Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/323830343a353639383a3a2f33322d3332203d3e20323638303131.roa
File:                     323830343a353639383a3a2f33322d3332203d3e20323638303131.roa (raw, json)
Hash identifier:          b4eYIIfoNw1of5q/d5oAcz7niV4zdb8oAwF686Ti59w=
Subject key identifier:   36:BE:67:D7:42:67:CB:D3:DB:94:C1:02:C0:F0:BC:95:E7:2B:66:D1
Certificate issuer:       /CN=8414455E5995EE7C674A31A6E51442E29CB60FB5
Certificate serial:       7B14CDD7735DEE580AA2BBD3FCF1424D11D36C6F
Authority key identifier: 84:14:45:5E:59:95:EE:7C:67:4A:31:A6:E5:14:42:E2:9C:B6:0F:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8414455E5995EE7C674A31A6E51442E29CB60FB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/323830343a353639383a3a2f33322d3332203d3e20323638303131.roa
Signing time:             Wed 22 Nov 2023 17:53:01 +0000
ROA not before:           Wed 22 Nov 2023 17:48:01 +0000
ROA not after:            Wed 20 Nov 2024 17:53:01 +0000
asID:                     268011
IP address blocks:        2804:5698::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:14:cd:d7:73:5d:ee:58:0a:a2:bb:d3:fc:f1:42:4d:11:d3:6c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8414455E5995EE7C674A31A6E51442E29CB60FB5
        Validity
            Not Before: Nov 22 17:48:01 2023 GMT
            Not After : Nov 20 17:53:01 2024 GMT
        Subject: CN=36BE67D74267CBD3DB94C102C0F0BC95E72B66D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6a:07:c0:9a:c2:48:dd:34:43:0f:67:07:b6:
                    d0:0f:4a:28:31:1b:c3:bc:2f:7f:42:29:99:8b:59:
                    4e:82:13:71:8e:72:90:46:06:6b:4c:1f:8e:c3:d4:
                    57:dd:82:f8:83:ea:9f:ff:1a:5b:63:b6:54:b3:18:
                    69:0e:92:08:53:32:41:d4:ae:05:09:c6:3d:3b:59:
                    30:34:c6:00:04:58:48:01:36:7c:5b:91:e2:b3:56:
                    9e:f1:ce:82:86:b8:e8:53:87:dc:0a:4b:bf:d1:59:
                    9f:62:62:d7:f8:f5:92:92:c0:9e:b4:1d:2f:d5:28:
                    20:6d:3f:c3:d5:37:d6:94:e9:ba:5d:ed:11:b0:92:
                    b6:67:72:47:89:b4:83:13:0c:00:e7:b2:aa:54:33:
                    68:be:fa:26:4d:05:1f:3f:ff:44:7b:93:5e:76:13:
                    08:c7:67:5e:db:bc:5d:07:4f:21:ce:8f:2f:10:91:
                    b4:85:0a:df:c6:6c:e2:90:94:53:8e:cb:f4:06:1e:
                    2e:07:07:e3:2d:1f:ed:72:ee:2e:ae:56:c8:a8:64:
                    37:58:57:3b:6b:80:00:79:f9:ca:ee:67:f3:0a:d5:
                    45:67:5a:2e:42:47:40:e9:78:8b:f7:21:4d:77:94:
                    47:88:d6:72:a1:c3:a9:42:6e:29:20:2d:a8:25:40:
                    27:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BE:67:D7:42:67:CB:D3:DB:94:C1:02:C0:F0:BC:95:E7:2B:66:D1
            X509v3 Authority Key Identifier:
                keyid:84:14:45:5E:59:95:EE:7C:67:4A:31:A6:E5:14:42:E2:9C:B6:0F:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/8414455E5995EE7C674A31A6E51442E29CB60FB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8414455E5995EE7C674A31A6E51442E29CB60FB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/323830343a353639383a3a2f33322d3332203d3e20323638303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5698::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:ed:a7:3d:6c:96:cb:3a:85:be:84:d7:5a:37:5e:f3:c0:7e:
         25:e1:25:0c:1c:9c:24:5b:f4:d3:2a:95:92:34:25:eb:2b:42:
         50:32:28:17:2a:22:57:82:13:8f:bc:13:d7:aa:10:be:b0:6e:
         39:ac:dc:34:01:3d:c6:4f:17:a4:f1:7c:9a:01:83:22:63:f9:
         22:f6:53:74:30:d8:29:58:96:f6:84:f7:6e:0c:18:99:fa:27:
         54:f0:8c:36:44:74:25:57:b0:54:46:19:3f:ab:d7:82:1b:a7:
         3f:98:5c:40:9b:d0:b4:64:62:f7:18:90:08:50:c4:97:76:76:
         c0:5e:87:4c:2b:1b:33:70:b5:39:c6:22:ef:88:23:34:ff:25:
         4b:2b:f6:b6:39:7a:06:bf:e6:25:5f:3c:0e:fc:2d:48:c8:0c:
         08:25:0b:65:ce:cc:e0:1c:76:66:ee:e7:8e:20:ef:e0:72:f1:
         ea:20:80:55:33:1d:f9:ca:1c:be:1e:9a:da:39:64:1f:1a:38:
         83:10:10:ac:64:fb:29:89:12:16:8f:1b:bc:4b:b4:61:8e:7e:
         07:20:90:32:59:b0:6d:ff:05:9f:92:e9:a3:89:07:e0:84:7e:
         83:26:7c:d4:eb:e1:94:4f:ce:5f:7b:7d:fe:02:ab:8d:bb:c9:
         0d:81:df:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org