Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/323830343a316361303a3230303a3a2f34302d3430203d3e203631363636.roa
File:                     323830343a316361303a3230303a3a2f34302d3430203d3e203631363636.roa (raw, json)
Hash identifier:          8B7Q6/Ia8ZK51LbZk9fi9npnqCC7L5iaGGXdtw4OFs0=
Subject key identifier:   B9:32:9C:22:24:B5:EE:B9:C9:5C:82:21:A3:6E:13:0A:E2:3F:F4:89
Certificate issuer:       /CN=CE6ECE6859413800410D4C90D373B1EF989710AE
Certificate serial:       0823144BF454B056B02FBC6BC5F0949EF7806597
Authority key identifier: CE:6E:CE:68:59:41:38:00:41:0D:4C:90:D3:73:B1:EF:98:97:10:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE6ECE6859413800410D4C90D373B1EF989710AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/323830343a316361303a3230303a3a2f34302d3430203d3e203631363636.roa
Signing time:             Thu 14 Dec 2023 13:20:55 +0000
ROA not before:           Thu 14 Dec 2023 13:15:55 +0000
ROA not after:            Thu 12 Dec 2024 13:20:55 +0000
asID:                     61666
IP address blocks:        2804:1ca0:200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:23:14:4b:f4:54:b0:56:b0:2f:bc:6b:c5:f0:94:9e:f7:80:65:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE6ECE6859413800410D4C90D373B1EF989710AE
        Validity
            Not Before: Dec 14 13:15:55 2023 GMT
            Not After : Dec 12 13:20:55 2024 GMT
        Subject: CN=B9329C2224B5EEB9C95C8221A36E130AE23FF489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a6:c6:38:9c:ca:6f:1c:8d:0e:93:19:1d:75:
                    3a:12:db:ed:7d:4b:5d:ed:15:cb:f9:17:96:43:1d:
                    3a:2a:ae:69:17:36:23:cb:28:e5:89:80:03:cc:46:
                    e0:31:4d:8c:a6:54:f0:c5:b0:d4:3b:22:fb:f1:f1:
                    f9:d2:58:42:8d:bc:9c:5a:97:82:2b:a2:94:22:db:
                    81:ed:bb:21:88:94:84:e8:a0:ce:90:08:b5:1c:00:
                    43:fd:fb:3c:3f:24:6c:98:14:7a:b4:e6:55:73:89:
                    d3:25:0f:18:fa:25:f6:20:3b:57:68:1d:7c:bb:1c:
                    60:a1:46:83:b9:be:77:bd:95:b9:05:d5:62:da:18:
                    17:2c:39:70:ee:51:66:53:90:f2:56:ea:d1:36:cb:
                    d7:e3:40:47:2c:32:d8:91:29:96:c7:01:2e:a0:48:
                    9e:3e:c3:e0:76:61:46:f0:cf:6f:73:bd:5f:4d:c9:
                    dc:4a:63:7a:b5:bd:b9:c4:69:3a:ea:30:42:c3:9e:
                    b9:f1:3c:07:76:e2:30:b9:dd:c4:6a:b6:0c:0c:13:
                    de:c8:e8:55:2b:9c:b3:04:3d:76:4f:bc:7a:40:fc:
                    4a:9c:05:ac:24:c4:0b:c0:5d:64:dd:ec:94:26:7a:
                    79:1e:c7:db:e7:04:45:bb:e5:81:58:b7:1c:31:4a:
                    07:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:32:9C:22:24:B5:EE:B9:C9:5C:82:21:A3:6E:13:0A:E2:3F:F4:89
            X509v3 Authority Key Identifier:
                keyid:CE:6E:CE:68:59:41:38:00:41:0D:4C:90:D3:73:B1:EF:98:97:10:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/CE6ECE6859413800410D4C90D373B1EF989710AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE6ECE6859413800410D4C90D373B1EF989710AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/323830343a316361303a3230303a3a2f34302d3430203d3e203631363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ca0:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         6a:49:ec:2c:bb:5a:6d:16:63:43:e0:5a:26:da:45:9d:6f:9d:
         f4:7a:22:53:1c:28:f3:b0:f3:65:bd:de:0e:74:6e:9e:fe:35:
         02:0f:c7:e6:96:6f:fa:f7:c3:2c:f9:81:fc:ff:e5:12:e3:fa:
         61:d1:3e:6e:2b:f8:93:6d:34:74:a3:f8:19:a3:22:fe:44:49:
         85:42:46:a8:5e:57:b2:53:04:c2:8d:6d:da:d8:6d:cf:93:5a:
         5a:36:9b:5a:7f:11:0d:94:77:b5:3d:55:66:32:68:f4:40:36:
         d2:1c:43:22:ed:9b:b7:ec:03:60:9d:57:2b:02:6f:6b:c1:22:
         21:07:bb:a1:ea:d6:d0:68:b4:c5:8b:ed:0a:fa:b1:6b:f5:c5:
         4b:df:a4:a2:67:a0:9a:b6:0e:05:0a:8a:6d:07:86:ee:7c:82:
         c1:42:16:54:cf:60:96:63:1d:35:b0:58:0f:e5:6e:16:7b:da:
         f6:fe:60:51:eb:cf:af:57:90:9d:63:7a:3f:99:67:43:30:10:
         82:1b:4e:74:54:be:00:2c:17:00:24:3f:af:32:8c:57:91:3b:
         02:97:66:e4:1e:13:6b:96:90:35:f5:aa:1d:82:ea:d2:41:35:
         47:2f:09:d0:64:95:34:0d:43:25:1c:82:34:23:9b:e7:69:1b:
         8f:eb:e0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org