Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/0/323830343a356266633a3a2f33322d3438203d3e20323638383831.roa
File:                     323830343a356266633a3a2f33322d3438203d3e20323638383831.roa (raw, json)
Hash identifier:          6OKnX25Q/zhs65HFZAV6uQvsO72dqiQovHkKzsHJXIE=
Subject key identifier:   78:8E:1E:A5:DB:CF:6D:71:18:A6:6B:5D:4A:E6:6A:79:28:61:06:04
Certificate issuer:       /CN=C345508521A4D25F6D9144D869E703D092920C95
Certificate serial:       7D2E160992EDC3372CB10E6A93EB336695DF847E
Authority key identifier: C3:45:50:85:21:A4:D2:5F:6D:91:44:D8:69:E7:03:D0:92:92:0C:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C345508521A4D25F6D9144D869E703D092920C95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/0/323830343a356266633a3a2f33322d3438203d3e20323638383831.roa
Signing time:             Sat 27 Jan 2024 19:00:00 +0000
ROA not before:           Sat 27 Jan 2024 18:55:00 +0000
ROA not after:            Mon 27 Jan 2025 19:00:00 +0000
asID:                     268881
IP address blocks:        2804:5bfc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:2e:16:09:92:ed:c3:37:2c:b1:0e:6a:93:eb:33:66:95:df:84:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C345508521A4D25F6D9144D869E703D092920C95
        Validity
            Not Before: Jan 27 18:55:00 2024 GMT
            Not After : Jan 27 19:00:00 2025 GMT
        Subject: CN=3082010A0282010100B5F8D21EFE9138C3E4453CE1154A4ECD50E75814624FE7E68CA6749F0100ADDA43E8731B5BC69A432116AA2F6C58858E848E153C4550646E34C664B19B20C4F28B0B4707EF0EBD4BBBBCC42AA9638BEC7E7910C7B3B0FCE9D1D98E2D45E433A22DBC1D907F5B5BC48D3175FFB1A9308EC102BEE465936EEBFDEFC5925303B6C2E4143F2D4CB199E26C580E6CD4C1232A8549548B52C5A410909B59310447EA86D63779ADCCB1F3347736EE55D96D99950AAD1E39B1CCAD0E1FD282018FEFCE52004EB86C1FC9868A98CF15EAC068C0C4254F20DD393547582901FB853FD9DD04125903D9DCBDCBB7E99349745CDA126B7217A5654CC1FC7771F8F5F50C8589890203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f8:d2:1e:fe:91:38:c3:e4:45:3c:e1:15:4a:
                    4e:cd:50:e7:58:14:62:4f:e7:e6:8c:a6:74:9f:01:
                    00:ad:da:43:e8:73:1b:5b:c6:9a:43:21:16:aa:2f:
                    6c:58:85:8e:84:8e:15:3c:45:50:64:6e:34:c6:64:
                    b1:9b:20:c4:f2:8b:0b:47:07:ef:0e:bd:4b:bb:bc:
                    c4:2a:a9:63:8b:ec:7e:79:10:c7:b3:b0:fc:e9:d1:
                    d9:8e:2d:45:e4:33:a2:2d:bc:1d:90:7f:5b:5b:c4:
                    8d:31:75:ff:b1:a9:30:8e:c1:02:be:e4:65:93:6e:
                    eb:fd:ef:c5:92:53:03:b6:c2:e4:14:3f:2d:4c:b1:
                    99:e2:6c:58:0e:6c:d4:c1:23:2a:85:49:54:8b:52:
                    c5:a4:10:90:9b:59:31:04:47:ea:86:d6:37:79:ad:
                    cc:b1:f3:34:77:36:ee:55:d9:6d:99:95:0a:ad:1e:
                    39:b1:cc:ad:0e:1f:d2:82:01:8f:ef:ce:52:00:4e:
                    b8:6c:1f:c9:86:8a:98:cf:15:ea:c0:68:c0:c4:25:
                    4f:20:dd:39:35:47:58:29:01:fb:85:3f:d9:dd:04:
                    12:59:03:d9:dc:bd:cb:b7:e9:93:49:74:5c:da:12:
                    6b:72:17:a5:65:4c:c1:fc:77:71:f8:f5:f5:0c:85:
                    89:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8E:1E:A5:DB:CF:6D:71:18:A6:6B:5D:4A:E6:6A:79:28:61:06:04
            X509v3 Authority Key Identifier:
                keyid:C3:45:50:85:21:A4:D2:5F:6D:91:44:D8:69:E7:03:D0:92:92:0C:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/0/C345508521A4D25F6D9144D869E703D092920C95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C345508521A4D25F6D9144D869E703D092920C95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/0/323830343a356266633a3a2f33322d3438203d3e20323638383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bfc::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:0c:20:77:63:bc:e0:a1:a4:a6:56:20:74:fd:32:d5:55:8c:
         00:bf:04:d4:58:48:7c:25:8e:54:a8:bb:19:14:a7:41:9f:cd:
         61:a4:bc:8c:e1:09:af:93:19:d9:8c:25:3c:f3:96:b6:bb:8e:
         fe:08:cc:b0:84:64:e6:5d:64:1a:a1:26:b5:76:c7:3c:81:b9:
         6d:8a:b0:87:e0:13:61:b1:4e:86:fb:66:f9:71:a3:dd:52:0e:
         59:a7:c7:95:5c:86:b9:13:34:19:80:b7:fa:af:89:79:39:1b:
         8d:a9:52:4e:c0:6e:ce:d8:fc:62:aa:c0:b5:50:a2:3e:f5:c4:
         4e:80:06:90:2b:1f:75:6c:7c:20:14:86:2a:45:ca:6d:14:51:
         e0:4b:60:33:f3:71:73:f5:53:9b:bc:42:54:46:cb:1c:a2:d9:
         07:35:0c:37:6f:86:8d:19:ed:d7:08:03:71:5c:57:6b:82:90:
         cd:35:35:b7:c2:85:5e:56:b4:c7:43:ec:69:ad:7c:c6:db:94:
         59:bf:49:b4:ce:f2:6b:e2:5c:14:a5:69:71:ad:c0:a0:09:79:
         3e:4a:8b:26:3f:83:f7:5b:80:66:4c:d0:0f:f4:05:2a:1b:64:
         10:26:b2:a7:39:91:d4:fb:11:3d:c5:4e:2a:f9:92:69:51:2d:
         5e:a6:5d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org