Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4hbYKyyMRS12RURTGbLAgZfqminRnSWkdyKq6kowQva/0/323830343a343637303a363030303a3a2f33352d3335203d3e20323636393839.roa
File:                     323830343a343637303a363030303a3a2f33352d3335203d3e20323636393839.roa (raw, json)
Hash identifier:          GKP0WpIuhZiLXsk5Q0mYEQcfVyIva/LB590K+FIWXno=
Subject key identifier:   CA:BA:60:6F:53:49:D7:EE:AC:BF:CA:8F:A3:06:6F:D5:2D:1B:2B:44
Certificate issuer:       /CN=11E1368454EE4321A3D47283E551C91FAE044C9F
Certificate serial:       15AD62C59BEAE3EEFA3BBA66476EE6F048F51895
Authority key identifier: 11:E1:36:84:54:EE:43:21:A3:D4:72:83:E5:51:C9:1F:AE:04:4C:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11E1368454EE4321A3D47283E551C91FAE044C9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4hbYKyyMRS12RURTGbLAgZfqminRnSWkdyKq6kowQva/0/323830343a343637303a363030303a3a2f33352d3335203d3e20323636393839.roa
Signing time:             Tue 02 May 2023 15:49:45 +0000
ROA not before:           Tue 02 May 2023 15:44:45 +0000
ROA not after:            Tue 30 Apr 2024 15:49:45 +0000
asID:                     266989
IP address blocks:        2804:4670:6000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ad:62:c5:9b:ea:e3:ee:fa:3b:ba:66:47:6e:e6:f0:48:f5:18:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11E1368454EE4321A3D47283E551C91FAE044C9F
        Validity
            Not Before: May  2 15:44:45 2023 GMT
            Not After : Apr 30 15:49:45 2024 GMT
        Subject: CN=CABA606F5349D7EEACBFCA8FA3066FD52D1B2B44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:27:f8:46:6c:14:66:5a:89:18:3e:dd:e1:83:
                    cf:0a:2e:12:1f:56:c1:4c:15:34:1f:a8:7a:2c:0d:
                    f4:64:49:ab:2a:15:40:27:72:02:87:e4:35:34:bc:
                    2f:43:23:e5:de:ec:51:1e:8e:ac:8d:ce:2f:38:49:
                    ca:27:d8:63:5c:9a:ed:6a:0b:99:8c:1a:6f:0a:cf:
                    76:12:63:20:aa:a7:84:04:d7:3f:75:cb:f2:4d:c0:
                    d0:30:66:bf:a0:82:50:23:ca:7d:18:78:01:1e:c4:
                    a0:75:d5:d1:ce:c0:29:ac:13:22:63:9c:47:73:b4:
                    a4:58:e0:80:78:16:fa:d5:96:6a:c9:1a:a3:65:62:
                    da:64:0d:cd:30:ad:02:bb:7e:26:95:9e:98:07:cc:
                    7e:66:dd:81:88:a0:04:03:e4:00:ab:46:c9:c0:ab:
                    7d:14:15:d9:da:8b:9f:39:15:ec:fd:32:2d:5b:d1:
                    69:a3:88:f8:ad:39:3b:da:b0:2f:7d:1c:b1:3c:ee:
                    57:ed:a5:1e:99:8a:58:32:da:e1:da:a7:73:3a:de:
                    7e:5a:dc:da:30:32:e2:ca:9b:75:c8:aa:14:c0:bd:
                    37:9f:e5:59:31:0c:85:5a:d1:af:56:39:db:63:7b:
                    da:f8:d7:1c:76:a5:64:90:5e:1c:3d:0c:f7:42:49:
                    8f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BA:60:6F:53:49:D7:EE:AC:BF:CA:8F:A3:06:6F:D5:2D:1B:2B:44
            X509v3 Authority Key Identifier:
                keyid:11:E1:36:84:54:EE:43:21:A3:D4:72:83:E5:51:C9:1F:AE:04:4C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4hbYKyyMRS12RURTGbLAgZfqminRnSWkdyKq6kowQva/0/11E1368454EE4321A3D47283E551C91FAE044C9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11E1368454EE4321A3D47283E551C91FAE044C9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4hbYKyyMRS12RURTGbLAgZfqminRnSWkdyKq6kowQva/0/323830343a343637303a363030303a3a2f33352d3335203d3e20323636393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4670:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         55:40:ab:92:89:5b:93:9c:ff:9a:e5:34:30:ef:27:71:ea:81:
         68:f8:44:b8:c0:b5:a2:db:e9:de:ce:09:2e:d8:1f:99:f8:db:
         da:e7:b5:67:e3:fb:fc:f0:8b:35:ec:12:61:b9:c6:8a:e5:03:
         f4:6f:9f:a6:da:9b:e3:2e:4d:89:78:f9:4f:49:67:eb:dc:34:
         69:b7:05:3a:be:04:6b:03:ca:59:ac:15:20:78:4c:dc:c7:31:
         63:e7:af:0f:9a:34:7c:c9:ea:dd:f3:df:af:c4:ef:e4:73:9a:
         0d:1e:a6:68:69:48:37:db:5c:31:b1:fb:c4:11:c9:ef:07:89:
         27:c5:64:9c:a5:c9:15:2e:db:c4:25:dc:78:2b:98:c3:7e:00:
         19:5b:3e:b8:c6:80:7b:aa:af:c3:0d:b0:e7:c9:8f:14:31:eb:
         45:66:bc:98:a7:70:ca:c4:98:75:00:03:af:f9:f3:13:8f:69:
         b9:79:0d:75:43:b8:7c:24:dc:ae:90:c4:65:46:6f:ec:5e:90:
         73:97:10:d3:a3:bb:26:62:77:0b:7f:8f:a0:d8:b3:61:df:ed:
         e5:f8:53:0f:70:1e:08:5a:7a:05:19:bc:99:28:f3:e1:19:0e:
         44:46:ab:84:12:2c:8d:24:a4:aa:46:2a:46:ee:05:9a:37:09:
         aa:4a:43:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org