Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/323830343a343863303a3a2f33322d3332203d3e20323637313432.roa
File:                     323830343a343863303a3a2f33322d3332203d3e20323637313432.roa (raw, json)
Hash identifier:          buBMbw9HjnRlH0OKEiWhrlzWZ4mRc5Z8du/2WrPwh74=
Subject key identifier:   E4:1B:70:FE:B0:5E:9C:59:F5:42:E3:61:D3:26:D4:0E:D2:8A:C0:09
Certificate issuer:       /CN=1958E2EE1DE5BD7BEC25BD3DD04A8EB02FCB0E83
Certificate serial:       19C0EF9F167F4C4717428953F5FF4B9EE7F47765
Authority key identifier: 19:58:E2:EE:1D:E5:BD:7B:EC:25:BD:3D:D0:4A:8E:B0:2F:CB:0E:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1958E2EE1DE5BD7BEC25BD3DD04A8EB02FCB0E83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/323830343a343863303a3a2f33322d3332203d3e20323637313432.roa
Signing time:             Sun 17 Mar 2024 02:04:01 +0000
ROA not before:           Sun 17 Mar 2024 01:59:01 +0000
ROA not after:            Sun 16 Mar 2025 02:04:01 +0000
asID:                     267142
IP address blocks:        2804:48c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c0:ef:9f:16:7f:4c:47:17:42:89:53:f5:ff:4b:9e:e7:f4:77:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1958E2EE1DE5BD7BEC25BD3DD04A8EB02FCB0E83
        Validity
            Not Before: Mar 17 01:59:01 2024 GMT
            Not After : Mar 16 02:04:01 2025 GMT
        Subject: CN=E41B70FEB05E9C59F542E361D326D40ED28AC009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d4:7e:34:c9:43:cb:e7:90:5c:13:9b:97:0c:
                    53:6a:c3:5e:a0:37:f6:6b:2e:cf:9a:60:42:24:2c:
                    e4:df:99:7a:33:87:9f:99:b4:38:98:99:6b:97:38:
                    1c:d2:79:b7:6b:56:93:08:ae:a3:59:14:8f:e9:e7:
                    aa:0c:33:5d:30:e1:d5:b1:40:67:eb:32:60:ec:88:
                    d5:4c:90:70:39:17:c9:61:7f:4f:36:5e:d9:bf:b3:
                    46:5c:b6:d9:2d:68:0d:83:59:3c:aa:e3:a6:49:79:
                    bb:3f:2d:22:5e:6f:49:cf:d7:7d:c7:6b:a2:c5:94:
                    a7:9a:7c:49:5a:46:f5:89:c1:82:b5:4e:33:87:b3:
                    33:6d:88:1b:dc:4c:55:2d:ef:da:31:4a:0d:40:22:
                    79:97:1e:a3:61:8a:76:5a:63:3e:54:62:5b:94:d0:
                    a6:03:95:20:b4:83:7f:9b:2b:7d:0b:36:09:a0:61:
                    f0:b8:cc:ab:47:67:7b:64:fe:a2:13:3e:ed:63:06:
                    f3:d9:30:2c:1a:80:7f:00:02:8b:1d:b1:53:05:53:
                    d6:fc:a2:cc:66:a0:b9:d9:25:1f:b9:49:a7:09:ab:
                    65:d4:ed:ae:a8:ea:c8:d9:f9:eb:6e:e3:f2:9d:58:
                    49:ab:f4:5e:08:75:6c:24:a3:b3:30:99:ca:4e:2b:
                    6f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1B:70:FE:B0:5E:9C:59:F5:42:E3:61:D3:26:D4:0E:D2:8A:C0:09
            X509v3 Authority Key Identifier:
                keyid:19:58:E2:EE:1D:E5:BD:7B:EC:25:BD:3D:D0:4A:8E:B0:2F:CB:0E:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/1958E2EE1DE5BD7BEC25BD3DD04A8EB02FCB0E83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1958E2EE1DE5BD7BEC25BD3DD04A8EB02FCB0E83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/323830343a343863303a3a2f33322d3332203d3e20323637313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:b3:32:66:74:bb:b2:5c:e8:5d:63:ac:dd:20:ba:50:a1:c1:
         f4:87:39:2c:63:94:21:0b:13:6b:53:36:62:e2:2d:79:8c:a6:
         66:82:ca:2d:2c:f7:3e:48:bd:80:6f:12:8c:ab:a1:d4:9d:86:
         14:e7:6f:a8:33:65:48:5b:33:e0:c7:22:b2:d4:19:00:b5:fa:
         bb:e3:30:15:4b:a4:98:86:cf:cb:77:fa:dc:d4:c2:8c:a0:0a:
         b3:a9:7d:60:8d:39:51:6a:96:ba:73:c0:5e:67:d9:df:96:e7:
         f8:96:00:7c:d0:7b:5b:f9:66:66:a5:f8:1e:0e:15:34:7d:35:
         7e:e2:60:7c:31:e5:6b:d2:ea:fe:dc:47:e4:c3:ac:56:bc:ac:
         ca:c7:c8:fc:c6:0a:77:51:86:8f:7d:e3:de:a7:62:dc:32:12:
         03:e1:6a:17:e6:db:7a:9a:af:be:4e:01:94:78:01:41:5a:dd:
         48:5a:1f:a5:d9:d1:4c:18:66:eb:15:92:9b:e3:bd:1d:78:28:
         b4:82:fb:d2:99:be:9c:74:34:c9:70:f8:9f:43:e2:46:64:50:
         4e:36:44:73:3a:0f:82:d8:21:96:0e:0a:05:3e:06:2f:6f:57:
         0d:77:af:7a:06:b2:36:ab:36:cb:8c:80:f9:e3:6e:27:18:38:
         65:5a:4f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org