Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/0/323830343a356663633a3a2f33322d3332203d3e20323639313234.roa
File:                     323830343a356663633a3a2f33322d3332203d3e20323639313234.roa (raw, json)
Hash identifier:          Q+pKD9TwC4j8wsUI7ktcDu+G7vktrQsZfhr3voJ+kKs=
Subject key identifier:   4C:4E:1A:C2:4A:80:8F:38:AC:86:49:4B:90:6E:17:BB:15:E7:F6:DB
Certificate issuer:       /CN=93351268B2EE7F59D52332F376182868B4D6E70E
Certificate serial:       726EEB9207406099639149CBA336A77DC98849B3
Authority key identifier: 93:35:12:68:B2:EE:7F:59:D5:23:32:F3:76:18:28:68:B4:D6:E7:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93351268B2EE7F59D52332F376182868B4D6E70E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/0/323830343a356663633a3a2f33322d3332203d3e20323639313234.roa
Signing time:             Tue 14 Nov 2023 22:27:32 +0000
ROA not before:           Tue 14 Nov 2023 22:22:32 +0000
ROA not after:            Tue 12 Nov 2024 22:27:32 +0000
asID:                     269124
IP address blocks:        2804:5fcc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:6e:eb:92:07:40:60:99:63:91:49:cb:a3:36:a7:7d:c9:88:49:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93351268B2EE7F59D52332F376182868B4D6E70E
        Validity
            Not Before: Nov 14 22:22:32 2023 GMT
            Not After : Nov 12 22:27:32 2024 GMT
        Subject: CN=4C4E1AC24A808F38AC86494B906E17BB15E7F6DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:97:be:31:e8:ea:7c:80:d1:ac:c4:d2:b4:04:
                    19:09:0c:e2:0e:6e:04:83:56:49:bd:de:20:66:e5:
                    c8:ad:de:0f:9c:a7:ae:a7:3c:b3:4b:0e:e7:3c:67:
                    f7:5a:4b:6a:b1:89:1e:ca:16:94:85:6c:0e:81:d1:
                    82:b1:75:78:f6:59:eb:44:42:f4:39:7e:39:62:29:
                    88:aa:fa:3e:90:47:52:d5:38:58:06:ad:5b:45:cd:
                    f0:bd:7f:e5:5e:87:7b:ac:ee:02:98:13:7a:9f:dd:
                    f4:c9:5b:ca:0c:03:11:a3:e9:09:34:d6:ea:55:7e:
                    b2:29:60:56:44:16:d8:01:53:88:7a:d9:de:0c:fb:
                    02:f9:e7:2b:9d:0f:67:ab:60:c3:b1:3c:3b:cf:a2:
                    7f:31:fd:0e:bb:84:a2:f9:d5:7a:2f:70:fd:45:da:
                    e4:43:ef:f1:d5:bc:e8:f3:e4:75:0a:07:8b:ab:f3:
                    8e:f8:c1:8b:a5:a8:0d:94:2b:d8:b5:f3:79:48:fe:
                    4f:05:3f:bd:9a:18:0f:bf:4f:e6:8e:a1:ad:f9:53:
                    3f:33:b5:14:51:1e:54:43:79:0b:75:2f:45:8c:5b:
                    86:8d:29:a3:18:51:5e:d5:40:b0:5f:0a:37:1a:d9:
                    9a:a3:91:f0:6b:64:c1:39:22:2b:4e:a2:16:3b:f0:
                    95:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4E:1A:C2:4A:80:8F:38:AC:86:49:4B:90:6E:17:BB:15:E7:F6:DB
            X509v3 Authority Key Identifier:
                keyid:93:35:12:68:B2:EE:7F:59:D5:23:32:F3:76:18:28:68:B4:D6:E7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/0/93351268B2EE7F59D52332F376182868B4D6E70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93351268B2EE7F59D52332F376182868B4D6E70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/0/323830343a356663633a3a2f33322d3332203d3e20323639313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5fcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:a4:5b:a8:f3:9c:b6:60:51:a9:e8:df:3d:44:03:7a:10:f5:
         76:cd:ba:ac:be:34:44:91:28:11:32:a4:43:7b:d7:1a:fe:9c:
         71:37:af:72:a8:2f:58:68:14:70:14:93:54:ef:9a:9e:0f:51:
         ea:a8:89:d6:c4:35:33:19:5b:bb:9a:dd:44:72:0a:ac:1f:71:
         5f:77:e6:b2:bf:b4:fe:d5:a2:7a:99:0c:95:39:fe:86:77:c9:
         a8:bd:fc:6c:1d:c3:21:8e:8b:62:08:ad:0f:d0:93:18:c9:92:
         60:67:35:33:98:77:ce:eb:6a:7f:ff:f0:6f:4f:4a:be:22:6e:
         a4:51:4f:c0:90:9c:dd:8f:58:24:bd:67:73:d9:d0:40:8e:05:
         21:f5:10:c1:d4:3f:c9:f9:ae:76:94:e8:ff:6a:ec:a7:d9:ad:
         6a:91:c5:46:19:cc:51:01:ce:d9:d6:06:1f:b9:4b:7a:2e:fd:
         80:7f:ee:71:d8:99:fa:91:8a:cc:b4:b1:40:ea:d8:1b:21:34:
         63:ac:1b:66:32:16:2e:3c:57:a0:ab:20:49:c4:f5:d1:98:11:
         bf:e4:81:d1:ba:ee:57:3c:6a:1c:ac:62:5a:28:e3:69:45:c1:
         5f:53:46:f8:3d:a4:49:8f:3b:d6:45:68:08:aa:5f:d6:31:42:
         c3:2d:a2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org