Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/0/323830343a363964303a3a2f33322d3438203d3e20323730323933.roa
File:                     323830343a363964303a3a2f33322d3438203d3e20323730323933.roa (raw, json)
Hash identifier:          3P0vesTb3k16WsMEX40snE3zAjMdfVv0zdfGYsqPjnc=
Subject key identifier:   F7:76:32:D6:98:89:EA:B8:99:68:89:60:16:58:B3:C5:14:2F:92:EA
Certificate issuer:       /CN=09347E4F9CBA8C744856F25E49BFAB804E739CCE
Certificate serial:       5C3636C65C53749BDC3F1B6B1CE6E3827F4BF906
Authority key identifier: 09:34:7E:4F:9C:BA:8C:74:48:56:F2:5E:49:BF:AB:80:4E:73:9C:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09347E4F9CBA8C744856F25E49BFAB804E739CCE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/0/323830343a363964303a3a2f33322d3438203d3e20323730323933.roa
Signing time:             Fri 22 Sep 2023 02:52:39 +0000
ROA not before:           Fri 22 Sep 2023 02:47:39 +0000
ROA not after:            Fri 20 Sep 2024 02:52:39 +0000
asID:                     270293
IP address blocks:        2804:69d0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:36:36:c6:5c:53:74:9b:dc:3f:1b:6b:1c:e6:e3:82:7f:4b:f9:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09347E4F9CBA8C744856F25E49BFAB804E739CCE
        Validity
            Not Before: Sep 22 02:47:39 2023 GMT
            Not After : Sep 20 02:52:39 2024 GMT
        Subject: CN=F77632D69889EAB8996889601658B3C5142F92EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:26:5d:11:3f:e3:6c:97:f3:13:28:fa:90:74:
                    19:e6:27:7c:68:b1:72:13:b4:63:13:c7:48:0d:d0:
                    bb:ef:4b:54:af:94:fa:6a:08:65:bd:59:2c:07:0f:
                    4b:89:4b:c6:e0:16:08:17:83:9c:e5:56:d7:a0:54:
                    69:f1:e9:80:23:32:1c:c4:1a:84:c1:fb:07:2c:45:
                    d6:c7:46:e7:df:8e:36:dd:dc:bb:6b:90:54:ec:d8:
                    68:82:59:4f:d2:d7:b3:14:3b:57:d4:08:15:e8:5c:
                    53:bd:5a:92:77:8b:b2:c9:3c:d2:26:75:f9:58:d1:
                    66:ec:9b:bb:35:48:2b:b0:3a:0b:df:af:4f:c0:99:
                    f3:4f:ac:b0:f8:47:25:67:4a:88:ab:da:6d:24:fd:
                    86:fd:47:c0:72:54:5a:54:c9:31:ef:29:97:8d:16:
                    e1:8c:7b:1a:f0:18:cb:12:15:a8:3e:46:ad:7c:ac:
                    8c:78:ea:40:5a:2c:83:fe:35:f4:c1:1e:4c:4a:af:
                    9d:28:51:d5:2d:ab:91:6b:1d:6d:c8:98:29:31:7f:
                    dd:98:0a:5d:fc:57:d7:bd:c7:d1:e9:e0:79:70:c2:
                    36:87:c8:3f:29:19:cb:9c:82:8b:8c:f2:dd:1b:22:
                    37:ec:ac:5f:11:20:0e:30:e1:43:e2:e5:b9:20:81:
                    5d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:76:32:D6:98:89:EA:B8:99:68:89:60:16:58:B3:C5:14:2F:92:EA
            X509v3 Authority Key Identifier:
                keyid:09:34:7E:4F:9C:BA:8C:74:48:56:F2:5E:49:BF:AB:80:4E:73:9C:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/0/09347E4F9CBA8C744856F25E49BFAB804E739CCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09347E4F9CBA8C744856F25E49BFAB804E739CCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/0/323830343a363964303a3a2f33322d3438203d3e20323730323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:69d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:5f:6a:d1:f8:cb:c4:10:d0:05:61:4a:87:8c:2c:95:66:76:
         b6:16:06:4c:eb:fd:ce:d8:03:08:bb:27:ea:f0:9d:80:73:4e:
         a8:0e:c9:31:dd:13:c7:53:9a:73:1f:d6:e8:b4:7e:fc:6f:52:
         62:7a:e5:d0:a6:c4:8a:a0:da:36:ef:62:4d:fb:a0:23:4c:28:
         d8:75:b7:99:86:43:1f:95:0b:ef:a7:87:c3:f3:09:a2:08:e2:
         dd:59:3e:f7:18:93:1b:a4:ec:bb:b9:e5:33:c3:50:2d:5d:9b:
         ca:9e:25:28:23:6b:39:44:c7:2f:eb:5d:72:9c:c9:18:8d:f2:
         ef:5f:63:1a:4a:f8:a7:e8:95:a0:dc:d7:3a:b6:57:97:09:65:
         90:d9:09:e3:d3:b4:52:87:f8:1e:cf:39:99:d2:ad:ac:4c:e4:
         73:97:02:74:e5:0a:b2:ff:d2:fd:6d:fb:65:4f:5f:c9:50:dc:
         e9:dd:3f:d9:99:d7:23:eb:3a:0a:36:bd:3b:c4:65:69:6d:7d:
         fb:9a:3b:ce:87:7a:6b:71:85:73:78:ae:3e:bf:72:1f:ff:7a:
         98:7e:28:be:c5:e6:5e:ea:ab:ef:3a:c3:f7:6b:20:e6:73:25:
         e4:4b:43:bf:06:69:73:46:86:f6:6d:56:15:fa:92:aa:41:2e:
         63:04:c5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org