Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/2/323830343a373761633a3a2f33322d3438203d3e20323731313932.roa
File:                     323830343a373761633a3a2f33322d3438203d3e20323731313932.roa (raw, json)
Hash identifier:          roQknvWaVss4MJAUvPL6gGALAhqhnJ8sLGIX3yCu2UE=
Subject key identifier:   9D:F6:73:0F:4B:F0:EC:09:3F:AE:A6:24:26:CA:2A:96:18:D7:A7:EF
Certificate issuer:       /CN=CE68A6D76A55B9D8764712CA4B612489BCF20583
Certificate serial:       11CBA3B2B804B0B8D074E571E51CC1C3BA6064CB
Authority key identifier: CE:68:A6:D7:6A:55:B9:D8:76:47:12:CA:4B:61:24:89:BC:F2:05:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE68A6D76A55B9D8764712CA4B612489BCF20583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/2/323830343a373761633a3a2f33322d3438203d3e20323731313932.roa
Signing time:             Tue 06 Jun 2023 16:03:51 +0000
ROA not before:           Tue 06 Jun 2023 15:58:51 +0000
ROA not after:            Tue 04 Jun 2024 16:03:51 +0000
asID:                     271192
IP address blocks:        2804:77ac::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:cb:a3:b2:b8:04:b0:b8:d0:74:e5:71:e5:1c:c1:c3:ba:60:64:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE68A6D76A55B9D8764712CA4B612489BCF20583
        Validity
            Not Before: Jun  6 15:58:51 2023 GMT
            Not After : Jun  4 16:03:51 2024 GMT
        Subject: CN=9DF6730F4BF0EC093FAEA62426CA2A9618D7A7EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ed:e0:35:e4:a9:bf:42:d7:20:c3:78:39:40:
                    48:c2:38:d5:ea:ab:4d:dc:a8:74:b3:b1:b7:00:2b:
                    8a:c6:5b:49:e1:9c:b1:59:70:8c:97:eb:b1:57:bf:
                    52:62:b6:9a:01:40:48:3c:ba:cf:82:d4:d3:03:b3:
                    f9:d8:e3:84:05:da:e7:f6:0a:90:4f:33:d8:94:b0:
                    3e:8d:43:33:62:bc:90:84:59:b7:ce:59:61:06:bb:
                    1f:03:9c:3c:7f:5d:31:da:c0:63:97:99:c0:79:51:
                    63:78:ac:a5:60:ae:4a:c3:66:7d:eb:59:7f:3c:54:
                    37:a4:84:05:08:6a:85:69:cf:f1:d1:6f:6b:77:27:
                    a1:3d:87:dc:7c:8a:6f:51:bc:d3:12:d4:00:e3:4b:
                    9d:fc:1c:10:83:e9:83:c1:4b:a4:ff:a9:25:75:3d:
                    7a:bf:0f:fb:81:0e:a0:2c:03:00:2f:c6:25:7e:31:
                    1a:8b:55:16:bb:01:25:50:8d:51:c4:92:bc:77:e8:
                    aa:13:72:45:af:08:f9:c1:dd:83:bd:7b:bc:68:fb:
                    47:4e:84:46:3c:6d:0a:dd:e1:5f:de:62:d0:cc:79:
                    74:4e:18:b8:d3:31:85:a0:ec:44:f8:ac:d1:96:08:
                    7c:2f:2a:83:74:cc:62:2b:14:36:a7:8b:3f:30:9f:
                    5a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F6:73:0F:4B:F0:EC:09:3F:AE:A6:24:26:CA:2A:96:18:D7:A7:EF
            X509v3 Authority Key Identifier:
                keyid:CE:68:A6:D7:6A:55:B9:D8:76:47:12:CA:4B:61:24:89:BC:F2:05:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/2/CE68A6D76A55B9D8764712CA4B612489BCF20583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE68A6D76A55B9D8764712CA4B612489BCF20583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/2/323830343a373761633a3a2f33322d3438203d3e20323731313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:77ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:79:b6:c2:c0:e6:dc:0d:19:cd:30:0e:17:07:83:cd:1d:47:
         45:1d:ff:0c:a0:72:40:81:f7:de:b7:93:6c:2f:b9:8a:00:bd:
         2d:fc:e2:f2:c2:39:ec:07:ed:e2:72:0b:ef:ff:e8:ec:75:a3:
         15:99:62:bf:f7:4d:2b:8d:8e:83:c6:fd:b2:4d:21:ec:d6:f1:
         0f:51:41:01:c9:9b:fd:9b:17:ea:84:a7:47:a0:3e:c8:b4:4c:
         b4:ed:f6:cf:d4:57:e6:33:2d:8c:4a:dd:29:77:dd:87:37:e4:
         2a:5e:04:b7:8b:b6:2f:00:a9:de:b3:c2:d3:9c:49:e3:04:e3:
         48:f2:53:94:d8:e9:32:73:b2:a8:7c:b0:08:87:0d:91:ef:a2:
         65:21:ee:fa:55:30:09:05:6c:51:2c:8f:11:80:80:78:3a:60:
         01:ed:39:8d:e5:32:99:ee:63:ab:9e:51:3b:f9:6d:72:8c:42:
         78:66:45:a4:57:f9:b9:ca:9e:ac:8d:31:20:eb:ce:0b:f3:37:
         64:cb:c4:51:b5:b5:b8:26:71:9a:d5:b7:02:96:5b:51:cc:e3:
         f6:2c:d6:df:c7:d6:eb:19:56:6a:60:c4:0e:62:43:62:bd:38:
         15:9c:df:ef:da:5e:3d:da:8b:44:ea:3e:3e:ca:20:63:3f:93:
         42:d9:52:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org