Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/323830343a323566303a3a2f33332d3333203d3e20323634333131.roa
File:                     323830343a323566303a3a2f33332d3333203d3e20323634333131.roa (raw, json)
Hash identifier:          vsLYXZQJNepZqU+EZoPnjBEHpwi2kphJOaZIhBwVLIQ=
Subject key identifier:   A8:9C:37:A9:57:7D:C6:00:EB:21:6B:68:2A:D2:59:55:19:1A:15:7E
Certificate issuer:       /CN=41E59B548B916216367A1DBCA5AD17479C65F6DA
Certificate serial:       22A08FBED9C6467113008482149AD4F28D95F249
Authority key identifier: 41:E5:9B:54:8B:91:62:16:36:7A:1D:BC:A5:AD:17:47:9C:65:F6:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/323830343a323566303a3a2f33332d3333203d3e20323634333131.roa
Signing time:             Fri 08 Sep 2023 12:00:00 +0000
ROA not before:           Fri 08 Sep 2023 11:55:00 +0000
ROA not after:            Fri 06 Sep 2024 12:00:00 +0000
asID:                     264311
IP address blocks:        2804:25f0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a0:8f:be:d9:c6:46:71:13:00:84:82:14:9a:d4:f2:8d:95:f2:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41E59B548B916216367A1DBCA5AD17479C65F6DA
        Validity
            Not Before: Sep  8 11:55:00 2023 GMT
            Not After : Sep  6 12:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:67:fd:be:7e:aa:84:94:09:a5:ce:5d:27:92:
                    1a:94:d4:2a:11:5b:6d:b4:b9:93:ca:49:16:44:d4:
                    2e:4a:37:c5:87:db:5b:a7:94:18:f5:67:18:4f:e6:
                    d7:0b:71:44:8d:eb:6d:5f:6d:00:4d:a5:9f:f9:41:
                    28:4c:07:54:13:6b:34:f0:e3:22:23:a8:62:79:6a:
                    4f:f4:f8:cb:3a:25:5c:fd:31:cf:fa:03:36:58:e3:
                    f8:0d:06:db:f1:ec:89:db:27:1d:77:2a:67:e5:21:
                    8e:44:9b:5a:b1:9e:93:d0:00:c0:e6:f3:26:7e:2e:
                    e4:43:ee:c3:38:5c:0e:4c:1e:44:57:03:02:cf:2e:
                    a2:bc:54:47:20:22:ef:ab:32:32:b0:8d:79:1e:24:
                    a6:a6:a4:ea:54:3a:98:8f:c7:f8:4c:48:06:ae:02:
                    51:6b:7c:db:43:f5:12:f1:ed:90:f8:07:0a:fa:41:
                    4b:6c:8c:bb:6c:5e:54:a7:65:f2:5b:eb:18:c0:5b:
                    63:a0:aa:8a:48:98:0c:c9:1e:68:36:6a:d8:69:be:
                    5a:28:8b:68:e1:54:be:8c:53:3c:fa:3e:6f:37:4d:
                    f7:f5:8f:c4:8d:70:7d:b3:63:6e:42:52:9f:5f:2e:
                    45:2c:7d:cf:6f:69:24:51:71:50:c0:b9:a2:df:47:
                    3d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9C:37:A9:57:7D:C6:00:EB:21:6B:68:2A:D2:59:55:19:1A:15:7E
            X509v3 Authority Key Identifier:
                keyid:41:E5:9B:54:8B:91:62:16:36:7A:1D:BC:A5:AD:17:47:9C:65:F6:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/323830343a323566303a3a2f33332d3333203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25f0::/33

    Signature Algorithm: sha256WithRSAEncryption
         5a:2b:5f:a6:ca:44:51:d5:51:e1:b4:6d:b3:37:23:3e:3b:9a:
         b4:e8:b4:0c:8d:ff:cb:4d:a3:6a:93:d2:0d:ce:f6:08:81:fc:
         ee:eb:96:67:2e:43:c8:0d:3b:7f:cd:02:4b:8a:d6:5a:69:13:
         95:90:e8:38:51:ff:c1:d2:d2:a4:cd:4c:22:31:c7:13:e5:f9:
         b6:a0:0c:19:06:91:16:5c:2f:9d:87:59:df:50:6a:0d:78:e6:
         aa:57:3d:fc:4c:d0:e7:5c:ff:5e:ca:be:39:5e:03:ec:aa:36:
         18:ee:74:a6:94:c8:04:32:18:9d:45:af:76:fe:a8:72:9f:34:
         96:d8:99:29:2a:20:0e:f0:a3:da:54:0b:34:f0:71:e5:4f:06:
         b8:8b:dd:5e:28:a7:09:a3:2e:24:e1:cf:13:f6:b3:5e:46:88:
         5b:7e:b4:7c:8b:a2:53:51:4c:37:99:2a:84:ca:b0:83:12:69:
         24:49:44:dd:3d:b1:0d:42:1b:e6:c3:cb:e4:ee:6e:d7:89:57:
         19:42:cb:c2:40:9c:ec:47:df:14:29:4d:80:cd:a9:84:83:94:
         35:0a:28:a5:65:9a:0f:3f:07:98:81:6d:92:fe:6b:26:6e:56:
         54:3c:9e:28:39:1a:01:be:12:e3:b3:b5:27:1a:97:23:bb:04:
         7b:fa:2d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org