Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/0/323830343a343934343a3a2f33322d3336203d3e20323637313734.roa
File:                     323830343a343934343a3a2f33322d3336203d3e20323637313734.roa (raw, json)
Hash identifier:          DCsnj4AiS1hm6bqi2W1Q3X4EyNWTZkWfecHr5BUiccE=
Subject key identifier:   40:84:81:3E:70:86:D1:0F:6E:3B:17:C9:7F:6D:57:9B:DF:43:5A:1D
Certificate issuer:       /CN=CF9E64A37B75832A1D72910183E2819D9C10D585
Certificate serial:       3DE9B893F92EAEC3B1519B892BDC5BA2B1F1A683
Authority key identifier: CF:9E:64:A3:7B:75:83:2A:1D:72:91:01:83:E2:81:9D:9C:10:D5:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF9E64A37B75832A1D72910183E2819D9C10D585.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/0/323830343a343934343a3a2f33322d3336203d3e20323637313734.roa
Signing time:             Tue 20 Feb 2024 19:04:04 +0000
ROA not before:           Tue 20 Feb 2024 18:59:04 +0000
ROA not after:            Tue 18 Feb 2025 19:04:04 +0000
asID:                     267174
IP address blocks:        2804:4944::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e9:b8:93:f9:2e:ae:c3:b1:51:9b:89:2b:dc:5b:a2:b1:f1:a6:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF9E64A37B75832A1D72910183E2819D9C10D585
        Validity
            Not Before: Feb 20 18:59:04 2024 GMT
            Not After : Feb 18 19:04:04 2025 GMT
        Subject: CN=4084813E7086D10F6E3B17C97F6D579BDF435A1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:10:83:7a:e1:1c:af:e8:65:12:ef:d3:9a:4d:
                    c3:b4:33:d2:c3:a6:2c:19:65:f6:8f:64:c7:ce:76:
                    c7:b5:55:ef:21:07:1b:ec:5f:ae:f5:69:a5:de:b6:
                    2c:6a:e5:3c:37:f3:43:3d:f1:80:16:80:b0:4f:21:
                    9d:43:b9:03:8b:6a:ed:c9:1a:5c:32:0b:d1:4b:98:
                    2b:5b:e2:08:3f:69:c9:21:01:4d:5d:2c:8f:19:fe:
                    92:6a:97:b8:c8:73:fb:b2:d3:4e:58:fb:8b:92:03:
                    51:de:6c:69:26:ee:89:e4:27:c2:d6:eb:48:93:56:
                    e6:d4:2c:d1:74:0b:36:14:97:6a:74:7a:95:b4:74:
                    d9:83:03:1d:ca:bc:1b:c2:1f:9f:b1:77:e2:dc:0a:
                    55:d5:c1:bd:9c:0e:35:7f:c3:21:2a:e1:ab:ca:5c:
                    46:0c:27:bc:72:47:33:e7:8e:1e:18:2d:2c:2a:46:
                    0b:19:fb:f3:8f:a5:96:a8:9a:1b:b0:0e:28:c8:aa:
                    b1:18:ca:65:01:59:2d:79:69:97:5f:e2:6d:e8:06:
                    79:d5:34:91:40:1a:2d:79:96:e7:ee:d5:ca:89:11:
                    51:7b:b7:18:80:5e:89:84:07:3f:8e:af:b9:15:ea:
                    58:35:5c:42:b1:5d:28:2d:bb:7c:ca:f3:0b:17:0e:
                    3f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:84:81:3E:70:86:D1:0F:6E:3B:17:C9:7F:6D:57:9B:DF:43:5A:1D
            X509v3 Authority Key Identifier:
                keyid:CF:9E:64:A3:7B:75:83:2A:1D:72:91:01:83:E2:81:9D:9C:10:D5:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/0/CF9E64A37B75832A1D72910183E2819D9C10D585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF9E64A37B75832A1D72910183E2819D9C10D585.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/0/323830343a343934343a3a2f33322d3336203d3e20323637313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4944::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:01:bd:2a:9e:40:62:11:fa:ae:0c:6e:5f:4f:02:86:21:a4:
         d2:91:b5:cc:d5:0e:a3:08:6a:c0:d5:61:e4:a0:a9:8c:d7:df:
         84:33:f8:57:8f:91:8e:f7:e1:8e:45:52:a6:15:5f:d8:41:52:
         59:d1:f5:18:1b:c0:80:9b:de:b1:76:e9:8a:06:ae:05:dd:72:
         45:d8:e7:c3:ab:ce:16:08:7c:fd:7d:b3:3a:de:84:39:54:4b:
         db:25:00:bf:33:37:56:fc:91:9f:e3:0b:1b:8c:8b:0c:21:47:
         bd:e1:3a:ca:0d:92:ab:b7:6b:29:78:03:9d:5a:ab:7a:50:8d:
         d4:c0:24:75:59:d5:ea:64:7c:d7:f4:52:6c:4f:54:5e:27:c1:
         56:d5:a7:9c:77:29:5f:e8:c3:a9:82:7b:24:dd:f5:59:45:61:
         0a:6f:10:b8:a5:45:d4:4c:87:44:95:de:14:b7:88:0c:1c:bb:
         71:3a:ac:c0:50:1f:89:ca:90:fc:19:2c:1c:41:53:1b:57:f1:
         71:9c:9d:52:45:74:a0:dd:04:09:04:0e:f1:53:0a:fd:22:72:
         a9:cf:c9:09:a8:db:80:54:4f:aa:a3:27:8e:05:f9:19:1e:7d:
         29:dc:69:40:b4:4f:24:2e:5b:91:90:6a:a2:d4:f3:6e:b1:ca:
         ff:57:7b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org