Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/323830343a6663633a343030303a3a2f33342d3334203d3e20323633363034.roa
File:                     323830343a6663633a343030303a3a2f33342d3334203d3e20323633363034.roa (raw, json)
Hash identifier:          gtfWpdNATzMnLYXQtRnb2QOs0y3L4WlPS0o9zfwzZB0=
Subject key identifier:   21:8D:81:0E:43:58:B3:7E:78:5C:03:D8:41:30:AF:2C:66:89:10:62
Certificate issuer:       /CN=11C498AC8321997BA4C8E8FDE6C86AB8C07045BB
Certificate serial:       7ED211C7DB6B97B442E9E31B14992CDA604F971E
Authority key identifier: 11:C4:98:AC:83:21:99:7B:A4:C8:E8:FD:E6:C8:6A:B8:C0:70:45:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11C498AC8321997BA4C8E8FDE6C86AB8C07045BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/323830343a6663633a343030303a3a2f33342d3334203d3e20323633363034.roa
Signing time:             Thu 21 Sep 2023 13:37:01 +0000
ROA not before:           Thu 21 Sep 2023 13:32:01 +0000
ROA not after:            Thu 19 Sep 2024 13:37:01 +0000
asID:                     263604
IP address blocks:        2804:fcc:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d2:11:c7:db:6b:97:b4:42:e9:e3:1b:14:99:2c:da:60:4f:97:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C498AC8321997BA4C8E8FDE6C86AB8C07045BB
        Validity
            Not Before: Sep 21 13:32:01 2023 GMT
            Not After : Sep 19 13:37:01 2024 GMT
        Subject: CN=218D810E4358B37E785C03D84130AF2C66891062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:65:36:95:ed:fa:40:a3:d8:fa:f9:7a:cb:5d:
                    38:95:1f:86:94:1f:c9:3a:09:6a:d8:4a:27:54:f9:
                    44:a5:92:86:f6:f2:ed:ad:68:f0:6f:6d:ee:51:6d:
                    76:86:5c:5d:b7:0e:9b:56:a1:49:94:d0:37:2a:e4:
                    94:d5:f0:04:67:99:f6:ba:75:d9:ab:56:d8:68:49:
                    80:fa:f1:f0:3b:8a:c5:54:8c:57:74:17:56:df:89:
                    c5:ae:12:b1:ce:08:15:40:1f:6f:5e:84:cf:d1:e2:
                    3a:30:ad:60:c3:74:ba:70:92:45:b6:53:3b:81:49:
                    ba:c0:81:29:87:76:7d:74:c1:5c:15:65:61:2f:56:
                    77:a5:a9:ee:8c:59:c3:75:30:c2:da:ff:92:01:72:
                    8d:a4:ed:fc:f6:4d:36:56:fc:dc:f3:e8:fb:a3:47:
                    a9:50:ab:fd:5c:aa:df:83:de:97:f2:f6:08:e1:4f:
                    05:2f:1b:d8:6b:8f:4d:7a:08:e9:bc:4f:ff:4e:8c:
                    bd:78:5e:74:f9:06:81:67:82:05:50:8a:2e:39:50:
                    78:a5:37:c0:41:0a:9a:5b:a5:14:77:a6:1f:2c:0d:
                    18:99:b6:2a:32:28:41:0a:68:80:91:a3:e1:4d:07:
                    d5:65:72:33:8d:8a:6b:41:86:14:19:5e:81:17:9e:
                    69:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8D:81:0E:43:58:B3:7E:78:5C:03:D8:41:30:AF:2C:66:89:10:62
            X509v3 Authority Key Identifier:
                keyid:11:C4:98:AC:83:21:99:7B:A4:C8:E8:FD:E6:C8:6A:B8:C0:70:45:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/11C498AC8321997BA4C8E8FDE6C86AB8C07045BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11C498AC8321997BA4C8E8FDE6C86AB8C07045BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/323830343a6663633a343030303a3a2f33342d3334203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fcc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         11:d0:c5:2e:9e:05:c9:dc:7f:61:b5:26:d6:df:6f:3c:60:2c:
         23:83:d6:cf:98:3d:01:7a:b2:72:e1:22:84:21:1a:5e:3e:65:
         97:63:25:07:02:1f:62:e1:ab:8e:a4:21:12:46:29:d2:4e:21:
         c7:a4:cf:e8:20:71:37:61:9b:33:49:f9:7b:1d:97:88:a1:a8:
         f3:80:a3:fb:04:6d:cc:5a:33:ac:a0:c3:8b:40:c6:5d:3e:50:
         af:28:aa:0a:39:c7:d6:e1:83:19:bd:bc:9f:2e:be:e5:48:9f:
         7a:ab:68:7c:99:27:f7:9c:9c:1b:bb:3c:fe:d0:9e:5c:d3:c8:
         23:70:dc:82:89:24:cf:88:de:24:9a:03:82:a3:2a:db:2b:e4:
         e3:bd:09:c4:af:a2:eb:a5:dc:a3:32:0a:5a:d8:b0:d5:f1:4e:
         01:2a:b1:70:1a:45:bc:4d:dd:31:85:11:07:f1:83:f0:b2:1d:
         14:c9:b0:2b:35:5f:df:4d:39:f0:db:02:71:a0:e6:4a:7c:47:
         42:9f:21:01:17:32:7c:1f:2a:48:da:f7:bd:42:fa:55:94:1f:
         05:d5:e7:82:8b:29:d2:9e:6d:ce:37:93:b6:50:55:53:bf:5b:
         21:b5:50:49:1b:20:42:2b:d4:0a:ac:45:9f:8e:0f:d7:0f:fb:
         1a:c3:8f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org