Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/323830343a353064343a3a2f33322d3332203d3e20323638343133.roa
File:                     323830343a353064343a3a2f33322d3332203d3e20323638343133.roa (raw, json)
Hash identifier:          FoDN7tZSb7bXhSY76m5321c9uNU3BHM8PF4yHEWLcmE=
Subject key identifier:   22:65:9D:7E:9B:59:1E:EC:C4:A8:80:92:16:AD:97:41:1E:04:B6:9E
Certificate issuer:       /CN=C7EF6E1493EAA9C2D3647BEEA82DFF84702D21C8
Certificate serial:       0F3CF4D0494D07700D763D65C9C3DE1364143C24
Authority key identifier: C7:EF:6E:14:93:EA:A9:C2:D3:64:7B:EE:A8:2D:FF:84:70:2D:21:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C7EF6E1493EAA9C2D3647BEEA82DFF84702D21C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/323830343a353064343a3a2f33322d3332203d3e20323638343133.roa
Signing time:             Mon 11 Dec 2023 17:22:04 +0000
ROA not before:           Mon 11 Dec 2023 17:17:04 +0000
ROA not after:            Mon 09 Dec 2024 17:22:04 +0000
asID:                     268413
IP address blocks:        2804:50d4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:3c:f4:d0:49:4d:07:70:0d:76:3d:65:c9:c3:de:13:64:14:3c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7EF6E1493EAA9C2D3647BEEA82DFF84702D21C8
        Validity
            Not Before: Dec 11 17:17:04 2023 GMT
            Not After : Dec  9 17:22:04 2024 GMT
        Subject: CN=22659D7E9B591EECC4A8809216AD97411E04B69E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ca:75:69:b7:e1:e5:be:ef:87:ad:5c:c4:4f:
                    35:1f:5b:2a:f8:28:6a:03:1e:8b:05:b9:f5:0f:41:
                    a2:cc:5a:cd:d5:ee:fe:4f:87:57:8a:cc:5a:1e:6c:
                    94:6e:ce:3f:f8:f0:f1:06:77:64:f5:91:d6:ae:5d:
                    e7:fc:46:1d:b7:ad:a0:ba:81:22:a1:5b:61:d1:95:
                    b7:bf:6e:32:4d:de:0b:f0:5b:c5:37:5e:10:27:19:
                    27:98:2b:c6:17:5f:42:56:b3:ef:c2:4b:b5:fe:ab:
                    52:aa:9b:4e:8e:7a:fb:06:4b:03:3e:f1:3a:43:2d:
                    47:89:bc:11:0b:47:0f:53:21:9a:13:6d:7f:54:fb:
                    77:a9:17:6f:30:1b:e4:43:ca:d7:b4:43:83:71:6c:
                    c8:88:21:f7:0f:a4:b7:05:8e:02:33:2c:01:75:7e:
                    0a:e9:a2:b0:fa:9e:0a:c4:27:1b:cb:05:93:86:f0:
                    e6:7d:d9:a5:80:9b:d5:ac:23:e4:13:0e:77:2f:bf:
                    d2:c8:9a:2c:96:09:11:60:1f:b2:8e:0c:99:d4:bb:
                    39:6f:91:1e:8c:71:35:a8:27:7a:b1:7d:c6:08:11:
                    5a:a3:b4:a2:65:e5:12:04:37:14:87:09:f6:29:04:
                    c9:65:1e:77:ca:25:d0:96:62:fb:5e:e1:08:d6:0c:
                    40:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:65:9D:7E:9B:59:1E:EC:C4:A8:80:92:16:AD:97:41:1E:04:B6:9E
            X509v3 Authority Key Identifier:
                keyid:C7:EF:6E:14:93:EA:A9:C2:D3:64:7B:EE:A8:2D:FF:84:70:2D:21:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/C7EF6E1493EAA9C2D3647BEEA82DFF84702D21C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C7EF6E1493EAA9C2D3647BEEA82DFF84702D21C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/323830343a353064343a3a2f33322d3332203d3e20323638343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:50d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:d2:8e:bd:a4:f6:50:e9:12:50:a8:17:84:8b:42:3f:52:e8:
         d7:98:72:f4:7f:d0:9d:1e:a9:c4:2f:5a:22:8b:ad:bf:6e:50:
         1f:29:38:62:4a:2a:10:67:6d:57:c7:d0:7a:8b:36:60:2b:0a:
         a1:ae:aa:64:f1:4c:90:5d:19:ed:35:14:2e:14:95:23:22:f7:
         0d:a4:7b:90:b0:64:26:5e:ac:f8:55:31:2f:29:ef:b7:d7:4f:
         23:e1:d0:2c:29:b1:e0:c3:a6:04:92:75:16:5c:25:30:37:c5:
         6e:20:2c:f6:a7:83:6a:6b:72:92:93:43:52:26:01:94:fe:93:
         ec:7c:35:b2:9a:67:5e:be:28:16:d1:33:03:0c:b6:2f:40:c8:
         60:21:5d:87:ff:ee:61:e5:93:cc:24:1b:28:8e:52:69:0a:1e:
         70:70:88:97:21:d6:6d:10:e5:56:af:2b:04:48:2d:02:4e:29:
         74:ae:86:74:6f:24:3e:45:d1:2c:3d:8f:b2:28:1d:04:6e:cb:
         36:c3:53:7c:6a:dd:0d:c2:a7:61:22:33:4d:9e:74:fd:e9:7d:
         58:bd:5e:04:64:72:79:3a:2c:3f:47:cc:6f:8b:e9:88:26:11:
         a1:a1:85:fc:4d:f2:76:cd:a9:39:e8:af:6c:b7:f4:bf:90:66:
         3e:22:b1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org