Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/1/323830343a343463633a3a2f33322d3335203d3e20323637363534.roa
File:                     323830343a343463633a3a2f33322d3335203d3e20323637363534.roa (raw, json)
Hash identifier:          RpGT6dYQnsJ175S+V0LuM7wurXMpCwDEfcXDUwmX4Hg=
Subject key identifier:   51:1A:2E:99:EE:24:A0:06:CA:10:11:27:30:33:89:C8:73:0E:C1:7F
Certificate issuer:       /CN=9E11B7426A8445D56C5FD41BEF6DE1638454BED0
Certificate serial:       266773ADDCE434D66E0B04828974BD3846678C4C
Authority key identifier: 9E:11:B7:42:6A:84:45:D5:6C:5F:D4:1B:EF:6D:E1:63:84:54:BE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E11B7426A8445D56C5FD41BEF6DE1638454BED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/1/323830343a343463633a3a2f33322d3335203d3e20323637363534.roa
Signing time:             Tue 06 Feb 2024 05:07:08 +0000
ROA not before:           Tue 06 Feb 2024 05:02:08 +0000
ROA not after:            Tue 04 Feb 2025 05:07:08 +0000
asID:                     267654
IP address blocks:        2804:44cc::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:67:73:ad:dc:e4:34:d6:6e:0b:04:82:89:74:bd:38:46:67:8c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E11B7426A8445D56C5FD41BEF6DE1638454BED0
        Validity
            Not Before: Feb  6 05:02:08 2024 GMT
            Not After : Feb  4 05:07:08 2025 GMT
        Subject: CN=511A2E99EE24A006CA101127303389C8730EC17F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bf:54:ac:f2:a4:ac:99:a9:79:9a:7a:ae:cb:
                    fc:18:38:75:5f:36:20:1c:2c:22:ad:0b:ac:e1:e2:
                    4a:e3:84:88:68:de:42:36:c0:4b:80:ee:60:9c:dc:
                    70:ee:00:3c:40:23:9a:f8:eb:2c:d1:26:76:a5:cb:
                    47:a1:16:f1:29:49:ef:f7:ca:77:2b:2d:b8:f7:fe:
                    3c:50:c0:f1:3f:a6:e7:16:76:75:59:08:c1:ce:26:
                    8c:b5:64:a2:eb:67:80:91:80:de:10:4e:aa:1a:9d:
                    4a:e8:80:7a:58:d3:fb:0d:7e:e5:82:10:1e:75:f5:
                    c4:95:62:68:2e:41:47:bd:5e:c1:5a:a4:e2:6f:7d:
                    d9:e7:a8:23:b0:bd:bd:db:1c:cc:9d:b3:81:d8:ad:
                    99:b7:11:c3:40:25:24:3d:cc:e1:34:f8:36:54:f1:
                    4f:fa:21:dd:05:78:ef:50:3f:b1:0a:d4:ed:5e:47:
                    ed:00:f3:2b:1e:e1:be:72:61:68:c0:77:88:5e:70:
                    04:1e:c3:27:b7:a5:f1:56:c3:5d:af:b1:0b:7e:17:
                    14:ab:31:4b:02:b0:49:a1:fb:87:0f:35:75:36:bb:
                    1e:e4:22:35:1c:38:b7:80:8a:4a:05:90:66:de:3f:
                    b1:7c:97:8d:f7:c9:31:94:65:b6:00:1c:a4:05:d0:
                    d7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1A:2E:99:EE:24:A0:06:CA:10:11:27:30:33:89:C8:73:0E:C1:7F
            X509v3 Authority Key Identifier:
                keyid:9E:11:B7:42:6A:84:45:D5:6C:5F:D4:1B:EF:6D:E1:63:84:54:BE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/1/9E11B7426A8445D56C5FD41BEF6DE1638454BED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E11B7426A8445D56C5FD41BEF6DE1638454BED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/1/323830343a343463633a3a2f33322d3335203d3e20323637363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:44cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:5c:7a:08:9e:d1:79:1d:e9:4c:81:45:f1:d7:17:fc:2e:37:
         f6:3e:40:de:be:d6:30:2c:42:7e:bb:85:0d:4e:b3:80:7a:08:
         b5:b4:d3:b4:3b:96:34:9f:4b:87:03:10:47:7b:f5:1c:c4:e3:
         21:2b:fe:ec:d3:8b:ce:87:db:a9:6f:2c:b8:e8:a0:6f:ea:e1:
         e1:82:10:d2:00:c5:77:cf:91:b9:aa:fb:0d:cd:0a:e7:84:4e:
         1e:ea:30:6f:0e:69:8d:4e:23:b9:ad:80:c5:db:9f:20:87:98:
         3b:72:2a:24:4a:9a:93:7a:b7:2c:03:1e:1e:96:34:e1:2d:6f:
         9a:48:cf:2d:85:dd:7b:10:a9:2d:e2:79:aa:9e:9f:49:68:69:
         38:3f:c1:c5:ca:f3:0f:a9:9a:0f:26:5c:a7:42:34:5a:6e:ec:
         13:03:d4:98:99:bd:3e:9b:c5:d4:94:13:ce:41:31:3b:09:92:
         d9:62:e1:d4:94:fc:76:e4:bb:f1:4d:ee:bd:0a:11:fe:21:95:
         82:e1:6c:75:c9:b3:f3:c6:4b:79:32:e0:d1:11:72:5a:c5:ae:
         f6:1f:dd:85:c1:cb:bc:25:df:1a:5d:ff:02:87:15:e8:92:69:
         a4:aa:6f:36:02:35:6a:23:68:6e:90:be:ea:fd:55:5f:83:b4:
         92:c2:22:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org