Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/0/323830343a336333303a3a2f33322d313238203d3e20323636313935.roa
File:                     323830343a336333303a3a2f33322d313238203d3e20323636313935.roa (raw, json)
Hash identifier:          y/5ZVTI6RJAvIyWjiu9jLVQZX7dhjpqewhoVTUzWjQI=
Subject key identifier:   F8:1C:71:02:CA:2D:36:4D:E8:95:4D:BA:3F:CF:C2:9A:3E:BB:13:71
Certificate issuer:       /CN=67EA701434960D575DDC6F2D9E89E9155833AF65
Certificate serial:       0C20986E99968306B268A7E5BAB8767EE19F4F68
Authority key identifier: 67:EA:70:14:34:96:0D:57:5D:DC:6F:2D:9E:89:E9:15:58:33:AF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67EA701434960D575DDC6F2D9E89E9155833AF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/0/323830343a336333303a3a2f33322d313238203d3e20323636313935.roa
Signing time:             Mon 20 Nov 2023 14:47:38 +0000
ROA not before:           Mon 20 Nov 2023 14:42:38 +0000
ROA not after:            Mon 18 Nov 2024 14:47:38 +0000
asID:                     266195
IP address blocks:        2804:3c30::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:20:98:6e:99:96:83:06:b2:68:a7:e5:ba:b8:76:7e:e1:9f:4f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67EA701434960D575DDC6F2D9E89E9155833AF65
        Validity
            Not Before: Nov 20 14:42:38 2023 GMT
            Not After : Nov 18 14:47:38 2024 GMT
        Subject: CN=F81C7102CA2D364DE8954DBA3FCFC29A3EBB1371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:12:f0:f3:39:af:ba:89:02:c8:de:51:01:2c:
                    c5:a1:57:70:5e:25:b2:48:5f:88:90:a4:52:2d:bc:
                    4d:35:5a:8d:35:29:72:1a:fc:76:f7:56:7b:6d:ba:
                    96:74:c7:a6:94:83:37:11:da:bd:5f:c4:3d:f3:02:
                    a1:84:8c:76:aa:b4:2a:92:93:5c:77:d8:29:39:56:
                    c4:bb:88:09:8d:3a:b9:11:b1:e3:42:a8:42:a8:37:
                    15:0f:0f:2a:2c:8d:d3:de:fa:8e:20:a9:f0:c9:7f:
                    b6:fa:10:ba:68:12:9d:1b:b8:6c:27:e0:80:24:99:
                    33:a1:aa:74:4e:1a:ea:a5:a0:87:04:1e:7e:16:19:
                    57:0a:75:31:bc:c2:54:85:ed:6d:e5:c5:79:54:7a:
                    3d:95:9a:ec:ed:6c:d0:37:54:1f:54:e1:b4:eb:a6:
                    46:8b:19:19:97:f7:43:9f:df:42:2d:38:75:2e:d6:
                    dc:5e:dc:34:4e:5e:f2:15:e4:2a:ae:8d:af:2b:44:
                    54:36:c8:b5:9d:1b:4f:d2:81:70:76:ce:67:c4:2b:
                    af:1e:b3:90:ef:8c:72:07:33:f8:f0:be:5b:f7:f3:
                    ce:5a:a7:57:a3:da:34:d5:1b:c9:f0:01:a9:18:1a:
                    c5:3a:6a:7d:55:94:4e:1c:cb:19:e5:57:d0:5c:bb:
                    6f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1C:71:02:CA:2D:36:4D:E8:95:4D:BA:3F:CF:C2:9A:3E:BB:13:71
            X509v3 Authority Key Identifier:
                keyid:67:EA:70:14:34:96:0D:57:5D:DC:6F:2D:9E:89:E9:15:58:33:AF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/0/67EA701434960D575DDC6F2D9E89E9155833AF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67EA701434960D575DDC6F2D9E89E9155833AF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/0/323830343a336333303a3a2f33322d313238203d3e20323636313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c30::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:98:37:95:0b:8a:ea:0e:54:c7:bb:ed:de:9f:4c:70:91:a6:
         a5:b3:ee:6b:b8:ba:52:c5:8b:98:8c:c4:3d:83:84:fe:02:e3:
         09:3d:88:17:a6:df:46:bf:e9:2e:96:b7:72:43:7c:91:64:4b:
         3d:2e:09:4a:cd:7a:cc:b3:cb:94:88:a4:39:97:06:04:31:67:
         80:13:4b:1a:a2:bc:78:25:d0:4f:5b:ec:43:25:dc:1a:bb:03:
         f8:30:45:e5:db:6d:bd:59:b2:7c:34:14:d2:29:76:14:84:8e:
         f1:b9:ec:d2:45:0b:f1:cc:31:25:be:bc:ca:2a:c9:eb:37:15:
         10:74:b4:b0:e4:cd:19:db:6e:5a:36:ff:1c:8e:94:c6:b5:1d:
         e4:b0:6a:81:fb:76:fe:e4:e7:7c:8a:fb:c8:38:7a:36:05:19:
         b5:ec:26:73:8a:6c:c5:9f:e3:7f:46:a6:e2:3d:16:1c:8c:7f:
         73:5e:c5:cc:15:55:31:b4:1a:96:f0:70:cf:70:f2:22:c9:70:
         29:f5:db:52:2f:40:a2:67:9a:cd:95:46:7f:26:fc:a6:0e:f7:
         ce:fe:d9:fe:28:c9:35:cf:46:3f:29:c3:6b:65:3a:73:02:bc:
         e8:85:e4:af:41:24:57:62:47:d8:cf:85:7d:fe:d1:03:d7:e0:
         c1:0e:fd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:09 2024 by rpki-client on console-fra.rpki-client.org