Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/323830343a373463303a3a2f33332d3333203d3e20323731303031.roa
File:                     323830343a373463303a3a2f33332d3333203d3e20323731303031.roa (raw, json)
Hash identifier:          3uH3JUyWv3hyTWparcOOspkLTD9M75GGUsam7IU7U6A=
Subject key identifier:   23:71:1F:9A:81:48:3F:8E:19:EE:B7:64:BC:70:C0:41:B4:F3:6D:8E
Certificate issuer:       /CN=A11146E6D35397A3EFDADB5919573175A8DBBD03
Certificate serial:       23F2BFDC075EB55514A090D071246B4FD238E19D
Authority key identifier: A1:11:46:E6:D3:53:97:A3:EF:DA:DB:59:19:57:31:75:A8:DB:BD:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/323830343a373463303a3a2f33332d3333203d3e20323731303031.roa
Signing time:             Thu 16 Nov 2023 17:54:17 +0000
ROA not before:           Thu 16 Nov 2023 17:49:17 +0000
ROA not after:            Thu 14 Nov 2024 17:54:17 +0000
asID:                     271001
IP address blocks:        2804:74c0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f2:bf:dc:07:5e:b5:55:14:a0:90:d0:71:24:6b:4f:d2:38:e1:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A11146E6D35397A3EFDADB5919573175A8DBBD03
        Validity
            Not Before: Nov 16 17:49:17 2023 GMT
            Not After : Nov 14 17:54:17 2024 GMT
        Subject: CN=23711F9A81483F8E19EEB764BC70C041B4F36D8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c4:a8:29:33:82:12:c1:f9:92:d8:b3:f3:e6:
                    fe:b0:36:4e:16:50:63:14:69:a8:f4:62:f7:ea:eb:
                    a8:4f:31:a1:31:ad:4d:e4:b6:bb:fb:f1:8f:c8:1d:
                    41:b3:00:24:2c:bb:bd:6c:6b:20:13:94:ba:3b:2d:
                    b8:21:16:6e:bf:13:29:f1:58:8e:81:ad:d6:f8:a9:
                    45:5c:c3:d1:55:36:92:dc:33:3d:07:ea:28:da:cf:
                    08:b0:26:ec:28:70:e3:cf:3e:9d:f3:a7:21:7d:61:
                    23:e1:11:0e:80:3e:16:04:ec:fb:1d:32:90:6c:97:
                    fa:ab:79:ae:61:c8:7f:9f:a4:2e:ea:4c:e6:33:11:
                    03:8f:65:fb:48:d8:f7:be:c5:aa:22:72:b3:a2:ec:
                    58:c2:14:b2:13:d5:a1:df:47:d7:e6:3d:3a:28:4e:
                    15:c3:96:18:a4:53:cd:ff:0c:f1:91:dc:07:fa:ac:
                    69:43:7b:b1:28:b1:e2:2a:91:da:29:c9:7e:90:8b:
                    6d:cc:10:86:f8:f2:ad:d6:32:43:e9:b4:09:f5:d0:
                    7c:86:c5:72:e8:f5:f0:15:8e:e7:80:d7:2a:a8:21:
                    c8:2e:02:a4:17:9f:84:83:d7:91:1d:db:c5:f6:81:
                    66:19:a1:75:b9:a1:94:50:68:bb:4d:1c:d4:4f:86:
                    03:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:71:1F:9A:81:48:3F:8E:19:EE:B7:64:BC:70:C0:41:B4:F3:6D:8E
            X509v3 Authority Key Identifier:
                keyid:A1:11:46:E6:D3:53:97:A3:EF:DA:DB:59:19:57:31:75:A8:DB:BD:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/323830343a373463303a3a2f33332d3333203d3e20323731303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74c0::/33

    Signature Algorithm: sha256WithRSAEncryption
         26:f5:04:03:08:4a:63:58:5c:ac:0b:7a:ab:51:f0:ef:b0:42:
         0f:a5:b7:49:80:ea:eb:84:37:6c:98:39:2f:d9:a9:ce:33:e2:
         23:59:e2:0d:3c:8c:d0:42:14:73:7e:e2:94:93:56:25:e3:bd:
         5d:21:af:a2:3a:40:1f:af:5d:1e:67:8b:3b:b0:9a:3b:7b:80:
         a4:d9:7a:f9:c0:79:6b:c8:11:01:73:76:7c:45:82:79:3e:aa:
         92:54:48:12:b6:26:59:20:d8:08:4e:c2:7d:1f:36:e7:39:c5:
         5c:6f:13:e9:13:6e:90:31:ec:50:9f:0c:29:da:cc:74:99:ff:
         aa:ba:4b:1f:d6:87:ae:72:90:2c:90:b2:cd:e3:95:6e:6a:fd:
         77:a2:8e:d5:84:44:6b:75:00:c9:ba:17:c4:3c:23:99:1d:7c:
         4f:a8:ec:dd:58:ce:5a:25:03:55:97:10:57:de:3f:f2:2b:11:
         4c:04:56:76:ac:50:d1:e3:f1:fa:1c:a8:23:11:33:6b:7e:15:
         0c:10:8b:c9:b5:a5:df:60:63:99:b9:88:05:60:a6:0f:2a:03:
         6a:1c:5d:36:a5:bb:71:5b:3e:0a:da:31:72:cf:a0:2e:fd:60:
         1f:87:bb:e0:a8:99:f4:53:0f:a9:33:ea:82:45:a9:92:fa:17:
         c6:95:44:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org