c:a6:02:86:61:
                    ef:34:42:60:a2:10:45:64:1a:b6:b3:27:8a:58:49:
                    35:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:38:8C:92:E5:95:CD:2C:67:01:EE:57:A4:FB:DD:7F:64:46:AC:79
            X509v3 Authority Key Identifier:
                keyid:9F:E3:B7:F3:F1:B2:F9:BC:01:D0:2D:F1:2E:5D:31:AA:14:E0:60:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/323830343a363538303a3a2f33322d3332203d3e20323639343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6580::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:25:4b:c8:1a:4b:5e:37:43:47:53:a6:e4:8b:d4:61:59:02:
         d7:fe:98:b2:0e:f5:69:fc:4d:e7:36:8d:cd:09:24:de:94:b6:
         f5:29:42:93:3a:c4:8a:1d:64:f9:47:81:f7:39:a6:2e:67:d9:
         f2:9d:d4:c7:95:10:c3:49:90:97:52:33:f9:e8:47:87:f5:17:
         0a:fd:6b:89:65:a0:0f:30:32:9c:03:90:35:f2:db:fb:2f:3d:
         33:de:5e:35:68:a7:27:cb:4b:9f:2e:dd:48:be:ba:4a:aa:f7:
         ea:70:c0:b2:fb:4b:6a:43:88:70:76:37:d7:67:e2:1c:27:5c:
         a0:ae:2a:fc:10:04:12:a0:65:79:f5:aa:b4:33:94:11:fb:97:
         9a:d2:54:38:ad:07:d9:ec:41:99:02:5f:6c:ae:76:11:0f:95:
         14:63:95:8b:96:8c:17:8a:b6:58:bc:bb:34:3e:88:86:ee:87:
         1c:1e:2a:fa:c9:55:ab:51:71:58:12:b5:8a:1f:2b:bf:fb:25:
         6f:b0:a7:40:60:c2:50:d2:a4:55:b8:8b:77:d5:4a:55:62:0d:
         95:08:28:9b:53:75:e9:cf:1b:8b:2f:14:a2:35:63:43:b2:be:
         74:d6:49:ce:26:c6:05:71:dd:d0:06:dc:51:a6:a8:e2:e0:20:
         17:9c:ad:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org