Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/323830343a326231303a323030303a3a2f33392d3339203d3e203532393136.roa
File:                     323830343a326231303a323030303a3a2f33392d3339203d3e203532393136.roa (raw, json)
Hash identifier:          MxO6zhOA6YYStbu5XEW5kP6BpEQliGwxgvpO/O1Lm5A=
Subject key identifier:   09:83:97:16:58:84:A7:FC:00:04:5C:5F:F9:0D:AD:9E:04:55:C8:AE
Certificate issuer:       /CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
Certificate serial:       16C35E445398AE8BCFF7BFB85AF0ED1291893249
Authority key identifier: D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/323830343a326231303a323030303a3a2f33392d3339203d3e203532393136.roa
Signing time:             Sun 01 Oct 2023 18:22:59 +0000
ROA not before:           Sun 01 Oct 2023 18:17:59 +0000
ROA not after:            Sun 29 Sep 2024 18:22:59 +0000
asID:                     52916
IP address blocks:        2804:2b10:2000::/39 maxlen: 39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c3:5e:44:53:98:ae:8b:cf:f7:bf:b8:5a:f0:ed:12:91:89:32:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
        Validity
            Not Before: Oct  1 18:17:59 2023 GMT
            Not After : Sep 29 18:22:59 2024 GMT
        Subject: CN=098397165884A7FC00045C5FF90DAD9E0455C8AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ae:40:16:a6:71:3c:dd:05:6c:5f:be:03:c7:
                    a0:35:55:88:72:bc:0b:27:2a:88:b3:09:45:38:d7:
                    32:82:0e:b1:e8:a7:66:b0:3f:9a:f1:fc:0b:5d:35:
                    e9:88:b7:7a:eb:ab:52:c0:9f:84:52:2a:78:3d:63:
                    c9:98:16:ad:bc:81:28:d1:42:f7:16:5e:7e:68:a1:
                    ea:c4:8d:92:cd:0f:a4:72:4b:5d:d1:90:8b:2b:1f:
                    33:c5:fc:ed:16:e0:1c:77:4b:98:f3:9a:a6:23:11:
                    6f:8e:c8:5f:5c:08:76:bf:7f:4d:d2:16:e2:3c:55:
                    68:16:bc:a8:0b:cc:4c:49:7f:d9:d5:d6:5d:30:41:
                    28:ae:be:f4:fe:20:2c:ac:be:65:f4:73:7e:d4:17:
                    ef:1d:ae:27:cd:ed:b9:a9:63:0a:de:63:83:35:70:
                    a2:0e:07:0e:13:97:42:10:48:67:1e:db:25:09:28:
                    3d:af:50:50:9a:f8:f7:4c:f1:f0:85:df:78:b9:6f:
                    82:9b:55:1a:4f:e3:c0:a6:08:46:b3:88:8f:be:09:
                    f8:73:41:22:2b:b5:bf:f8:a7:8a:33:51:0d:4b:0d:
                    95:fe:b5:69:44:29:22:63:27:00:fc:6c:35:15:00:
                    fd:3b:c2:ac:f6:be:9c:94:bc:bf:76:e1:bb:98:05:
                    eb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:83:97:16:58:84:A7:FC:00:04:5C:5F:F9:0D:AD:9E:04:55:C8:AE
            X509v3 Authority Key Identifier:
                keyid:D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/323830343a326231303a323030303a3a2f33392d3339203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b10:2000::/39

    Signature Algorithm: sha256WithRSAEncryption
         78:8c:99:11:6f:f6:a8:30:e6:6e:e8:9a:d1:ed:59:12:09:4a:
         d6:a6:b4:14:21:af:cc:97:25:be:66:56:bd:5c:05:66:2a:21:
         69:cf:99:cf:73:5f:c8:46:8b:e6:c4:a5:13:88:54:03:39:04:
         b9:61:af:fc:e0:06:83:73:06:63:e3:96:30:41:bb:86:c1:5f:
         5d:4f:31:5d:cb:c1:21:4e:5d:6f:6c:be:20:36:32:22:b7:6a:
         3d:8b:05:68:91:e7:60:da:f4:22:6e:a0:b2:94:49:d5:a9:1a:
         38:9b:5e:47:dc:f3:5f:e8:a5:a3:cf:af:e8:1e:6b:ae:cb:42:
         6b:cc:b4:7a:c5:86:af:a3:a8:73:a0:b2:65:e2:71:57:c8:6e:
         e0:d7:bc:c2:08:fb:b9:ad:b5:63:39:6a:e9:c8:e4:1d:00:19:
         9e:59:60:bb:74:a0:3b:fe:53:4a:be:30:8a:95:06:a3:9a:6c:
         1c:ec:78:e5:2d:1b:ed:3b:ce:d1:52:b7:6a:63:78:85:5b:d8:
         28:e5:df:fc:f0:73:bd:43:20:84:70:01:50:74:80:22:58:fb:
         24:4f:6e:65:fb:8d:72:e9:f2:07:06:10:2d:33:cd:bf:88:c6:
         26:3a:31:69:54:55:6a:fb:d0:41:07:7f:a0:65:42:7b:1d:98:
         c9:6c:d2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org