Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/323830343a353938383a3a2f33322d3332203d3e20323638373038.roa
File:                     323830343a353938383a3a2f33322d3332203d3e20323638373038.roa (raw, json)
Hash identifier:          owebN167NPRuuWJeb8Qoks1444yr8EqvyFcCBqUBYLY=
Subject key identifier:   89:BF:4F:EC:C9:1A:9D:20:C1:1A:A7:8B:7F:E9:10:21:05:E9:2A:E0
Certificate issuer:       /CN=0F2CCFC527502386B95CBF037663832D454D8363
Certificate serial:       7DAA15A697A6BBE7F061B3B048DA46E24AF191EB
Authority key identifier: 0F:2C:CF:C5:27:50:23:86:B9:5C:BF:03:76:63:83:2D:45:4D:83:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F2CCFC527502386B95CBF037663832D454D8363.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/323830343a353938383a3a2f33322d3332203d3e20323638373038.roa
Signing time:             Mon 04 Dec 2023 18:03:03 +0000
ROA not before:           Mon 04 Dec 2023 17:58:03 +0000
ROA not after:            Mon 02 Dec 2024 18:03:03 +0000
asID:                     268708
IP address blocks:        2804:5988::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:aa:15:a6:97:a6:bb:e7:f0:61:b3:b0:48:da:46:e2:4a:f1:91:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F2CCFC527502386B95CBF037663832D454D8363
        Validity
            Not Before: Dec  4 17:58:03 2023 GMT
            Not After : Dec  2 18:03:03 2024 GMT
        Subject: CN=89BF4FECC91A9D20C11AA78B7FE9102105E92AE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:19:2b:58:2c:63:6d:f2:77:5c:59:23:74:57:
                    47:e0:69:e3:98:85:d9:99:c7:75:57:67:ed:be:41:
                    f6:b1:b8:36:19:2a:33:ea:02:d2:60:f3:f4:77:24:
                    dd:b9:c0:37:11:45:0d:25:c3:49:cf:60:da:8b:67:
                    48:ee:b3:41:4a:cb:c0:c7:45:a3:60:92:78:a1:c7:
                    bc:76:24:be:78:16:90:4b:00:11:08:3e:f2:1d:a3:
                    68:c8:0d:8d:ed:12:f7:65:80:a6:f0:d5:5d:4e:6d:
                    48:3c:28:1a:85:e4:97:d1:46:01:e5:ea:cb:fe:dc:
                    0f:16:26:4a:cb:9c:69:7d:f6:d6:c9:b0:87:1d:ec:
                    a4:3d:92:e2:98:a3:2c:16:79:49:de:a7:dd:43:33:
                    bc:2c:f7:e1:4c:e9:77:60:9a:20:0a:63:e5:76:b2:
                    ec:bb:37:41:86:9c:c9:f3:06:f3:08:8e:a1:43:b7:
                    22:e8:01:cb:4c:2b:df:6c:1a:3e:f2:e9:d4:bf:ca:
                    fa:d3:74:98:87:e6:53:45:45:82:6d:d7:9f:34:46:
                    30:d3:03:00:c5:19:b0:7d:6c:d9:b4:11:08:74:fa:
                    f2:5a:3f:be:83:b0:50:f4:25:ec:ff:70:f0:6b:49:
                    bf:1b:1f:99:55:87:b1:03:a5:ac:e6:eb:ec:08:10:
                    f1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BF:4F:EC:C9:1A:9D:20:C1:1A:A7:8B:7F:E9:10:21:05:E9:2A:E0
            X509v3 Authority Key Identifier:
                keyid:0F:2C:CF:C5:27:50:23:86:B9:5C:BF:03:76:63:83:2D:45:4D:83:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/0F2CCFC527502386B95CBF037663832D454D8363.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F2CCFC527502386B95CBF037663832D454D8363.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/323830343a353938383a3a2f33322d3332203d3e20323638373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5988::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:df:6e:2a:5a:49:65:e6:44:cd:77:7b:05:ed:35:96:42:0d:
         51:d4:87:a4:76:b8:1a:12:e3:29:02:fd:62:a5:59:f7:90:cc:
         1b:69:87:c1:41:40:24:56:21:f8:17:66:f7:ab:2d:82:3e:c6:
         3a:66:94:72:a4:99:19:c5:db:a1:56:e0:8a:ff:1a:6f:1c:f1:
         2e:57:41:2c:2d:6d:37:e1:69:a8:ed:f0:79:40:4c:aa:57:70:
         9d:40:ac:0f:6b:7c:74:24:3d:38:3b:49:8c:0b:9b:12:d2:ab:
         dd:60:99:77:26:d8:40:91:ae:ad:89:5c:ae:b2:49:fa:aa:8e:
         ef:d6:ff:d2:dd:36:22:5a:99:07:23:45:5c:e1:ec:ec:25:94:
         67:d6:d1:85:2c:4a:01:0a:c4:5d:0e:b1:f3:a1:ab:23:43:a7:
         93:de:fd:18:18:e1:c5:09:20:70:af:ca:38:92:16:bc:b7:c0:
         13:e1:c9:fb:cc:0f:a6:5a:85:89:56:90:92:6f:26:3f:70:fa:
         a8:7e:65:28:7a:17:0a:09:4d:7a:70:33:d6:8a:01:a6:6a:3c:
         50:91:f9:ee:0a:2b:76:15:6a:15:64:09:32:eb:48:b5:04:b2:
         e5:c2:78:93:1d:9d:70:12:54:00:ea:f8:3f:90:4a:ac:7b:ab:
         27:84:8a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org