Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dMbnvmSwqAtbqdDnr7TxTFdi34vH4i9ru69qGdh8VzD/0/323830343a356536383a3a2f33322d313238203d3e20323639303331.roa
File:                     323830343a356536383a3a2f33322d313238203d3e20323639303331.roa (raw, json)
Hash identifier:          e33OhzNI6+U0v1gZSEkEKiaGitsck1HkHTycel29W34=
Subject key identifier:   44:F9:05:9C:27:B5:5E:7B:20:24:B0:68:A0:F0:5A:08:8C:CD:C0:E7
Certificate issuer:       /CN=81E0C5E7A0853F16479E0F5454AA1CDC4F5359FC
Certificate serial:       490F8CD41733F338AE5D0A91B7BF0F692ADBFFBB
Authority key identifier: 81:E0:C5:E7:A0:85:3F:16:47:9E:0F:54:54:AA:1C:DC:4F:53:59:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81E0C5E7A0853F16479E0F5454AA1CDC4F5359FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dMbnvmSwqAtbqdDnr7TxTFdi34vH4i9ru69qGdh8VzD/0/323830343a356536383a3a2f33322d313238203d3e20323639303331.roa
Signing time:             Mon 12 Feb 2024 14:36:57 +0000
ROA not before:           Mon 12 Feb 2024 14:31:57 +0000
ROA not after:            Mon 10 Feb 2025 14:36:57 +0000
asID:                     269031
IP address blocks:        2804:5e68::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:0f:8c:d4:17:33:f3:38:ae:5d:0a:91:b7:bf:0f:69:2a:db:ff:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81E0C5E7A0853F16479E0F5454AA1CDC4F5359FC
        Validity
            Not Before: Feb 12 14:31:57 2024 GMT
            Not After : Feb 10 14:36:57 2025 GMT
        Subject: CN=44F9059C27B55E7B2024B068A0F05A088CCDC0E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6c:d3:4f:b8:0f:75:26:b7:92:86:d3:c8:15:
                    c1:07:9c:4a:47:dc:4d:89:72:58:94:b9:5d:8f:41:
                    6b:19:90:e2:25:75:ca:02:49:05:65:8e:e2:4c:ed:
                    b8:d5:5c:68:19:c8:4b:18:dc:8b:d5:fa:7c:70:f9:
                    66:9c:11:54:87:dd:db:3d:34:a0:24:26:80:27:d5:
                    3d:c7:e5:9c:06:48:a0:e8:5d:94:bc:89:86:32:8f:
                    aa:e7:3c:2a:54:66:39:15:0c:3d:f6:00:1d:3f:70:
                    ca:87:7a:4a:0c:3a:69:7f:88:39:c6:4f:18:b2:9d:
                    65:e9:17:35:e3:84:ca:2a:d7:8a:e8:65:9b:87:09:
                    69:f2:92:46:1c:1f:79:a8:e3:91:d5:39:69:ff:98:
                    12:3d:c2:85:49:7e:a8:b6:53:b7:b7:af:1e:ae:b0:
                    40:99:d5:9f:94:3d:b3:08:56:05:dc:ea:88:37:66:
                    37:0b:f2:2e:ef:c2:0a:40:49:4d:ff:29:ce:4d:ca:
                    f3:34:15:79:84:b7:8f:37:f3:a2:e7:74:26:0d:73:
                    1a:78:1c:b7:42:44:81:16:7d:3d:bb:60:5d:6c:3d:
                    58:a1:e0:27:3e:2f:9c:9c:95:45:41:1a:19:15:38:
                    29:00:ea:10:7e:74:cd:d3:4c:c5:f9:fc:c0:71:6b:
                    ee:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F9:05:9C:27:B5:5E:7B:20:24:B0:68:A0:F0:5A:08:8C:CD:C0:E7
            X509v3 Authority Key Identifier:
                keyid:81:E0:C5:E7:A0:85:3F:16:47:9E:0F:54:54:AA:1C:DC:4F:53:59:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dMbnvmSwqAtbqdDnr7TxTFdi34vH4i9ru69qGdh8VzD/0/81E0C5E7A0853F16479E0F5454AA1CDC4F5359FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81E0C5E7A0853F16479E0F5454AA1CDC4F5359FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dMbnvmSwqAtbqdDnr7TxTFdi34vH4i9ru69qGdh8VzD/0/323830343a356536383a3a2f33322d313238203d3e20323639303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e68::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:61:f7:ec:93:1f:d4:b8:b8:81:87:6b:e7:cd:81:e3:75:1c:
         8a:4e:a2:b4:d3:28:ff:95:2e:5c:97:83:90:0d:d5:17:49:7a:
         f1:9f:ec:e0:df:8f:fa:cf:b0:aa:f4:cb:55:7a:5a:a6:de:02:
         91:79:14:02:24:4f:67:ad:8d:8a:03:eb:f1:ad:4c:00:8d:12:
         f6:6c:80:a8:cd:e8:20:4c:41:86:65:bd:92:46:d2:d9:ee:95:
         ac:6a:9a:36:f3:09:48:2a:07:0b:32:28:65:e7:12:67:19:01:
         2c:22:ee:ed:70:99:a5:ad:b0:03:82:53:05:29:fe:d6:0a:15:
         e5:3c:93:fc:26:3f:2e:ba:60:59:fb:67:5a:67:da:3c:8b:d6:
         62:11:24:67:7a:54:21:77:b1:63:77:4a:4d:c5:47:31:62:c5:
         23:58:79:db:da:55:14:12:7f:68:3c:77:be:9b:08:72:9f:61:
         d0:f4:33:ff:c0:32:59:9e:da:ce:61:ea:af:0e:98:d3:32:49:
         da:f9:06:bb:03:3a:d0:41:f7:38:81:af:8e:37:33:11:7c:25:
         60:9b:e5:d5:6e:be:90:f4:55:3c:15:d2:d0:50:24:ad:ec:57:
         db:b4:66:aa:d0:65:ed:13:68:d2:b0:aa:c6:4e:7f:d2:81:69:
         47:3d:d5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org