Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a313030303a3a2f34302d3430203d3e20323633363431.roa
File:                     323830343a313039343a313030303a3a2f34302d3430203d3e20323633363431.roa (raw, json)
Hash identifier:          MNiOUroCk5fSHRSz0dpyCKAmopPaEXCjzxjlWRSxX0c=
Subject key identifier:   A3:71:A0:A3:3E:CD:49:57:89:C7:8A:84:62:83:D4:EC:CA:98:AB:DC
Certificate issuer:       /CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
Certificate serial:       445B6E7031175E8A0D68D5F5CBFFF8CA1C0266E9
Authority key identifier: 8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a313030303a3a2f34302d3430203d3e20323633363431.roa
Signing time:             Tue 05 Dec 2023 15:44:33 +0000
ROA not before:           Tue 05 Dec 2023 15:39:33 +0000
ROA not after:            Tue 03 Dec 2024 15:44:33 +0000
asID:                     263641
IP address blocks:        2804:1094:1000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:5b:6e:70:31:17:5e:8a:0d:68:d5:f5:cb:ff:f8:ca:1c:02:66:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
        Validity
            Not Before: Dec  5 15:39:33 2023 GMT
            Not After : Dec  3 15:44:33 2024 GMT
        Subject: CN=A371A0A33ECD495789C78A846283D4ECCA98ABDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:3d:da:39:db:42:b9:af:a0:a6:4e:b5:02:
                    25:fc:d9:9e:9c:e0:fc:8a:39:32:ed:3d:6c:6c:b4:
                    0f:34:64:7f:77:26:d6:eb:2e:32:6a:b4:86:33:45:
                    24:c7:26:c6:e4:fd:a8:2e:3c:9f:eb:49:a7:40:31:
                    cb:1e:33:1d:d2:da:93:1d:a1:0a:59:c9:58:8b:7d:
                    b6:42:0d:3d:11:8c:c7:77:1d:b4:81:d4:af:a5:8d:
                    c9:5c:35:ed:a7:9f:3b:93:df:73:c6:fa:ad:ba:18:
                    7a:56:6f:f2:8d:bc:2a:74:12:df:3f:31:a9:26:ba:
                    df:99:fc:b9:23:e3:4c:bd:18:df:4e:9c:30:54:c0:
                    68:27:33:75:14:24:65:8f:36:0b:0d:a4:22:47:a6:
                    85:a3:64:c6:ab:14:09:91:02:59:4f:4d:cd:b2:22:
                    34:20:e9:da:02:a7:09:d8:79:df:8c:68:14:00:74:
                    3d:69:37:5c:d2:4d:42:38:f8:d0:34:3f:88:5e:0a:
                    f6:fd:41:89:01:fa:79:fd:9d:ff:75:77:f2:d5:3a:
                    a6:94:2d:20:59:87:d5:7f:95:5d:b9:4c:05:a7:1c:
                    16:ba:e1:de:21:d5:86:47:ea:12:ff:2d:80:ac:d7:
                    14:fe:89:ce:50:11:73:5c:c8:08:15:ac:9f:d8:19:
                    02:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:71:A0:A3:3E:CD:49:57:89:C7:8A:84:62:83:D4:EC:CA:98:AB:DC
            X509v3 Authority Key Identifier:
                keyid:8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a313030303a3a2f34302d3430203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1094:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         be:ee:43:01:1c:c2:80:d6:db:2f:a7:8f:33:5c:e9:12:51:ff:
         2c:29:52:61:c5:8e:9d:ac:fe:5f:75:fd:0c:62:77:3c:34:df:
         19:4e:7a:bc:60:a2:c1:60:3e:f9:03:bf:b5:ed:5b:5a:ff:48:
         17:dc:a8:1a:fb:04:2b:ac:a9:b2:32:54:94:ff:9f:54:a4:1f:
         8e:09:de:f9:30:b2:a0:c0:67:60:39:ad:e3:ca:10:17:72:98:
         4a:d6:a3:92:e6:fe:de:34:27:e7:de:bf:dd:a1:c5:35:1a:2e:
         ec:84:12:a4:26:9d:18:fe:b3:4b:10:b0:16:03:5e:6a:95:9b:
         fc:50:06:cf:83:9e:02:dc:be:1c:f9:cd:99:2a:56:1e:e3:02:
         31:ea:70:9c:70:62:d4:f6:b8:2c:0f:74:c8:e3:e1:d1:ef:ee:
         9a:45:c7:ca:0a:4c:90:65:58:ba:db:38:f6:56:4b:59:54:21:
         39:83:97:fa:13:8a:d8:bb:a0:4a:05:f6:5b:08:68:b7:ed:59:
         dc:1e:1c:84:80:99:9b:d6:62:90:87:67:99:67:30:46:35:f8:
         08:84:34:72:a3:f0:7a:39:c8:75:93:e6:a3:cc:a5:09:8d:7b:
         5d:67:d2:f6:86:72:21:d4:c3:67:1b:ae:8d:4c:b5:6a:1c:e9:
         8f:b1:41:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org