Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2jmTK2NZU8GivFVWJvtrmyLokiMSJAsH3fEvM4mB5MM/0/323830343a373933343a633030303a3a2f33342d3334203d3e20323731323931.roa
File:                     323830343a373933343a633030303a3a2f33342d3334203d3e20323731323931.roa (raw, json)
Hash identifier:          T27OKoTtRtBMN8fRuf5343ulvbecgufKpAsbG22oy4M=
Subject key identifier:   C8:84:20:73:65:E2:B2:38:84:B5:0C:08:A1:14:5C:94:00:47:1E:72
Certificate issuer:       /CN=1011C312A65F3318325F50C1B9D907345DF4E5A2
Certificate serial:       18A00C898394CAC8072CCCDFF905667E729A68C5
Authority key identifier: 10:11:C3:12:A6:5F:33:18:32:5F:50:C1:B9:D9:07:34:5D:F4:E5:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1011C312A65F3318325F50C1B9D907345DF4E5A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2jmTK2NZU8GivFVWJvtrmyLokiMSJAsH3fEvM4mB5MM/0/323830343a373933343a633030303a3a2f33342d3334203d3e20323731323931.roa
Signing time:             Wed 29 Mar 2023 02:36:35 +0000
ROA not before:           Wed 29 Mar 2023 02:31:35 +0000
ROA not after:            Wed 27 Mar 2024 02:36:35 +0000
asID:                     271291
IP address blocks:        2804:7934:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a0:0c:89:83:94:ca:c8:07:2c:cc:df:f9:05:66:7e:72:9a:68:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1011C312A65F3318325F50C1B9D907345DF4E5A2
        Validity
            Not Before: Mar 29 02:31:35 2023 GMT
            Not After : Mar 27 02:36:35 2024 GMT
        Subject: CN=C884207365E2B23884B50C08A1145C9400471E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b0:96:ff:fc:0b:e0:dd:cf:1c:bb:86:48:6d:
                    61:10:ec:1c:33:8b:f7:4d:bd:d4:9d:0e:c6:a0:51:
                    88:c7:14:46:0f:c8:ef:5b:7d:b6:b0:0a:7f:27:d5:
                    c8:7e:47:dc:dc:80:d7:61:52:24:cc:12:44:91:34:
                    51:99:0e:43:8f:25:dd:c6:71:00:3d:c8:f7:98:60:
                    44:87:e1:cf:a2:3b:c2:52:9e:dd:47:b9:93:c2:ff:
                    e5:0e:4c:be:21:3f:9a:e7:f6:3b:60:df:b5:5a:f7:
                    ea:47:54:37:5e:14:da:27:b0:c2:7f:84:85:24:87:
                    6d:6c:d8:ef:f8:4f:93:7f:8e:de:8e:74:1d:5a:ed:
                    2d:c2:e5:a3:20:30:4d:a2:b5:4a:7a:f1:ef:96:32:
                    1f:18:b6:9a:62:14:ee:68:03:cc:62:e0:ce:a5:a5:
                    3d:93:e3:0a:5d:21:88:6c:cc:f1:99:a8:9a:27:37:
                    eb:8e:34:cf:31:81:6b:50:00:60:b0:a8:78:8f:83:
                    53:3d:7d:7e:a2:75:c4:be:4e:b3:61:4b:d8:2a:13:
                    47:e6:37:41:21:e0:17:20:4a:2c:ca:8a:1c:68:6c:
                    6f:bc:77:44:c0:78:5b:25:8e:60:16:a3:9f:ef:7c:
                    6f:74:3d:12:a8:19:29:68:20:28:6b:01:cb:25:ec:
                    98:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:84:20:73:65:E2:B2:38:84:B5:0C:08:A1:14:5C:94:00:47:1E:72
            X509v3 Authority Key Identifier:
                keyid:10:11:C3:12:A6:5F:33:18:32:5F:50:C1:B9:D9:07:34:5D:F4:E5:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2jmTK2NZU8GivFVWJvtrmyLokiMSJAsH3fEvM4mB5MM/0/1011C312A65F3318325F50C1B9D907345DF4E5A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1011C312A65F3318325F50C1B9D907345DF4E5A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2jmTK2NZU8GivFVWJvtrmyLokiMSJAsH3fEvM4mB5MM/0/323830343a373933343a633030303a3a2f33342d3334203d3e20323731323931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7934:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c1:a5:91:fb:cd:43:0a:d0:60:2b:eb:cb:96:71:4e:3d:38:db:
         21:b0:03:14:8d:a1:44:b4:86:16:61:85:70:8b:cd:e4:63:ce:
         34:92:b4:34:26:36:ec:62:70:bc:32:eb:a6:96:38:4e:8d:38:
         9d:1f:8e:a4:b2:70:54:fb:ba:02:02:72:59:4d:68:fe:c4:ad:
         94:12:d1:0d:bd:89:f8:e4:a7:4b:8b:25:6e:f2:64:3a:d2:74:
         01:a5:d7:8f:e5:8c:88:83:84:ca:37:eb:a7:ce:e0:85:aa:a4:
         a8:2b:60:ec:72:10:77:7e:e3:29:f3:c3:fd:06:94:26:cc:2d:
         e3:02:75:53:7e:4f:f7:cd:38:66:9a:b2:10:33:4e:a4:c1:00:
         d6:a3:65:68:62:60:99:a4:f9:c7:06:4e:ac:58:b7:66:3d:d9:
         bc:9c:e2:a0:01:af:20:62:c0:b4:da:88:3a:c6:e5:74:b8:a6:
         a5:f0:7d:86:81:9f:0c:3a:ab:f1:f1:73:9e:33:7c:3d:81:0f:
         e2:31:a6:92:4a:a9:de:15:24:36:9d:5b:bf:d5:74:ea:18:d0:
         34:0a:a8:53:1d:65:ae:73:51:33:22:97:18:d7:4d:e1:dc:a5:
         97:54:d0:9a:f2:1f:b9:b7:f2:2f:f7:2b:9e:19:59:f1:e4:c5:
         79:f5:4e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:36 2024 by rpki-client on console-fra.rpki-client.org