Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/323830343a336566343a3a2f33322d3332203d3e20323636363331.roa
File:                     323830343a336566343a3a2f33322d3332203d3e20323636363331.roa (raw, json)
Hash identifier:          gVBgwvSTkLXwYYHDHBn4wcecgT/UlZ4TngS6DVn6UUU=
Subject key identifier:   BE:66:CA:E4:FD:E3:BB:80:70:4C:27:46:DB:04:BA:6E:6E:70:8C:CC
Certificate issuer:       /CN=8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873
Certificate serial:       48208DDF59063A408C08C2B0740FAB95E16DDC60
Authority key identifier: 8C:4D:FA:E8:AE:BA:99:08:5D:CC:51:D1:C1:0F:99:B8:A3:C8:88:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/323830343a336566343a3a2f33322d3332203d3e20323636363331.roa
Signing time:             Thu 23 Nov 2023 19:33:18 +0000
ROA not before:           Thu 23 Nov 2023 19:28:18 +0000
ROA not after:            Thu 21 Nov 2024 19:33:18 +0000
asID:                     266631
IP address blocks:        2804:3ef4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:20:8d:df:59:06:3a:40:8c:08:c2:b0:74:0f:ab:95:e1:6d:dc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873
        Validity
            Not Before: Nov 23 19:28:18 2023 GMT
            Not After : Nov 21 19:33:18 2024 GMT
        Subject: CN=BE66CAE4FDE3BB80704C2746DB04BA6E6E708CCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:56:d7:91:30:32:f6:16:91:33:65:47:58:9f:
                    4c:14:8c:c6:bb:34:97:49:bd:06:2e:7e:91:d2:1e:
                    17:78:bd:6c:fc:0d:da:2e:9f:e8:7f:cf:31:dc:51:
                    21:41:e9:83:57:c8:4a:bf:f0:82:4a:7d:9b:30:ce:
                    ab:6b:b9:b1:92:21:93:9b:d8:eb:e1:f7:5f:e5:9a:
                    da:35:9a:f3:4f:da:e6:df:34:25:6c:d3:69:91:43:
                    ba:73:4b:cc:f2:60:35:ce:eb:d3:d0:09:06:4d:8a:
                    63:ae:c4:1f:69:fe:55:90:10:02:9c:57:db:68:47:
                    10:e0:72:10:ff:d5:ca:9d:89:42:2f:3f:28:55:1a:
                    13:49:e3:12:7a:43:07:fc:75:0e:95:b8:82:63:ac:
                    52:a3:47:f5:47:10:0f:5a:a5:a7:56:91:17:33:71:
                    37:23:55:c1:3f:74:b3:d3:52:d2:0e:79:c9:c2:b0:
                    65:86:db:a8:55:68:0b:83:d0:ef:1e:cd:e4:f5:d1:
                    4a:d7:87:dc:b7:4e:4e:50:22:bd:c8:3f:e8:31:c3:
                    1a:e9:da:a9:c7:e8:a8:d1:d2:56:49:33:2c:ce:aa:
                    95:d1:7c:7d:63:9f:4e:09:37:d5:a0:a5:69:77:7b:
                    6a:9d:15:96:cd:6e:d1:56:4d:9b:10:76:b4:93:5e:
                    78:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:66:CA:E4:FD:E3:BB:80:70:4C:27:46:DB:04:BA:6E:6E:70:8C:CC
            X509v3 Authority Key Identifier:
                keyid:8C:4D:FA:E8:AE:BA:99:08:5D:CC:51:D1:C1:0F:99:B8:A3:C8:88:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/323830343a336566343a3a2f33322d3332203d3e20323636363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ef4::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:10:b4:d3:fe:8a:2c:21:2c:a5:1b:ae:78:ad:7a:68:b1:03:
         30:4f:88:ea:e4:61:61:de:5a:d2:71:fb:4a:84:5c:9e:ae:c9:
         90:04:08:ba:d1:c6:a1:b0:78:1e:42:df:df:78:6b:01:00:17:
         34:16:ac:80:29:5d:58:20:40:09:bb:f0:ed:a6:ee:1c:9a:d7:
         56:a7:e5:2d:4c:c2:0b:4b:70:62:79:1b:c7:29:36:19:19:a1:
         f0:3a:e2:52:4c:aa:42:e1:ac:20:0d:c8:31:e5:d4:79:f0:78:
         2d:7e:f5:d3:da:f2:a6:1f:3f:e4:fe:7f:b4:fc:1f:ab:f6:3a:
         06:fc:e4:f1:1b:e7:41:ce:b8:a0:e5:2e:a9:72:80:d4:ce:fc:
         dc:92:c3:65:02:71:ca:e6:20:2b:11:26:06:95:bf:f3:02:05:
         ee:11:6a:81:7a:a3:48:2a:b1:72:0e:a8:d1:08:e1:0e:f1:e8:
         f4:03:97:ac:ad:58:c5:c1:d5:f4:37:58:28:9d:28:f6:34:7b:
         8e:c2:0b:06:d4:b4:8c:b1:2f:9d:96:89:09:4c:75:1c:12:e8:
         3e:0b:65:f1:7d:51:a8:c7:50:03:01:a0:32:44:ef:3d:8a:56:
         a9:bb:fb:f5:96:b2:77:97:6b:72:9d:6f:94:90:1b:09:a1:d3:
         bf:87:53:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org