Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/0/323830343a376438383a3a2f33322d3336203d3e20323731353637.roa
File:                     323830343a376438383a3a2f33322d3336203d3e20323731353637.roa (raw, json)
Hash identifier:          pJOfXJbxd/YxAhoSO5u3WyY4D8wH9p1rapFcut9NW0s=
Subject key identifier:   42:92:80:E8:9F:EB:D2:D5:73:3B:29:15:BF:81:9C:01:F6:49:8D:29
Certificate issuer:       /CN=18F088BF8F4B34428C017C7D455486C5F6CEC271
Certificate serial:       4A89142ABE1E8D7A8B07F9601FD1C59B0D692B5D
Authority key identifier: 18:F0:88:BF:8F:4B:34:42:8C:01:7C:7D:45:54:86:C5:F6:CE:C2:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18F088BF8F4B34428C017C7D455486C5F6CEC271.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/0/323830343a376438383a3a2f33322d3336203d3e20323731353637.roa
Signing time:             Fri 06 Oct 2023 15:00:00 +0000
ROA not before:           Fri 06 Oct 2023 14:55:00 +0000
ROA not after:            Fri 04 Oct 2024 15:00:00 +0000
asID:                     271567
IP address blocks:        2804:7d88::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:89:14:2a:be:1e:8d:7a:8b:07:f9:60:1f:d1:c5:9b:0d:69:2b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18F088BF8F4B34428C017C7D455486C5F6CEC271
        Validity
            Not Before: Oct  6 14:55:00 2023 GMT
            Not After : Oct  4 15:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7c:d4:36:fa:3d:9a:1b:7b:95:3d:1c:f0:dd:
                    05:c2:e3:5b:ed:c3:94:ef:12:b4:75:6e:ab:05:35:
                    9b:0a:ed:f4:b9:56:d4:db:21:91:97:28:eb:9e:59:
                    28:e0:87:1e:02:76:d2:02:45:c9:32:12:a6:9b:63:
                    ef:ee:82:d8:cc:c7:c9:3b:64:d9:03:43:e1:e2:d3:
                    d1:96:f8:f3:2d:33:04:a7:a5:a0:f4:38:da:16:9e:
                    91:0c:cf:b9:73:a4:0f:0f:29:62:c7:35:20:92:a6:
                    5e:59:14:3e:24:7c:9d:63:38:f8:24:16:f0:7f:8d:
                    b3:ed:08:da:f9:c9:b7:bf:fc:9d:f6:26:06:78:e6:
                    8e:c7:b9:bc:56:0e:38:18:6b:c7:d2:85:47:60:48:
                    77:41:15:e6:ca:46:e1:2e:29:c2:dc:43:84:d3:c0:
                    33:cb:07:56:c1:00:97:4f:ea:87:82:48:98:bd:7c:
                    2c:1a:23:8b:b5:d9:a7:0c:09:71:60:e0:56:14:65:
                    d7:60:78:b9:59:41:6a:2f:42:56:75:a0:1c:ff:23:
                    24:75:1e:d6:b2:9a:52:0e:c5:55:68:1e:ee:2d:f8:
                    84:97:62:fe:96:86:a8:7c:10:60:5c:fb:27:fa:d0:
                    e0:b0:12:81:20:0e:80:61:11:85:48:48:36:10:b6:
                    da:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:92:80:E8:9F:EB:D2:D5:73:3B:29:15:BF:81:9C:01:F6:49:8D:29
            X509v3 Authority Key Identifier:
                keyid:18:F0:88:BF:8F:4B:34:42:8C:01:7C:7D:45:54:86:C5:F6:CE:C2:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/0/18F088BF8F4B34428C017C7D455486C5F6CEC271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18F088BF8F4B34428C017C7D455486C5F6CEC271.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/0/323830343a376438383a3a2f33322d3336203d3e20323731353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d88::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:35:04:f3:be:a5:73:42:da:05:d8:0f:d9:dc:34:f9:ad:d6:
         64:67:e3:a9:7e:b2:cd:83:6c:bb:4a:db:aa:49:df:54:b2:ed:
         28:42:72:7b:dc:b3:52:24:da:1d:11:1d:69:56:e1:ee:a9:cc:
         7b:f3:ba:7d:d1:28:46:76:4a:20:9e:e8:c2:1b:91:70:7b:85:
         a8:5c:75:48:16:f4:6f:25:04:7b:d9:ce:45:55:a9:bf:b9:36:
         8f:7e:16:90:06:f6:e8:d1:3a:99:e4:10:3c:98:2b:38:28:2e:
         ec:b3:2b:3a:7c:94:92:64:e2:a3:a3:2f:8a:c3:c3:a8:6e:4a:
         3a:9d:9a:ca:f7:41:fe:9c:4a:67:33:ac:ce:9f:c0:e7:80:6e:
         fc:e2:9b:34:6e:29:72:3d:5a:33:cb:46:ba:aa:d6:d8:48:22:
         67:cd:88:8a:85:73:1f:e8:d7:f5:3e:26:8c:36:d1:3d:f1:9f:
         a1:a9:81:71:0e:f9:aa:06:ef:d0:5b:24:13:c1:76:cb:1a:6d:
         37:a5:43:75:50:9e:0c:0d:be:5a:f6:e5:9b:93:8e:ab:16:2f:
         15:6b:2e:76:47:41:cc:c6:17:cf:85:7a:5d:4c:91:57:3c:5f:
         ac:70:e5:ee:45:0e:99:91:4a:3d:75:96:a1:98:eb:bb:b8:50:
         a5:d4:65:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org