Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/323830343a356562383a3a2f33332d3333203d3e20323632383636.roa
File:                     323830343a356562383a3a2f33332d3333203d3e20323632383636.roa (raw, json)
Hash identifier:          WHCCESropksf1oT9JiCqoS9eCWgfPX6+yqgwOMJA4Mc=
Subject key identifier:   B9:05:4D:A6:FD:6B:D5:2D:0E:96:6C:4E:7D:F1:F4:8C:31:1B:83:E3
Certificate issuer:       /CN=E1420DF098810B8B6F41BD0334D08AD27E0BDC1C
Certificate serial:       4B9E10465522EA3FA80D97BE89D18D4052D49DEC
Authority key identifier: E1:42:0D:F0:98:81:0B:8B:6F:41:BD:03:34:D0:8A:D2:7E:0B:DC:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/323830343a356562383a3a2f33332d3333203d3e20323632383636.roa
Signing time:             Fri 12 Jan 2024 18:11:19 +0000
ROA not before:           Fri 12 Jan 2024 18:06:19 +0000
ROA not after:            Fri 10 Jan 2025 18:11:19 +0000
asID:                     262866
IP address blocks:        2804:5eb8::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:9e:10:46:55:22:ea:3f:a8:0d:97:be:89:d1:8d:40:52:d4:9d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1420DF098810B8B6F41BD0334D08AD27E0BDC1C
        Validity
            Not Before: Jan 12 18:06:19 2024 GMT
            Not After : Jan 10 18:11:19 2025 GMT
        Subject: CN=B9054DA6FD6BD52D0E966C4E7DF1F48C311B83E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5a:a4:b1:25:1c:c7:3e:11:33:34:6e:9f:a1:
                    c7:00:6a:64:bb:9a:65:62:be:4c:4c:60:82:29:24:
                    19:a8:f0:e6:41:50:62:73:02:04:38:97:b4:bc:b2:
                    4f:46:df:d2:34:fe:e4:d2:c5:ae:21:af:19:c3:08:
                    c2:df:c7:2e:f0:08:8d:2c:69:15:db:f2:9d:cd:3d:
                    73:c4:99:83:08:fd:89:ac:49:95:36:e4:4a:52:d0:
                    aa:f7:7b:2f:91:6f:01:22:bd:87:31:b7:1f:25:f1:
                    5c:21:7a:e4:46:98:54:16:81:48:da:75:78:b8:c5:
                    e7:8a:bf:ea:c2:75:7f:8b:2e:4f:21:c9:34:d5:d6:
                    2a:16:87:c6:05:31:0c:07:e0:45:da:18:8e:6c:a1:
                    8e:cc:f5:f0:54:8c:06:38:e4:eb:52:02:bf:b7:dc:
                    cf:6e:2d:c7:40:d4:44:ed:48:f3:11:26:86:4f:86:
                    be:60:c4:ba:de:f7:c8:31:13:cf:55:e2:28:9d:da:
                    a2:46:62:ac:ca:f3:0d:ca:a3:8e:8f:7f:79:76:42:
                    06:b1:0e:86:ab:18:da:69:54:bc:32:46:27:58:03:
                    99:88:54:bb:f1:49:12:28:b8:38:a4:c8:52:84:0a:
                    78:d9:fe:72:5f:ec:1e:16:cd:45:c1:09:54:de:aa:
                    2f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:05:4D:A6:FD:6B:D5:2D:0E:96:6C:4E:7D:F1:F4:8C:31:1B:83:E3
            X509v3 Authority Key Identifier:
                keyid:E1:42:0D:F0:98:81:0B:8B:6F:41:BD:03:34:D0:8A:D2:7E:0B:DC:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/323830343a356562383a3a2f33332d3333203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5eb8::/33

    Signature Algorithm: sha256WithRSAEncryption
         41:8b:62:63:5f:c3:d6:27:88:85:b3:ff:99:27:c7:28:ba:6e:
         bb:44:98:0b:7d:45:6c:3e:73:bb:9d:ba:13:b8:5a:3c:63:8f:
         bf:69:33:48:c6:47:4c:b9:b0:8f:e6:85:3e:70:29:96:95:3e:
         83:9e:62:b9:5e:d3:d3:ff:73:86:c3:84:e6:c7:52:a4:1b:cf:
         46:f9:ba:ed:1d:af:d8:a1:06:7a:0c:f1:b5:e8:6c:e6:54:7b:
         57:5d:6c:ab:34:e6:34:de:fb:44:48:45:e6:65:a9:4a:00:2e:
         a8:43:62:24:88:c5:e0:23:9d:e2:a7:80:0e:51:61:6f:68:ea:
         5d:fd:8f:56:f7:93:d4:43:61:b1:37:fc:e4:f4:a5:79:68:6f:
         d7:77:4b:b1:f3:95:3f:4b:65:d7:45:68:d3:b3:e3:2a:17:b9:
         de:1f:2f:bf:ff:95:1b:3f:30:f3:81:ef:f6:46:c7:db:d2:f9:
         ef:c4:c2:ec:42:54:83:80:63:f5:9d:cd:04:ac:fd:08:f8:69:
         9b:44:b9:d9:bc:78:d8:36:9a:bd:23:f2:35:24:c4:db:18:94:
         8e:29:5e:9f:84:4a:a0:bd:21:1a:73:c5:ea:45:b6:ed:9b:85:
         0b:b2:49:be:26:ab:ae:63:30:a2:64:ef:fd:a9:e7:cd:97:1b:
         d8:30:83:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org