Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/323830343a373463303a333a3a2f34382d3438203d3e20323731303031.roa
File:                     323830343a373463303a333a3a2f34382d3438203d3e20323731303031.roa (raw, json)
Hash identifier:          IkncRFSuR2qyr2bk4j017UoyzJgc56KB5xz8gU26jE4=
Subject key identifier:   B3:1F:04:DF:42:0A:4E:0C:AD:83:DE:F0:F8:B4:80:5D:0F:58:6C:1E
Certificate issuer:       /CN=A11146E6D35397A3EFDADB5919573175A8DBBD03
Certificate serial:       5CFA9DF9B6B42278C177C99F145B2BB31AD2099F
Authority key identifier: A1:11:46:E6:D3:53:97:A3:EF:DA:DB:59:19:57:31:75:A8:DB:BD:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/323830343a373463303a333a3a2f34382d3438203d3e20323731303031.roa
Signing time:             Thu 16 Nov 2023 17:54:17 +0000
ROA not before:           Thu 16 Nov 2023 17:49:17 +0000
ROA not after:            Thu 14 Nov 2024 17:54:17 +0000
asID:                     271001
IP address blocks:        2804:74c0:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:fa:9d:f9:b6:b4:22:78:c1:77:c9:9f:14:5b:2b:b3:1a:d2:09:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A11146E6D35397A3EFDADB5919573175A8DBBD03
        Validity
            Not Before: Nov 16 17:49:17 2023 GMT
            Not After : Nov 14 17:54:17 2024 GMT
        Subject: CN=B31F04DF420A4E0CAD83DEF0F8B4805D0F586C1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:86:b5:22:1b:44:11:54:9d:67:4c:f8:fe:23:
                    73:a8:06:3a:e9:62:d2:e2:ef:23:eb:36:42:b6:6d:
                    62:19:f3:37:59:8e:97:98:c2:41:c7:0a:7f:3c:c3:
                    0b:68:d2:d3:79:16:4c:86:f8:88:10:be:45:de:02:
                    ec:b6:9d:98:36:c2:f0:47:16:62:95:71:17:66:4d:
                    fc:06:8b:ef:4d:24:0e:6d:bf:71:78:7c:dd:c5:fa:
                    40:bc:9d:8d:3c:90:8d:00:78:52:6d:1f:7d:ee:1e:
                    d3:af:e6:de:53:45:75:e8:47:2b:6f:32:4d:56:3f:
                    47:4e:af:73:a5:16:f6:ca:41:95:ec:65:77:b0:a6:
                    b9:fd:46:db:d5:4e:c4:96:b5:e0:13:1f:a1:3d:b5:
                    ab:5f:1d:33:b8:b1:af:4f:aa:9f:f3:ca:52:93:a5:
                    1a:8b:5d:e7:54:9f:76:91:26:4b:e7:8b:34:0b:4f:
                    64:a3:56:25:91:3a:9f:e8:30:71:81:bd:31:ac:f0:
                    05:40:4a:01:77:14:29:08:cf:64:15:cd:e3:79:27:
                    5c:02:c3:aa:53:2d:d9:d1:01:f2:f8:62:d5:92:0e:
                    4b:72:c7:17:59:ed:99:8c:ec:ad:64:c8:4c:99:54:
                    96:58:55:be:02:7e:a6:28:48:c0:02:f1:27:7f:8c:
                    1a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:1F:04:DF:42:0A:4E:0C:AD:83:DE:F0:F8:B4:80:5D:0F:58:6C:1E
            X509v3 Authority Key Identifier:
                keyid:A1:11:46:E6:D3:53:97:A3:EF:DA:DB:59:19:57:31:75:A8:DB:BD:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/323830343a373463303a333a3a2f34382d3438203d3e20323731303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74c0:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         ba:31:74:fd:cb:8e:27:4a:ae:df:49:46:46:3e:0d:4e:93:26:
         c1:19:88:58:cb:e1:ac:3b:13:92:8a:d9:ad:b4:9f:16:ef:67:
         bc:06:41:bc:eb:e0:ba:04:c5:54:c1:6d:73:3f:99:66:d2:54:
         dc:8e:be:5d:25:ce:db:dd:19:b0:55:e8:d9:c3:8a:68:74:0c:
         a4:e3:07:c9:c5:c0:38:d8:d5:4c:50:58:3c:de:55:76:64:91:
         5c:72:3a:d3:e3:7d:0f:91:65:e7:22:99:19:df:bf:73:2a:34:
         be:d2:40:6d:8a:7a:7b:7d:fe:8a:56:da:4b:30:e6:1e:b2:82:
         99:0b:5c:5d:d2:ca:44:ff:12:cd:d0:fa:01:c4:e6:d1:3a:22:
         0b:f8:ef:77:73:79:d9:ee:0f:f6:be:3b:74:5e:58:d7:42:fa:
         2b:85:76:b1:a0:38:0a:0c:4e:63:c0:fe:eb:e2:9a:e6:f0:89:
         36:bb:fe:eb:15:bf:79:7b:67:ff:2b:e0:d8:8f:8c:ce:c4:5a:
         90:6c:93:43:d8:bd:8f:ea:53:6e:05:c4:04:b3:ea:ed:a0:6f:
         f3:7e:49:f9:b8:b8:e7:35:11:24:5c:8e:36:e3:a9:3b:f1:f1:
         f2:d0:9a:d1:8f:70:ea:16:87:df:7b:57:58:4e:77:c0:59:6a:
         92:75:60:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org