Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/323830343a346233343a383030303a3a2f33332d3333203d3e20323637323930.roa
File:                     323830343a346233343a383030303a3a2f33332d3333203d3e20323637323930.roa (raw, json)
Hash identifier:          3edWrWoLXmHTctFpmm0FhojsKGWUwSV+IKHuPRFvAEI=
Subject key identifier:   A7:5D:0E:92:57:C4:B6:8C:73:CC:AB:7F:98:88:4E:67:C8:2E:45:1F
Certificate issuer:       /CN=4C90344E384710E55DBA9D811B8DB9699219721E
Certificate serial:       6D9113972EAD2F35E7AA4D68885D53D5D78C98D0
Authority key identifier: 4C:90:34:4E:38:47:10:E5:5D:BA:9D:81:1B:8D:B9:69:92:19:72:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C90344E384710E55DBA9D811B8DB9699219721E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/323830343a346233343a383030303a3a2f33332d3333203d3e20323637323930.roa
Signing time:             Wed 06 Dec 2023 21:00:00 +0000
ROA not before:           Wed 06 Dec 2023 20:55:00 +0000
ROA not after:            Wed 04 Dec 2024 21:00:00 +0000
asID:                     267290
IP address blocks:        2804:4b34:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:91:13:97:2e:ad:2f:35:e7:aa:4d:68:88:5d:53:d5:d7:8c:98:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C90344E384710E55DBA9D811B8DB9699219721E
        Validity
            Not Before: Dec  6 20:55:00 2023 GMT
            Not After : Dec  4 21:00:00 2024 GMT
        Subject: CN=A75D0E9257C4B68C73CCAB7F98884E67C82E451F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f7:e4:d4:86:56:98:93:ca:94:7c:8e:9c:44:
                    2e:97:4b:41:23:8c:44:77:d5:0e:42:4a:06:09:b5:
                    09:69:a3:9e:03:e1:8f:6f:a7:37:62:4c:a1:9e:c9:
                    81:42:98:7d:0a:3c:9c:92:9c:5f:66:40:c9:58:90:
                    5e:26:07:1b:9b:0a:d9:2f:97:f7:66:6b:ea:59:d5:
                    6e:10:e4:b3:35:f9:bd:18:16:23:28:4d:14:db:a3:
                    ce:a3:6b:9b:2f:4f:3c:b1:d8:17:55:c9:b9:bf:35:
                    aa:2f:e9:30:45:4a:9a:41:02:28:7d:ad:d5:06:d1:
                    a9:31:a0:18:64:7c:8b:61:f9:60:22:34:7c:77:f4:
                    39:82:cf:60:c7:92:aa:e0:81:a1:71:9f:fe:eb:f3:
                    28:9b:cb:0d:df:cb:ad:34:54:48:d0:56:12:e3:ff:
                    1c:da:54:10:6f:45:7e:7d:06:1a:da:62:60:74:40:
                    5b:97:3c:c0:e7:1b:86:dc:da:91:c1:4f:e0:92:cd:
                    2f:75:26:bf:e8:ad:8f:0f:a2:4f:57:23:99:9f:33:
                    a5:35:24:e1:10:7c:26:78:b3:b1:f6:43:65:ad:a0:
                    e7:42:1f:3c:1b:b3:17:b8:b2:f6:2c:a5:a5:aa:8f:
                    41:44:46:6d:59:30:25:16:12:02:97:e5:28:87:e6:
                    96:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5D:0E:92:57:C4:B6:8C:73:CC:AB:7F:98:88:4E:67:C8:2E:45:1F
            X509v3 Authority Key Identifier:
                keyid:4C:90:34:4E:38:47:10:E5:5D:BA:9D:81:1B:8D:B9:69:92:19:72:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/4C90344E384710E55DBA9D811B8DB9699219721E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C90344E384710E55DBA9D811B8DB9699219721E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/323830343a346233343a383030303a3a2f33332d3333203d3e20323637323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b34:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         23:8b:6f:5c:de:2e:02:92:c5:ee:1b:22:83:e4:c3:9c:f2:cb:
         e6:b0:ec:df:e9:dd:ad:9f:fc:e8:34:a1:d7:f5:25:47:4b:76:
         18:c4:83:ba:85:ca:d1:e2:1d:ff:67:e9:2a:ba:17:7d:df:aa:
         00:8b:d3:77:3d:bc:e4:af:09:c6:8c:b3:f9:74:d8:c6:49:47:
         a8:9f:2b:d5:6a:8d:ca:be:1a:46:08:ee:21:ae:64:50:6d:1f:
         6a:9c:8b:cc:a6:25:27:6f:15:cd:20:6c:6c:d5:d4:3a:95:59:
         99:49:ff:44:99:5b:fa:1b:9b:69:16:11:d8:0f:d9:48:cc:7d:
         db:f4:ee:1e:ca:87:3c:ac:51:72:76:80:ff:69:1c:3d:24:69:
         84:f7:a8:f7:6e:26:ef:39:64:97:30:eb:81:1b:76:f4:f8:d6:
         e8:72:4a:45:a3:45:65:6b:16:9f:24:a5:2b:1c:73:41:82:b3:
         c6:47:0c:55:ad:9b:de:46:9a:61:0f:6d:55:40:a5:2c:2a:56:
         63:b0:eb:90:99:b1:c0:bd:f3:7c:6c:b7:e4:a1:b6:29:8b:96:
         fa:6c:4b:f4:cc:7f:65:68:fe:39:67:46:02:3a:71:93:be:63:
         7e:6d:08:dd:34:73:2b:69:8d:a7:01:5d:c0:2b:54:a2:27:95:
         f7:bf:99:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org