Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/323830343a373463303a363a3a2f34382d3438203d3e20323731303031.roa
File:                     323830343a373463303a363a3a2f34382d3438203d3e20323731303031.roa (raw, json)
Hash identifier:          gFUqJX/75y5nO672glLHl/tjUehDAlr6WEeHXbb3yG8=
Subject key identifier:   72:62:85:70:57:09:78:0D:BF:7D:4A:A6:47:14:43:46:44:79:91:0B
Certificate issuer:       /CN=A11146E6D35397A3EFDADB5919573175A8DBBD03
Certificate serial:       680A6A9A3D7402D3EDF56F14C0D111F2FA7D6837
Authority key identifier: A1:11:46:E6:D3:53:97:A3:EF:DA:DB:59:19:57:31:75:A8:DB:BD:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/323830343a373463303a363a3a2f34382d3438203d3e20323731303031.roa
Signing time:             Thu 16 Nov 2023 17:54:18 +0000
ROA not before:           Thu 16 Nov 2023 17:49:18 +0000
ROA not after:            Thu 14 Nov 2024 17:54:18 +0000
asID:                     271001
IP address blocks:        2804:74c0:6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:0a:6a:9a:3d:74:02:d3:ed:f5:6f:14:c0:d1:11:f2:fa:7d:68:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A11146E6D35397A3EFDADB5919573175A8DBBD03
        Validity
            Not Before: Nov 16 17:49:18 2023 GMT
            Not After : Nov 14 17:54:18 2024 GMT
        Subject: CN=726285705709780DBF7D4AA6471443464479910B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4e:0b:6f:d9:02:06:b0:a1:be:39:39:22:76:
                    34:60:52:a1:7b:08:ed:33:4c:07:5d:54:c4:37:93:
                    7e:cf:83:ca:d9:18:e7:69:dd:84:8c:f5:e9:69:f8:
                    54:96:4d:65:7b:4e:7b:7e:5f:ee:42:3d:63:9e:49:
                    80:4c:46:e3:e7:a7:a7:bb:02:13:c3:3e:02:79:3f:
                    d4:6b:8c:bc:2f:c5:77:db:98:15:0c:63:3e:e0:dc:
                    2f:40:00:3a:38:06:37:11:08:31:d2:34:56:20:cf:
                    b3:18:22:98:8f:d3:4f:e1:84:32:9f:a2:30:0f:d3:
                    c1:21:ca:35:00:93:0b:01:2e:75:d3:92:05:b1:f1:
                    44:1c:28:a0:89:1d:29:a3:e6:e7:6a:5b:d2:4d:9e:
                    f0:3f:ad:b9:b9:6b:e4:c2:6c:29:47:9e:a0:bc:f8:
                    dd:89:82:92:e3:c5:31:4a:88:fc:d3:5e:71:7d:7d:
                    d0:8d:bd:c3:5c:dc:68:9b:29:06:7b:a0:d1:2f:84:
                    37:a8:0c:23:64:22:77:af:c8:87:a0:04:97:2d:ec:
                    e4:39:a5:ee:a0:c0:56:f8:f2:18:e6:34:ce:e2:b9:
                    d7:b0:b7:d2:5e:03:90:f9:42:34:65:b1:28:69:1f:
                    8e:10:a0:ba:08:10:5b:37:54:35:a7:e2:75:15:eb:
                    e3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:62:85:70:57:09:78:0D:BF:7D:4A:A6:47:14:43:46:44:79:91:0B
            X509v3 Authority Key Identifier:
                keyid:A1:11:46:E6:D3:53:97:A3:EF:DA:DB:59:19:57:31:75:A8:DB:BD:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/323830343a373463303a363a3a2f34382d3438203d3e20323731303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74c0:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:20:97:f0:8f:64:2a:76:a8:48:33:81:03:6c:97:90:c2:3c:
         ce:34:90:19:96:78:c6:0f:6f:86:28:63:fc:11:79:5f:fc:4b:
         0b:4b:b5:9f:60:28:ab:6d:d4:cf:e5:eb:ac:c5:cd:1a:c0:2c:
         16:81:f2:21:20:23:08:05:6e:fa:91:b9:56:bf:50:20:b3:0c:
         ed:1a:9b:74:67:e7:f4:4c:ef:8b:c3:87:b1:4c:f1:13:0b:eb:
         a2:fb:c4:e1:b6:84:97:9a:2e:97:d4:90:e0:97:12:e6:9d:57:
         c3:bc:bb:f0:47:55:45:2e:5b:85:64:a6:7e:f5:2e:d3:6b:3d:
         c6:13:4a:85:95:8c:9d:2a:2b:19:05:c8:d5:29:a4:09:41:36:
         34:8e:00:39:c6:21:0d:bb:0d:d3:b8:b4:41:28:bd:1e:0e:f6:
         f3:01:ce:b9:b7:51:2f:2c:a2:55:2e:fc:e5:ed:ac:ba:23:c8:
         51:14:f1:96:22:7f:5c:a6:40:3c:71:30:cd:6e:d1:f1:28:48:
         ee:2c:40:e1:da:f5:47:8c:bc:7d:c8:bc:d7:de:28:86:0f:92:
         96:6f:66:f2:1e:45:48:31:d7:1f:06:be:1c:71:f8:3e:15:53:
         f4:4a:f7:82:74:bb:50:e4:97:17:46:cf:69:11:cf:ff:57:c0:
         91:6f:2a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org