Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a32393a3a2f34382d3438203d3e203631383332.roa
File:                     323830343a316130343a32393a3a2f34382d3438203d3e203631383332.roa (raw, json)
Hash identifier:          KG6X61Rf+JtY3u27FpleTKPfvphMPQogRn0F61i7vI4=
Subject key identifier:   9A:16:9D:8C:CA:85:DC:4D:63:56:1C:AB:15:ED:D7:F3:B3:9F:1B:06
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       6751686089D88125333C0045A4B098CE09A91C13
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a32393a3a2f34382d3438203d3e203631383332.roa
Signing time:             Thu 05 Oct 2023 17:51:48 +0000
ROA not before:           Thu 05 Oct 2023 17:46:48 +0000
ROA not after:            Thu 03 Oct 2024 17:51:48 +0000
asID:                     61832
IP address blocks:        2804:1a04:29::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:51:68:60:89:d8:81:25:33:3c:00:45:a4:b0:98:ce:09:a9:1c:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Oct  5 17:46:48 2023 GMT
            Not After : Oct  3 17:51:48 2024 GMT
        Subject: CN=9A169D8CCA85DC4D63561CAB15EDD7F3B39F1B06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ad:44:88:ba:9c:29:3f:74:bf:5d:f0:c8:35:
                    50:ff:82:a2:8c:63:84:3b:59:b1:55:60:68:0c:f2:
                    ad:ca:53:77:34:30:31:d2:05:0d:9a:f2:5e:9e:ad:
                    36:19:df:66:8e:31:95:e6:6d:90:bb:4c:85:4d:89:
                    e5:fe:72:86:fb:16:5d:c3:2f:a1:6d:c9:a4:7a:43:
                    a2:7e:d7:1d:8d:c8:a1:d4:02:5b:3b:4a:cf:31:c9:
                    6b:f8:a4:c1:80:68:77:91:c7:fa:44:b8:75:28:63:
                    03:48:81:40:4f:5c:8e:fb:48:58:bc:6e:17:c9:b9:
                    a1:85:67:a7:3a:16:e9:15:c7:35:86:9b:85:ca:07:
                    c2:d3:5d:3d:c8:12:ce:1c:72:26:07:22:da:94:b4:
                    6f:ea:91:b6:95:f0:0c:66:42:d9:b8:87:f5:e2:ad:
                    77:ab:02:33:28:1b:bf:b5:0d:ae:07:3a:35:0f:84:
                    55:b9:8f:85:36:0b:4f:d3:d1:e0:12:13:f3:54:33:
                    29:0f:b3:05:63:72:d0:f8:d6:2e:01:2f:2e:51:d3:
                    f8:2c:d5:af:12:b7:d1:10:57:bd:00:49:57:5e:f1:
                    c1:0c:4a:45:a4:9e:29:14:d3:4f:e8:70:26:99:e0:
                    b8:39:f3:da:89:7b:09:4a:ee:95:96:4c:ba:72:2f:
                    b2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:16:9D:8C:CA:85:DC:4D:63:56:1C:AB:15:ED:D7:F3:B3:9F:1B:06
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a32393a3a2f34382d3438203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a04:29::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:10:91:0f:98:23:82:4e:8c:e7:a2:8f:86:d4:f8:61:c0:14:
         55:b4:80:1a:d7:04:95:9b:3d:31:f1:9b:95:46:26:9b:4d:cf:
         6d:e9:68:23:ce:b2:9a:3f:2a:9f:a9:02:e6:37:22:d7:08:87:
         5a:90:58:0f:bc:94:4c:c7:fc:e5:d8:b5:67:62:15:47:40:6a:
         59:6e:f4:f1:26:29:33:33:a8:00:54:4a:97:95:5e:14:4a:59:
         e3:03:1b:49:95:41:37:12:81:84:61:74:9b:ab:68:3f:fe:66:
         b1:a1:c0:e0:56:e2:49:56:1f:59:ac:72:87:6e:0b:3d:5f:2e:
         2b:36:dc:d4:9b:f3:96:2c:be:b3:ab:29:64:90:d6:13:fb:f8:
         7c:85:7e:1c:c9:0c:1b:98:76:01:0d:e9:ec:fa:b5:c7:1c:1c:
         ad:c1:c8:00:89:59:99:80:92:a4:02:17:aa:10:f4:14:6b:5f:
         ba:c3:d0:c2:32:3c:8d:75:00:8f:57:59:54:5e:a2:da:db:63:
         a5:8b:01:1f:6c:6c:79:7b:df:fa:de:fa:df:1c:8e:61:2e:e2:
         7e:fe:23:36:0c:7e:2b:15:b3:8a:0a:64:43:4c:79:b3:28:fd:
         59:cc:da:16:5f:e4:06:2e:3d:02:85:74:83:77:85:c1:24:f4:
         1f:ab:68:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org