Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a3a2f33322d3438203d3e20323633333338.roa
File:                     323830343a313439343a3a2f33322d3438203d3e20323633333338.roa (raw, json)
Hash identifier:          1Ci5iV1ukxfBEnF19eoz2mttN6GC8sP7MinXGRglBXU=
Subject key identifier:   AA:55:58:CE:E1:32:43:31:17:78:DD:E7:21:EC:5F:DE:2E:F3:6F:E1
Certificate issuer:       /CN=91A9E6C248023AA7E89B8B2B7D0950ED80FD54AA
Certificate serial:       1BFBB1D0EEA021D8F87E1F5AB9E12FFDD3EB97E1
Authority key identifier: 91:A9:E6:C2:48:02:3A:A7:E8:9B:8B:2B:7D:09:50:ED:80:FD:54:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91A9E6C248023AA7E89B8B2B7D0950ED80FD54AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a3a2f33322d3438203d3e20323633333338.roa
Signing time:             Fri 28 Jul 2023 14:14:00 +0000
ROA not before:           Fri 28 Jul 2023 14:09:00 +0000
ROA not after:            Fri 26 Jul 2024 14:14:00 +0000
asID:                     263338
IP address blocks:        2804:1494::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:fb:b1:d0:ee:a0:21:d8:f8:7e:1f:5a:b9:e1:2f:fd:d3:eb:97:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91A9E6C248023AA7E89B8B2B7D0950ED80FD54AA
        Validity
            Not Before: Jul 28 14:09:00 2023 GMT
            Not After : Jul 26 14:14:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:83:6a:ad:38:ec:bb:15:bc:dd:a1:67:ab:bd:
                    fa:43:c8:d1:47:c1:9b:12:b8:12:fd:f6:fa:5d:56:
                    b9:63:83:19:75:ae:6f:a9:eb:9d:47:df:6f:09:f2:
                    a9:44:8b:ad:b6:18:c1:fa:f8:06:d9:cf:ca:89:9c:
                    a7:39:51:94:3a:6e:15:06:9c:ae:d7:5a:79:09:bf:
                    33:4e:d0:b3:3d:b6:ba:5e:23:45:67:4d:4b:32:f9:
                    38:5d:de:5e:1c:bc:f8:99:b8:9d:f3:e5:3a:51:82:
                    e3:2d:70:b1:68:f0:43:ef:6f:4d:56:66:17:f5:7c:
                    47:f9:5a:b2:17:a6:5c:2b:75:39:c1:ee:69:60:5d:
                    ea:59:da:38:9a:0d:48:70:9b:f2:35:ff:5a:50:70:
                    5f:9a:9c:b8:cd:03:18:f0:cb:5c:d1:ed:c3:04:5c:
                    23:31:9d:f9:54:27:ce:3b:ee:16:af:c2:ff:27:5e:
                    70:8e:af:94:3a:00:f1:4d:75:03:6a:de:bf:87:c3:
                    e0:8b:1f:61:34:54:f4:ee:23:c9:bc:a5:66:35:18:
                    4a:e6:18:bf:77:7c:76:de:7e:33:7d:09:88:cf:bf:
                    63:24:cc:61:3e:b0:5c:df:c2:e9:29:3d:b7:62:84:
                    76:60:56:b1:04:c5:f5:4d:74:88:7f:9c:2a:5b:ec:
                    72:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:55:58:CE:E1:32:43:31:17:78:DD:E7:21:EC:5F:DE:2E:F3:6F:E1
            X509v3 Authority Key Identifier:
                keyid:91:A9:E6:C2:48:02:3A:A7:E8:9B:8B:2B:7D:09:50:ED:80:FD:54:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/91A9E6C248023AA7E89B8B2B7D0950ED80FD54AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91A9E6C248023AA7E89B8B2B7D0950ED80FD54AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a3a2f33322d3438203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1494::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:ef:34:d7:fa:e6:5b:b1:7a:2d:ae:12:25:01:fb:30:27:40:
         18:0b:99:f8:3f:3c:13:26:ef:16:31:9a:17:ed:06:e2:42:a1:
         d4:3d:7e:b3:be:32:68:6e:37:9c:43:62:d0:70:5f:f4:a1:7c:
         ec:16:f9:ce:cf:50:a6:e8:ad:26:89:cd:9e:31:29:06:0f:f8:
         61:84:24:64:15:0f:09:16:ad:73:0e:62:9b:0a:ed:a8:e5:c7:
         42:03:fd:24:f1:47:f4:b3:23:31:59:44:4e:22:5b:3c:ac:18:
         62:13:47:eb:2a:e0:00:1f:91:9c:bc:0c:8f:31:54:b6:be:c8:
         88:9c:d8:d0:ee:18:93:e5:4b:17:23:65:ae:4b:ae:fe:52:00:
         51:a0:19:8f:8c:4c:32:29:f5:8c:34:e0:fb:36:f0:7b:9f:d7:
         0e:c9:f6:81:5d:5f:29:01:a2:b2:83:5e:6e:33:b6:b0:b6:9b:
         8b:62:40:1b:b4:4b:63:42:03:9b:c1:1d:8a:16:77:ae:44:e5:
         87:56:27:1d:d6:7a:3a:ed:b0:46:37:15:f8:f0:12:8b:7f:cb:
         19:71:57:87:e9:6e:87:44:79:ec:1a:82:1f:e6:4b:e2:3d:a9:
         d4:a2:73:09:8e:72:8d:0e:d0:c5:04:6b:1b:36:4f:7d:c5:79:
         43:73:f8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org