Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a3a2f33362d3336203d3e20323633363431.roa
File:                     323830343a313039343a3a2f33362d3336203d3e20323633363431.roa (raw, json)
Hash identifier:          sD59t8ea1YvgPA1KZ8MF2kqnKBqHnOWOn4LFMLQwLb4=
Subject key identifier:   DD:16:85:57:69:81:11:99:23:26:6C:E5:D9:EA:27:E4:0A:39:7E:95
Certificate issuer:       /CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
Certificate serial:       1D7864D01A2AD6D272B289B6792FC21643F59833
Authority key identifier: 8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a3a2f33362d3336203d3e20323633363431.roa
Signing time:             Tue 05 Dec 2023 15:44:34 +0000
ROA not before:           Tue 05 Dec 2023 15:39:34 +0000
ROA not after:            Tue 03 Dec 2024 15:44:34 +0000
asID:                     263641
IP address blocks:        2804:1094::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:78:64:d0:1a:2a:d6:d2:72:b2:89:b6:79:2f:c2:16:43:f5:98:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
        Validity
            Not Before: Dec  5 15:39:34 2023 GMT
            Not After : Dec  3 15:44:34 2024 GMT
        Subject: CN=DD1685576981119923266CE5D9EA27E40A397E95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d6:0d:ab:bc:af:0c:54:60:b2:91:c6:f8:72:
                    9a:19:b2:e8:96:65:a5:7b:e8:7b:80:9a:2c:fa:8e:
                    b5:8a:c0:74:f9:10:de:70:de:5f:06:55:fe:51:ce:
                    b6:c0:7c:fa:ac:64:83:24:3d:d7:97:40:fb:7c:ae:
                    ae:da:de:d0:90:b4:aa:0b:b1:36:19:b4:bf:6e:0c:
                    00:f8:a8:85:1f:4b:f7:a3:28:36:56:45:df:b5:43:
                    a1:75:23:51:fc:aa:02:fd:c7:3b:10:1c:f0:93:98:
                    94:16:2c:09:e5:94:f4:75:83:b8:dc:0b:90:fe:65:
                    33:53:e0:ab:e2:6f:3e:16:66:14:c4:c9:13:42:e9:
                    43:4c:16:3a:91:de:c5:83:ff:4e:eb:e8:37:51:9d:
                    b1:7b:9e:9d:bd:ff:4b:21:14:ed:8e:a8:3b:66:bc:
                    57:f9:d4:70:6e:e1:af:62:ea:80:eb:b0:76:46:df:
                    a9:1a:85:84:e6:6b:1e:63:4c:26:04:24:8a:ac:0d:
                    eb:eb:bd:6f:7c:0f:80:37:93:1d:72:1f:8f:cd:19:
                    4f:ca:fd:0b:a1:28:18:32:2e:18:28:f3:ab:e8:c0:
                    ec:17:cd:a7:d5:96:3a:b7:dd:77:5f:af:d2:d0:66:
                    9d:9f:53:2a:c0:55:3a:11:51:d0:94:37:cb:fc:88:
                    ad:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:16:85:57:69:81:11:99:23:26:6C:E5:D9:EA:27:E4:0A:39:7E:95
            X509v3 Authority Key Identifier:
                keyid:8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a3a2f33362d3336203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1094::/36

    Signature Algorithm: sha256WithRSAEncryption
         79:9b:ea:f8:4e:30:ec:73:02:0e:c2:d1:3b:ac:9b:20:37:b0:
         77:e5:a4:ad:81:94:a7:fb:60:b4:24:16:12:8b:12:aa:d8:c4:
         23:fc:44:02:1b:58:48:ba:33:6f:21:fe:14:de:19:99:d3:62:
         4e:fd:80:7a:d0:c2:39:be:33:db:98:d2:14:42:9e:c8:dd:92:
         4c:fd:49:e7:70:1b:d6:be:11:b5:1e:e8:2a:96:35:c0:56:16:
         83:09:bc:1b:3a:7d:8c:4d:a8:09:a2:f1:7a:cf:1e:94:51:b2:
         32:7b:a3:bf:fc:a1:fa:78:57:e0:3a:31:db:8e:4e:a2:18:27:
         74:f5:53:52:19:44:1f:2f:9b:81:0e:cf:9d:a4:21:67:74:76:
         80:13:93:81:41:ef:3d:29:19:13:b8:da:72:e6:75:45:38:78:
         2c:fc:28:d9:fb:a8:b9:7b:68:fe:16:a2:22:dc:73:38:2e:7b:
         38:96:c2:9c:0f:8d:70:22:d2:79:da:d3:a1:84:a1:4f:37:3c:
         3f:54:48:4d:6e:f8:4b:06:9d:2f:41:bd:3d:15:75:fd:7e:77:
         93:90:b0:8e:eb:3b:23:d6:ac:fc:25:0f:54:67:6e:19:0a:1d:
         9f:1e:48:ec:19:a4:d4:96:a7:5f:2d:bd:a9:71:3b:70:97:90:
         61:1f:63:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org