Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/0/323830343a363761303a3a2f33322d3438203d3e20323639363430.roa
File:                     323830343a363761303a3a2f33322d3438203d3e20323639363430.roa (raw, json)
Hash identifier:          j4j8k6MRAOZXWKxbhhxkJtpz8jWNgH2aLdM4KsPY1/w=
Subject key identifier:   54:64:8B:F5:E7:E1:29:19:C6:A7:52:3B:BF:B2:B1:F7:AC:5A:3C:A5
Certificate issuer:       /CN=E4E930115352E8D716089CC9D548A7853F79F50E
Certificate serial:       1994BB75D6C002715015AE0B333009D114B23541
Authority key identifier: E4:E9:30:11:53:52:E8:D7:16:08:9C:C9:D5:48:A7:85:3F:79:F5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E4E930115352E8D716089CC9D548A7853F79F50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/0/323830343a363761303a3a2f33322d3438203d3e20323639363430.roa
Signing time:             Fri 17 Nov 2023 19:15:04 +0000
ROA not before:           Fri 17 Nov 2023 19:10:04 +0000
ROA not after:            Fri 15 Nov 2024 19:15:04 +0000
asID:                     269640
IP address blocks:        2804:67a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:94:bb:75:d6:c0:02:71:50:15:ae:0b:33:30:09:d1:14:b2:35:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4E930115352E8D716089CC9D548A7853F79F50E
        Validity
            Not Before: Nov 17 19:10:04 2023 GMT
            Not After : Nov 15 19:15:04 2024 GMT
        Subject: CN=54648BF5E7E12919C6A7523BBFB2B1F7AC5A3CA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:88:27:cd:2a:39:08:d5:ef:fb:e4:66:82:6b:
                    9e:b9:c2:a8:bb:4b:1c:83:70:a9:f8:c8:5d:1d:29:
                    dd:7a:0f:8b:a4:e1:d6:49:29:7c:2e:63:57:1b:f7:
                    60:20:ff:a6:b3:90:a3:4e:b3:df:f5:96:c0:5d:6e:
                    0c:31:c4:6e:c7:aa:06:55:ca:4c:37:d7:29:8e:84:
                    c5:92:0c:cc:6f:03:f7:c4:e3:81:aa:39:66:32:45:
                    29:82:f0:41:4e:98:44:71:82:d0:ed:51:e2:7c:56:
                    4d:3b:0b:5a:4e:3e:a1:50:72:f7:1d:36:84:42:0b:
                    80:c9:4e:71:f2:b6:bc:8a:3f:52:c7:31:33:63:cc:
                    9d:30:7d:84:a8:26:21:68:e4:19:29:34:ac:4a:cb:
                    2f:ac:02:8d:f5:d0:d2:7f:60:ce:03:46:7a:b4:2a:
                    1c:e1:b2:f7:de:07:76:33:c8:b1:91:45:2e:67:56:
                    96:5c:82:33:dc:30:9e:6f:95:2d:7a:07:d4:e7:7a:
                    64:ad:b7:4a:e3:70:19:86:d5:44:e2:a5:94:c0:ca:
                    ca:4f:4c:c2:cf:6a:e1:11:9d:ab:68:83:b8:39:4a:
                    1b:57:96:c5:86:6f:4b:f4:b1:7a:d5:fd:50:40:41:
                    9e:ae:43:19:d2:8d:9f:7a:95:b1:1d:6e:c8:cd:05:
                    a0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:64:8B:F5:E7:E1:29:19:C6:A7:52:3B:BF:B2:B1:F7:AC:5A:3C:A5
            X509v3 Authority Key Identifier:
                keyid:E4:E9:30:11:53:52:E8:D7:16:08:9C:C9:D5:48:A7:85:3F:79:F5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/0/E4E930115352E8D716089CC9D548A7853F79F50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E4E930115352E8D716089CC9D548A7853F79F50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/0/323830343a363761303a3a2f33322d3438203d3e20323639363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:08:5a:0b:e1:3f:c9:d1:3b:9e:0a:be:25:b6:a9:6d:93:8b:
         22:68:0c:4f:ec:5c:90:a0:7c:0a:70:f5:32:6f:95:ca:80:29:
         0a:1c:61:a2:6b:e8:21:bf:e7:6f:cb:15:62:ed:c0:4c:32:0b:
         f5:7f:3f:a1:b7:03:dd:50:5e:84:7d:a6:48:d7:25:d2:e4:99:
         32:93:ec:56:2b:e6:92:d0:da:97:7c:55:13:ef:c6:bf:3a:d4:
         d9:f0:4e:88:d3:e5:08:5f:57:4f:d0:d9:2f:ea:82:d7:24:2f:
         91:9a:5d:e5:7e:1a:d4:5f:79:c3:8f:9c:fd:c1:5f:84:d2:d7:
         05:27:40:46:7b:af:8e:40:d8:1a:02:05:9f:df:6e:91:db:2d:
         8a:5d:64:a9:db:23:9e:2e:b9:dd:5c:75:05:e4:07:ce:5a:2d:
         95:96:21:15:a5:9b:ac:46:90:0a:04:86:98:9a:73:0e:31:63:
         e9:c7:a6:d9:e0:3e:6f:a7:2e:9d:2b:60:0f:22:a6:73:98:d1:
         7e:3f:1f:7a:de:3b:19:45:4f:45:7e:ef:51:9b:94:a1:a1:36:
         bd:9c:c2:5a:9e:8a:10:28:89:37:ec:3c:dc:97:9a:31:57:e4:
         4b:d8:91:93:77:de:5a:68:dc:2d:57:96:38:58:d0:4a:8e:be:
         b6:fa:8c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org