Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a3a2f33352d3438203d3e20323730363330.roa
File:                     323830343a366566383a3a2f33352d3438203d3e20323730363330.roa (raw, json)
Hash identifier:          TzZOtGUSbj/Q3S80jhpuRl2iDU5tnCPSVA/s65Dqok4=
Subject key identifier:   F0:A0:DF:94:6D:C4:CA:DD:20:6D:B8:D4:7D:90:57:C2:84:9B:AA:C6
Certificate issuer:       /CN=471E19468CAF849656C487F645F16A3E85C981EC
Certificate serial:       15F348DED8B30718940D2B794A9888B336AD6941
Authority key identifier: 47:1E:19:46:8C:AF:84:96:56:C4:87:F6:45:F1:6A:3E:85:C9:81:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/471E19468CAF849656C487F645F16A3E85C981EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a3a2f33352d3438203d3e20323730363330.roa
Signing time:             Mon 09 Oct 2023 22:00:00 +0000
ROA not before:           Mon 09 Oct 2023 21:55:00 +0000
ROA not after:            Mon 07 Oct 2024 22:00:00 +0000
asID:                     270630
IP address blocks:        2804:6ef8::/35 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f3:48:de:d8:b3:07:18:94:0d:2b:79:4a:98:88:b3:36:ad:69:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=471E19468CAF849656C487F645F16A3E85C981EC
        Validity
            Not Before: Oct  9 21:55:00 2023 GMT
            Not After : Oct  7 22:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0c:47:5f:7e:c7:12:65:9d:d5:9f:8a:62:ed:
                    85:9e:df:90:77:1f:c8:f1:09:1d:8e:b0:11:80:6a:
                    fc:83:9d:42:8a:77:3e:85:65:0e:61:b0:7c:69:bd:
                    d7:98:d5:54:fd:5b:7b:e5:45:1a:bb:ef:24:15:18:
                    31:94:cd:98:46:bd:ca:2e:d0:78:88:d0:f2:a8:89:
                    73:21:2c:74:6e:d8:cb:12:2d:fa:b8:e4:09:a3:7a:
                    70:08:44:54:5c:e3:02:df:ad:3b:e7:e2:5a:50:10:
                    34:44:69:34:26:64:51:a1:ff:05:87:be:7c:75:04:
                    b3:e8:ac:ac:7e:66:36:9f:ad:a2:83:96:a9:08:37:
                    45:94:70:f7:b7:75:8c:90:02:70:3f:23:26:48:00:
                    6e:bc:0f:0e:66:1a:dd:a3:98:f5:f9:99:85:43:eb:
                    ab:35:31:42:2d:69:25:0b:cb:70:84:99:6d:fd:3e:
                    8a:f3:67:f7:71:64:fa:b2:11:43:1c:a7:9a:75:a4:
                    e8:27:1b:db:3c:d0:c1:ec:24:3c:48:bf:7e:45:5c:
                    7f:0e:8b:c0:1e:a6:4a:69:91:d1:ec:c0:e6:0b:df:
                    81:3c:dd:2b:76:be:9b:12:1f:be:1f:ec:4b:47:e2:
                    6d:98:25:38:0d:01:12:43:e5:e1:1e:5b:25:24:31:
                    1b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A0:DF:94:6D:C4:CA:DD:20:6D:B8:D4:7D:90:57:C2:84:9B:AA:C6
            X509v3 Authority Key Identifier:
                keyid:47:1E:19:46:8C:AF:84:96:56:C4:87:F6:45:F1:6A:3E:85:C9:81:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/471E19468CAF849656C487F645F16A3E85C981EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/471E19468CAF849656C487F645F16A3E85C981EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a3a2f33352d3438203d3e20323730363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ef8::/35

    Signature Algorithm: sha256WithRSAEncryption
         2f:02:3d:af:9e:d9:49:b7:25:a8:75:36:37:81:3f:67:90:4e:
         4c:c4:00:29:8c:c6:b2:71:9c:e9:7e:3c:19:a7:90:9d:d5:65:
         a1:d4:2a:d7:26:4c:34:65:9c:d2:c1:a0:24:40:47:5a:6c:18:
         37:d2:64:54:e7:cb:c4:21:b0:b5:dd:84:5b:33:67:80:22:ec:
         0e:07:42:9f:bd:3a:d3:be:b3:61:df:47:9a:cf:bb:d7:5f:62:
         2b:86:24:93:a0:a4:af:72:b8:7b:52:bf:e0:87:a5:e5:9a:51:
         0a:f5:08:01:9c:27:d3:fd:af:23:ad:a6:56:25:bb:f0:fc:08:
         01:f7:72:de:13:3f:d2:f0:a3:16:ab:ad:42:0c:f1:41:c0:40:
         da:de:1c:2b:7d:55:62:e6:63:96:27:28:96:44:3d:32:0b:db:
         3d:2e:a1:67:d2:ab:b5:db:df:db:29:f8:e5:f6:33:89:b1:d6:
         7e:7f:f3:7f:f2:b4:ba:4d:17:de:a3:1e:f8:30:7b:b6:ea:6d:
         c7:9d:45:b0:5f:0c:e1:b4:be:4f:93:2a:b1:ca:05:c2:b4:4c:
         55:f4:7a:ec:96:c8:74:8c:d1:eb:d8:f3:4b:dd:15:99:f5:c7:
         b3:50:0a:60:a3:c2:a9:bf:db:e7:a0:78:a9:89:ac:31:67:d4:
         de:7d:1c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org