Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/323830343a313131303a626230303a3a2f34302d3430203d3e20323632393031.roa
File:                     323830343a313131303a626230303a3a2f34302d3430203d3e20323632393031.roa (raw, json)
Hash identifier:          +J+MMkVNBL7lQXAo2NtJEs6rHxeQEklm+pVGB7xI2Eg=
Subject key identifier:   99:07:7E:1B:C2:06:D1:C5:FB:BF:44:4D:DA:60:83:D8:00:01:00:D9
Certificate issuer:       /CN=C705331F0A907F8D2B8A4719ECE2288993AFDA38
Certificate serial:       78D4F1A76C38A7774F9BCE0C4FFB4217DF71A02E
Authority key identifier: C7:05:33:1F:0A:90:7F:8D:2B:8A:47:19:EC:E2:28:89:93:AF:DA:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C705331F0A907F8D2B8A4719ECE2288993AFDA38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/323830343a313131303a626230303a3a2f34302d3430203d3e20323632393031.roa
Signing time:             Fri 24 Feb 2023 13:25:12 +0000
ROA not before:           Fri 24 Feb 2023 13:20:12 +0000
ROA not after:            Fri 23 Feb 2024 13:25:12 +0000
asID:                     262901
IP address blocks:        2804:1110:bb00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d4:f1:a7:6c:38:a7:77:4f:9b:ce:0c:4f:fb:42:17:df:71:a0:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C705331F0A907F8D2B8A4719ECE2288993AFDA38
        Validity
            Not Before: Feb 24 13:20:12 2023 GMT
            Not After : Feb 23 13:25:12 2024 GMT
        Subject: CN=99077E1BC206D1C5FBBF444DDA6083D8000100D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6c:dc:f8:86:06:72:ad:0f:77:ec:58:a4:b8:
                    36:09:82:bb:9b:9e:10:34:ce:15:cb:3a:da:b7:f5:
                    50:82:36:04:7c:39:c9:50:d6:f0:cc:fa:77:bb:05:
                    0b:13:bf:00:2e:18:ff:8d:0b:ad:b4:e1:c5:59:37:
                    8e:89:83:c3:5a:70:11:36:64:b3:b1:8f:c0:fa:af:
                    ec:09:a8:d8:69:f9:b7:e9:bc:f3:1f:74:e0:00:db:
                    e4:4e:96:34:65:17:e9:ea:cd:52:e6:af:90:18:6e:
                    ac:4d:77:f5:83:4e:12:62:9c:9f:ac:19:eb:31:db:
                    de:62:0f:36:9e:ef:7e:41:2f:8e:3f:83:f8:53:b7:
                    a3:a7:66:95:56:a0:41:95:e9:b1:64:7c:37:48:84:
                    48:79:09:cf:ae:94:29:fc:66:73:2d:3a:2a:8e:0e:
                    87:c5:06:e8:14:64:d1:93:05:97:c0:ea:f4:49:26:
                    8f:b9:26:e1:c0:8d:2a:bf:9a:ac:c4:9d:46:66:5c:
                    2b:3e:75:4b:f4:e6:fa:a6:07:f8:21:64:05:b4:31:
                    b3:1a:88:25:3d:da:50:7d:12:d3:ad:05:6f:a1:ed:
                    84:cb:ef:be:b0:9e:8a:ed:64:97:e3:99:e1:1d:45:
                    1b:36:65:22:51:51:c3:76:ac:6f:22:b7:f0:e5:9f:
                    1b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:07:7E:1B:C2:06:D1:C5:FB:BF:44:4D:DA:60:83:D8:00:01:00:D9
            X509v3 Authority Key Identifier:
                keyid:C7:05:33:1F:0A:90:7F:8D:2B:8A:47:19:EC:E2:28:89:93:AF:DA:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/C705331F0A907F8D2B8A4719ECE2288993AFDA38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C705331F0A907F8D2B8A4719ECE2288993AFDA38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/323830343a313131303a626230303a3a2f34302d3430203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1110:bb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         9f:aa:f6:01:c5:6d:94:e0:7a:e5:67:60:ff:38:31:9a:f4:c2:
         b1:4d:fd:99:ec:29:e3:c5:33:3e:86:6d:59:5e:05:43:0f:a8:
         85:c4:03:46:28:28:4b:9c:bd:d8:db:a9:2e:fb:93:b5:33:44:
         a0:f1:ef:06:54:6f:b6:38:b1:b7:0a:fe:7f:4b:db:65:8a:f5:
         9a:83:d2:cc:a3:da:80:c1:41:15:21:90:5e:44:fb:21:55:20:
         ef:27:80:f4:8f:c3:91:88:54:cd:a3:23:4b:09:c0:be:c7:da:
         ea:ab:b3:8e:15:03:ee:97:30:7c:dc:bd:59:db:6c:2f:aa:2f:
         87:00:05:7c:82:0d:60:38:27:f0:cd:67:79:e5:8e:3e:74:b0:
         01:a7:1c:47:ea:e3:ba:c1:7e:40:be:cc:4b:78:58:82:f0:7d:
         c1:3e:d8:19:ee:16:11:5f:d7:cd:1a:f3:4a:71:63:90:9a:fe:
         43:0b:64:07:6a:00:37:e9:e5:4f:8c:5e:d0:fe:88:e4:4b:99:
         dd:e5:be:e2:86:07:78:78:56:2a:96:72:06:ec:b4:c6:cf:c7:
         c3:ae:cd:39:21:6f:75:1f:8b:2b:e3:ff:14:a2:40:c2:60:7d:
         1d:8b:38:07:7f:4a:e5:54:86:43:d6:1b:65:ea:2d:12:92:18:
         d0:9e:f7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org