Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/323830343a363432633a383030303a3a2f33332d3333203d3e20323639343131.roa
File:                     323830343a363432633a383030303a3a2f33332d3333203d3e20323639343131.roa (raw, json)
Hash identifier:          wo424UxF8SwUFdUbWabalVWz2penS0Nw3/TZobzLX4Y=
Subject key identifier:   C5:E0:B4:A5:CD:7D:F9:73:3E:3E:27:BF:36:66:39:2D:FC:64:79:B9
Certificate issuer:       /CN=100BA0134C785D84A913EF65B85A8B4973D0B2C5
Certificate serial:       08B664175277B86249776DB3C8E2FAD085DF6558
Authority key identifier: 10:0B:A0:13:4C:78:5D:84:A9:13:EF:65:B8:5A:8B:49:73:D0:B2:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/100BA0134C785D84A913EF65B85A8B4973D0B2C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/323830343a363432633a383030303a3a2f33332d3333203d3e20323639343131.roa
Signing time:             Tue 20 Jun 2023 14:04:31 +0000
ROA not before:           Tue 20 Jun 2023 13:59:31 +0000
ROA not after:            Tue 18 Jun 2024 14:04:31 +0000
asID:                     269411
IP address blocks:        2804:642c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b6:64:17:52:77:b8:62:49:77:6d:b3:c8:e2:fa:d0:85:df:65:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=100BA0134C785D84A913EF65B85A8B4973D0B2C5
        Validity
            Not Before: Jun 20 13:59:31 2023 GMT
            Not After : Jun 18 14:04:31 2024 GMT
        Subject: CN=C5E0B4A5CD7DF9733E3E27BF3666392DFC6479B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e6:21:75:f5:a4:5e:cf:33:de:6a:6c:60:53:
                    c1:ca:c9:91:e6:32:4e:d5:b9:c6:52:e0:87:3b:d7:
                    0d:ad:7f:85:84:87:ff:0e:f7:d0:2e:4a:c5:f3:2b:
                    f3:7b:5f:16:e8:c9:3a:b3:8b:1a:c4:86:6b:b2:d1:
                    c4:e8:fd:21:b6:b1:f2:06:6d:dc:e5:f0:93:01:07:
                    00:97:35:8c:7e:fd:b6:d0:70:bb:56:e1:3f:70:5b:
                    d2:c0:89:d4:1a:14:c6:dc:58:83:ca:89:9e:22:e9:
                    4e:b8:52:d5:f8:79:fa:03:c4:06:2c:b6:72:bb:60:
                    4f:bf:2d:c0:cc:b6:ca:d3:84:fe:55:a4:54:b7:64:
                    43:96:c6:72:dc:94:89:1a:73:c1:62:dd:45:61:e7:
                    99:a8:59:78:36:64:f5:7d:7d:3a:94:a7:95:7a:93:
                    3c:e7:f7:bd:91:0c:ab:31:18:cb:2d:2d:28:8c:be:
                    b8:c1:5a:6b:f5:ef:b6:0e:8e:11:36:a4:3c:2a:b6:
                    b0:98:24:25:9c:de:42:4d:d1:86:7c:e0:43:32:b6:
                    0c:98:62:ff:3b:d2:65:b7:09:26:ce:b5:78:8a:21:
                    aa:c4:4a:07:28:d3:bd:d8:ab:db:9f:3f:a2:e0:7a:
                    f5:57:3a:48:b1:71:23:e5:fa:fc:94:28:d8:08:cc:
                    d6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E0:B4:A5:CD:7D:F9:73:3E:3E:27:BF:36:66:39:2D:FC:64:79:B9
            X509v3 Authority Key Identifier:
                keyid:10:0B:A0:13:4C:78:5D:84:A9:13:EF:65:B8:5A:8B:49:73:D0:B2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/100BA0134C785D84A913EF65B85A8B4973D0B2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/100BA0134C785D84A913EF65B85A8B4973D0B2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/323830343a363432633a383030303a3a2f33332d3333203d3e20323639343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:642c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         47:1a:ea:76:4d:5d:b7:a5:01:85:f0:43:5b:34:d2:07:de:03:
         04:e7:8e:f8:ee:e5:7e:20:68:02:82:87:70:54:0e:f5:0e:e4:
         ea:8d:ce:09:3d:fe:93:cf:32:53:30:45:dc:4b:0e:40:ec:06:
         24:6b:3d:84:a9:6f:40:d3:48:56:9d:aa:ed:30:22:fb:8f:64:
         99:66:fb:5f:c0:ea:0c:fa:ad:a8:28:0b:62:99:07:1c:3a:68:
         d4:75:56:35:89:84:46:9f:21:2f:d3:6d:e0:68:8f:58:de:09:
         2a:9b:81:b9:dd:9f:c8:32:2e:0e:e6:d2:47:09:c5:20:72:f6:
         84:7b:2f:f1:f9:9f:72:0b:ba:43:c6:29:1c:ac:a5:64:f1:19:
         df:9d:7f:26:a7:2f:c6:a2:f3:46:c4:94:a9:8c:a7:77:9e:37:
         6e:d3:9a:1a:48:15:49:2c:55:56:23:cc:e6:a9:13:d6:7f:6f:
         66:19:a5:02:47:8c:bb:69:fe:35:b7:ac:a3:3f:cc:a9:7f:15:
         eb:96:50:b3:a0:8f:80:57:94:9b:ce:ac:12:dc:13:b2:2a:89:
         a5:fe:9c:1d:61:47:d0:aa:47:f7:54:3b:68:7e:c7:04:30:02:
         53:7b:12:cf:62:94:e2:17:f0:a0:03:d0:95:8c:23:df:e9:d6:
         0b:d0:30:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org