Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/323830343a323266383a3a2f33322d3334203d3e20323634313335.roa
File:                     323830343a323266383a3a2f33322d3334203d3e20323634313335.roa (raw, json)
Hash identifier:          eeZ/v4E9x4A+eRwKgSHCdnE5uDyHqzh2h8r44kPdP10=
Subject key identifier:   CD:4C:42:F7:78:E6:37:EB:44:AB:D8:BA:03:AD:45:E3:94:A6:AC:A9
Certificate issuer:       /CN=9A1A6D73940C2D9CDA549FED8C137FC8FEEC38FE
Certificate serial:       7A21F49831CA3D2B5179DF50D98BB553C0B49904
Authority key identifier: 9A:1A:6D:73:94:0C:2D:9C:DA:54:9F:ED:8C:13:7F:C8:FE:EC:38:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A1A6D73940C2D9CDA549FED8C137FC8FEEC38FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/323830343a323266383a3a2f33322d3334203d3e20323634313335.roa
Signing time:             Thu 20 Jul 2023 14:00:00 +0000
ROA not before:           Thu 20 Jul 2023 13:55:00 +0000
ROA not after:            Thu 18 Jul 2024 14:00:00 +0000
asID:                     264135
IP address blocks:        2804:22f8::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:21:f4:98:31:ca:3d:2b:51:79:df:50:d9:8b:b5:53:c0:b4:99:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A1A6D73940C2D9CDA549FED8C137FC8FEEC38FE
        Validity
            Not Before: Jul 20 13:55:00 2023 GMT
            Not After : Jul 18 14:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f4:7e:d0:f3:66:55:b6:d6:d6:ae:56:25:1c:
                    59:15:93:55:b0:84:15:84:b2:12:31:68:9a:4b:08:
                    83:32:fc:15:e5:9d:1e:80:3b:eb:ed:66:4c:f6:83:
                    e8:4b:b8:39:0f:c2:fa:9f:f6:26:45:cf:c6:58:10:
                    7d:a1:8b:e1:b4:08:b5:9e:dd:2b:b9:c4:98:48:fa:
                    c6:ae:67:97:28:0a:e6:36:2b:6e:37:43:a3:43:65:
                    d4:ab:d1:4b:98:1e:4f:6e:c5:48:2e:28:1a:64:f5:
                    9a:c1:a6:cc:41:88:94:c3:fc:cd:30:6b:b2:22:27:
                    af:19:06:87:a4:1d:87:04:01:4c:26:42:4b:73:b6:
                    3a:c4:bb:eb:4d:c8:b6:fd:33:f4:31:6e:4d:cd:02:
                    fd:fc:0f:0c:69:89:df:a4:4c:0f:9c:98:b6:4a:f2:
                    f4:12:20:0b:ae:41:b6:c8:8e:a4:fd:49:fd:c7:71:
                    7e:bc:96:4c:9c:f9:b1:9a:4c:3c:89:1b:1b:39:1d:
                    ec:dd:16:be:91:d3:d3:d8:c1:d4:10:95:f9:fc:0e:
                    a7:20:57:47:d2:02:ae:9a:a0:1f:cb:7b:93:ad:cb:
                    6a:5b:f4:e6:6b:d7:6a:af:b6:8a:97:41:41:b1:05:
                    55:a5:6f:10:b2:14:30:9b:1b:76:b6:9b:21:18:76:
                    4b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4C:42:F7:78:E6:37:EB:44:AB:D8:BA:03:AD:45:E3:94:A6:AC:A9
            X509v3 Authority Key Identifier:
                keyid:9A:1A:6D:73:94:0C:2D:9C:DA:54:9F:ED:8C:13:7F:C8:FE:EC:38:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/9A1A6D73940C2D9CDA549FED8C137FC8FEEC38FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A1A6D73940C2D9CDA549FED8C137FC8FEEC38FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/323830343a323266383a3a2f33322d3334203d3e20323634313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:b1:10:2b:93:f8:4f:e0:90:b2:5e:7f:85:36:40:fb:c3:2c:
         7e:3f:40:f0:85:32:bc:0f:28:05:2e:cf:81:de:24:df:6b:7f:
         60:85:eb:07:12:0d:98:cd:dd:ec:eb:d2:ad:77:05:67:4d:3d:
         1d:94:d4:1d:35:4d:c0:94:98:38:41:c2:f0:cc:b7:1d:a4:d2:
         90:cc:bc:6f:9d:ea:b8:76:6f:08:80:de:18:ad:fe:0f:f4:14:
         5c:00:c2:d7:54:22:7b:48:8f:97:fe:6a:4a:c4:2c:b0:86:65:
         53:48:9b:a3:51:b2:bc:ed:2e:51:59:67:38:fc:8f:e3:10:a0:
         0d:6b:17:08:88:77:8e:9f:0a:05:e3:d0:f5:3d:04:f3:8b:a3:
         6f:9b:fa:84:06:71:7c:f4:24:85:3a:3a:95:b3:0e:38:fd:0b:
         e8:33:3d:0d:fa:a2:f0:30:d0:76:7c:89:65:62:48:9c:f2:0c:
         f8:fb:97:d0:4f:21:6f:82:a1:f4:fd:d1:39:b0:b1:86:2a:14:
         ed:4d:28:58:2a:19:64:b8:8d:f1:06:43:a9:d7:3b:55:e3:c8:
         33:e1:50:10:a8:80:27:f9:a5:61:67:09:48:7c:dd:49:6b:50:
         92:35:c4:23:88:11:20:2f:53:78:4e:cf:ec:e6:a6:e9:60:17:
         28:62:84:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org