Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrsfgiFyWgRDD9YUMzAFbpPJgsjX2CDxKfXBeTvkezm2/0/323830343a366363343a3a2f33322d3336203d3e20323730343930.roa
File:                     323830343a366363343a3a2f33322d3336203d3e20323730343930.roa (raw, json)
Hash identifier:          76zEuBrNlAXkq5QecM8ZhKvq+UX1gxzJr3/Y18+wZVE=
Subject key identifier:   AD:31:49:08:5C:A8:10:79:67:78:D2:25:19:31:E1:B5:E7:88:BA:BA
Certificate issuer:       /CN=47186A1911BD977912FE4B2FC41A1632ED67B9B1
Certificate serial:       4B9E4BB34F9F1A151A926DD2E29D38178D977871
Authority key identifier: 47:18:6A:19:11:BD:97:79:12:FE:4B:2F:C4:1A:16:32:ED:67:B9:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47186A1911BD977912FE4B2FC41A1632ED67B9B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrsfgiFyWgRDD9YUMzAFbpPJgsjX2CDxKfXBeTvkezm2/0/323830343a366363343a3a2f33322d3336203d3e20323730343930.roa
Signing time:             Thu 16 Nov 2023 19:00:00 +0000
ROA not before:           Thu 16 Nov 2023 18:55:00 +0000
ROA not after:            Thu 14 Nov 2024 19:00:00 +0000
asID:                     270490
IP address blocks:        2804:6cc4::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:9e:4b:b3:4f:9f:1a:15:1a:92:6d:d2:e2:9d:38:17:8d:97:78:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47186A1911BD977912FE4B2FC41A1632ED67B9B1
        Validity
            Not Before: Nov 16 18:55:00 2023 GMT
            Not After : Nov 14 19:00:00 2024 GMT
        Subject: CN=AD3149085CA810796778D2251931E1B5E788BABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:18:2a:42:38:4b:c8:fb:51:68:33:fa:5c:60:
                    9a:0c:fe:e0:18:73:6b:7b:af:68:a1:07:5f:96:a3:
                    96:bc:ab:ea:43:ca:fc:7d:46:2a:71:99:a0:23:3e:
                    a0:e2:17:c5:16:76:ac:3c:27:0b:c7:37:51:fc:05:
                    cd:cf:02:51:3f:76:7c:62:b8:7a:04:34:40:ef:22:
                    02:57:e4:dd:d1:a0:9f:03:7e:cf:51:9d:73:54:72:
                    cc:45:0a:1a:3d:5e:48:de:af:0e:c9:02:71:82:b9:
                    0d:60:8f:9e:4e:c4:c1:0c:64:49:27:f7:a6:f6:7c:
                    7f:38:8e:28:20:80:39:7f:73:0d:9f:36:48:1d:7c:
                    3c:16:d3:6c:4f:46:f7:33:43:1a:24:ea:33:54:a1:
                    e7:34:35:4b:fe:00:bd:fb:ad:71:71:97:69:6c:d5:
                    2d:03:3c:2e:c1:a5:9d:cd:58:af:fe:ee:b5:5e:27:
                    4c:0d:1a:ff:3f:ce:5d:72:dc:67:bb:3b:de:cf:cd:
                    eb:68:7d:50:24:ce:44:ca:85:29:d3:64:47:29:fd:
                    9a:ca:16:3d:cb:89:57:23:9a:d4:df:c8:19:d2:91:
                    5a:86:aa:1f:ba:18:f2:41:00:be:cf:91:7d:c7:e5:
                    6f:9a:57:2a:1e:74:e1:75:b6:9f:e8:77:46:31:78:
                    16:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:31:49:08:5C:A8:10:79:67:78:D2:25:19:31:E1:B5:E7:88:BA:BA
            X509v3 Authority Key Identifier:
                keyid:47:18:6A:19:11:BD:97:79:12:FE:4B:2F:C4:1A:16:32:ED:67:B9:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrsfgiFyWgRDD9YUMzAFbpPJgsjX2CDxKfXBeTvkezm2/0/47186A1911BD977912FE4B2FC41A1632ED67B9B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47186A1911BD977912FE4B2FC41A1632ED67B9B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrsfgiFyWgRDD9YUMzAFbpPJgsjX2CDxKfXBeTvkezm2/0/323830343a366363343a3a2f33322d3336203d3e20323730343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6cc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:5c:73:a6:0e:42:17:eb:0e:d9:db:a2:d3:97:0a:bc:a3:9f:
         61:d0:9a:4f:5a:93:f5:07:a4:c0:c5:a4:de:65:df:aa:73:c7:
         d8:21:85:c0:60:4d:e8:f1:05:9b:c5:65:7c:da:57:c6:9c:d1:
         6c:95:bf:bb:f2:14:fe:c1:1d:40:47:02:82:c4:72:0a:8e:60:
         45:bc:83:ea:e1:14:19:c2:a9:48:59:b5:25:c4:2c:f7:bf:95:
         3b:03:6c:b5:2a:3d:83:dc:08:82:b7:56:5b:56:89:05:2f:6d:
         7c:6c:ce:43:03:f2:e2:04:46:7b:f2:a8:59:10:b7:8f:dc:53:
         19:29:91:87:4e:1c:95:52:29:6d:45:b0:9e:85:05:58:b7:bc:
         b6:18:d6:9c:ec:a2:67:21:17:63:f4:18:46:b4:70:8f:f3:83:
         d6:64:4b:b3:1e:ca:68:ce:eb:73:46:0a:11:9f:7e:55:38:8f:
         79:a4:58:d3:25:7f:75:f3:58:9e:ca:94:84:73:4e:9b:5e:83:
         ab:15:50:34:2e:18:9c:04:dc:27:e3:fd:9b:ab:63:81:9a:21:
         6c:46:da:08:c6:7a:ff:56:17:cf:99:0f:f0:7f:a1:5a:6f:1e:
         3c:a9:a4:70:c3:b0:19:6a:96:a0:54:59:1d:72:74:13:65:e3:
         0e:8f:a0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org