Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/323830343a6663633a3a2f33342d3334203d3e20323633363034.roa
File:                     323830343a6663633a3a2f33342d3334203d3e20323633363034.roa (raw, json)
Hash identifier:          AYgy4YPavsgbst0DrvjyqbZ8Wys43Tom6JCeneO3I14=
Subject key identifier:   A4:B2:56:0E:7B:C4:37:F2:50:77:89:FC:02:40:78:AE:68:70:A3:B1
Certificate issuer:       /CN=11C498AC8321997BA4C8E8FDE6C86AB8C07045BB
Certificate serial:       07BFB5030CE2D5F024E56DCAC5951DB37291556C
Authority key identifier: 11:C4:98:AC:83:21:99:7B:A4:C8:E8:FD:E6:C8:6A:B8:C0:70:45:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11C498AC8321997BA4C8E8FDE6C86AB8C07045BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/323830343a6663633a3a2f33342d3334203d3e20323633363034.roa
Signing time:             Thu 21 Sep 2023 13:36:58 +0000
ROA not before:           Thu 21 Sep 2023 13:31:58 +0000
ROA not after:            Thu 19 Sep 2024 13:36:58 +0000
asID:                     263604
IP address blocks:        2804:fcc::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:bf:b5:03:0c:e2:d5:f0:24:e5:6d:ca:c5:95:1d:b3:72:91:55:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C498AC8321997BA4C8E8FDE6C86AB8C07045BB
        Validity
            Not Before: Sep 21 13:31:58 2023 GMT
            Not After : Sep 19 13:36:58 2024 GMT
        Subject: CN=A4B2560E7BC437F2507789FC024078AE6870A3B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ea:ef:2c:b0:5a:c8:d3:91:13:2b:7d:56:b5:
                    72:f2:53:ff:f2:3f:11:35:89:d8:e2:65:26:6e:36:
                    ee:df:aa:5f:4e:d9:c2:1a:10:19:e4:d3:2f:1c:f1:
                    83:e6:f9:f1:e6:3f:38:3c:18:56:67:c4:c0:88:f7:
                    04:a6:1c:cf:b9:a3:e1:1c:e7:91:fc:51:7a:db:a8:
                    41:e9:ba:9b:fd:0f:6d:b4:f9:a4:a0:29:5d:f8:8e:
                    af:19:ac:c1:c8:c8:fb:5b:0c:19:0b:76:56:2f:2d:
                    dd:9d:96:a6:c5:45:24:1f:3d:94:4d:9c:d0:b8:9d:
                    76:16:65:25:ac:3f:7b:0f:c9:f7:a9:fb:0a:3f:40:
                    e2:4d:53:32:d3:85:65:e5:75:a0:9e:ed:18:3c:07:
                    82:ca:5e:fd:e1:12:ce:af:85:d6:ec:6d:bb:a8:b7:
                    a4:81:1f:7e:58:f1:af:da:c2:6f:78:3f:46:91:87:
                    4a:2b:30:a5:0f:4e:3d:a3:0b:d2:5d:7b:d3:bb:49:
                    cc:eb:59:f7:a5:66:ab:b3:f4:d7:39:11:e0:e0:88:
                    66:d6:87:00:1d:26:3c:39:4f:f8:2a:06:66:b3:a0:
                    2f:88:22:23:d5:06:ce:da:cb:0d:fe:e5:0c:aa:15:
                    76:e5:fe:0e:61:2d:7f:c3:6a:8b:c7:b2:c9:ab:80:
                    5f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B2:56:0E:7B:C4:37:F2:50:77:89:FC:02:40:78:AE:68:70:A3:B1
            X509v3 Authority Key Identifier:
                keyid:11:C4:98:AC:83:21:99:7B:A4:C8:E8:FD:E6:C8:6A:B8:C0:70:45:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/11C498AC8321997BA4C8E8FDE6C86AB8C07045BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11C498AC8321997BA4C8E8FDE6C86AB8C07045BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/323830343a6663633a3a2f33342d3334203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fcc::/34

    Signature Algorithm: sha256WithRSAEncryption
         28:d6:d7:e2:d4:f4:f4:ad:a6:de:eb:ac:99:40:b8:c4:6a:e6:
         81:47:a5:90:cb:05:ae:7e:80:3a:a9:bf:1f:4e:1b:1f:7f:97:
         63:af:12:7c:5e:e3:ec:3c:c8:69:53:4c:f4:dd:e5:d8:ae:1c:
         4b:14:19:b2:a2:ba:3e:1d:33:48:7e:5b:84:ce:73:79:97:b7:
         fa:d8:84:fe:8e:54:6b:72:93:bc:ae:d8:2f:09:52:a6:48:7d:
         61:0e:33:12:33:06:ad:ea:be:f6:50:65:0f:a8:f3:21:b0:cb:
         80:ee:c7:f1:f5:0e:ae:a7:a9:d3:ab:d8:93:ce:dc:ea:99:1c:
         6c:fe:d5:80:a4:25:10:69:ec:d0:95:3e:8b:29:c6:52:f9:1f:
         4f:62:c5:e3:94:94:27:23:3c:92:00:b7:7d:7f:7b:a3:d2:79:
         a2:7c:0c:c4:e5:af:93:39:91:97:c7:57:30:a8:bf:22:18:df:
         9a:55:59:87:37:2a:f1:83:ae:0f:d6:f1:f8:3c:05:ff:15:13:
         1a:ef:13:a7:aa:97:1e:4e:61:16:39:f7:ae:f1:25:e3:24:92:
         8c:14:14:9b:4a:d9:b7:e3:ba:8b:7c:81:16:8d:0b:5b:63:48:
         7a:74:88:e2:f7:89:ff:4d:cc:62:74:53:b7:46:a8:b1:35:7b:
         b0:b1:81:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org