Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/323830343a313133633a3a2f33322d313238203d3e20323033.roa
File:                     323830343a313133633a3a2f33322d313238203d3e20323033.roa (raw, json)
Hash identifier:          RGDa60EZ08WIWurk06m65B4CX5a71fqrwIgUODUI8TU=
Subject key identifier:   82:64:F3:5D:59:F0:2A:61:DE:E1:5A:CE:D5:17:01:64:F4:BC:43:4A
Certificate issuer:       /CN=95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA
Certificate serial:       150C410F74AE51DCE86C64BD59085065CD60C746
Authority key identifier: 95:B5:A9:6C:77:43:93:9C:30:3E:DD:7F:2D:3C:C4:AB:9C:5D:B9:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/323830343a313133633a3a2f33322d313238203d3e20323033.roa
Signing time:             Sat 21 Jan 2023 22:22:35 +0000
ROA not before:           Sat 21 Jan 2023 22:17:35 +0000
ROA not after:            Sat 20 Jan 2024 22:22:35 +0000
asID:                     203
IP address blocks:        2804:113c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:0c:41:0f:74:ae:51:dc:e8:6c:64:bd:59:08:50:65:cd:60:c7:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA
        Validity
            Not Before: Jan 21 22:17:35 2023 GMT
            Not After : Jan 20 22:22:35 2024 GMT
        Subject: CN=8264F35D59F02A61DEE15ACED5170164F4BC434A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a9:33:e9:3c:20:61:02:63:ff:ac:77:32:93:
                    ef:ca:91:33:88:57:0c:6b:19:63:e9:4e:be:db:8f:
                    e2:bd:35:a8:57:0a:fd:1d:b9:95:f0:3a:14:fc:c8:
                    06:a0:e5:0a:2c:79:20:0b:8c:db:38:ac:53:d8:7d:
                    ef:c3:28:1d:48:06:fd:2a:75:50:5f:a8:65:67:6b:
                    e0:9a:5c:05:b9:69:5b:d0:e3:47:a2:4c:7b:20:60:
                    d2:8b:22:6e:d9:f5:17:85:c4:db:86:d4:24:14:f3:
                    dc:76:f7:41:97:ab:4d:53:22:c9:0e:7d:da:86:47:
                    a3:2f:3d:bc:80:a2:30:36:a6:0f:a6:fe:c1:31:99:
                    bb:d0:f1:08:e8:78:cc:6c:a6:81:1e:cb:d0:16:0f:
                    77:40:45:28:ca:98:5e:f1:e5:e1:3e:2c:a9:bd:9c:
                    c9:1d:88:4e:29:9d:6f:6f:57:01:62:e9:e1:d3:ed:
                    81:ec:d3:b3:53:d6:2b:27:f0:33:f8:db:54:f6:67:
                    93:8a:d4:a1:08:c4:7c:5d:ca:58:e0:27:8d:53:d2:
                    31:8b:95:8c:3c:74:08:38:b5:49:c8:f7:d7:ae:5f:
                    2f:07:0d:a9:1f:04:de:91:71:49:e8:60:e0:85:77:
                    50:4e:6f:83:74:06:96:41:28:fa:96:36:bb:fe:ea:
                    90:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:64:F3:5D:59:F0:2A:61:DE:E1:5A:CE:D5:17:01:64:F4:BC:43:4A
            X509v3 Authority Key Identifier:
                keyid:95:B5:A9:6C:77:43:93:9C:30:3E:DD:7F:2D:3C:C4:AB:9C:5D:B9:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/323830343a313133633a3a2f33322d313238203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:113c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:20:21:e2:a0:1e:c8:5b:00:be:f1:a2:6a:f5:76:0e:f4:79:
         af:b5:07:6a:ec:09:c2:aa:25:6f:f7:0d:3f:92:7c:5a:3e:b6:
         df:0c:b1:82:b8:c6:83:3b:47:d0:db:8b:10:56:4d:86:2d:36:
         b3:6a:d7:ad:57:09:23:00:0d:f9:27:5c:60:b7:a3:b7:1e:69:
         da:d1:57:00:67:96:2c:e3:33:84:a0:73:9f:c5:24:32:67:08:
         c1:a3:71:1b:f5:de:88:65:96:98:22:9b:84:ac:1c:76:26:cd:
         9f:86:4e:61:a3:5e:28:41:ae:8c:f8:9d:aa:68:06:5e:7f:59:
         a1:6f:91:c7:18:d5:59:2a:71:6e:69:25:0d:9c:8b:94:89:e5:
         8b:69:bd:69:a7:81:e7:72:33:6e:c1:55:94:77:66:7b:8e:c9:
         27:4e:fa:42:c2:84:ea:df:8b:f5:0b:32:f8:c9:38:4b:7a:f7:
         e2:50:c3:be:d2:4b:2a:fc:b9:da:e4:06:e1:b0:24:04:28:87:
         df:05:b0:17:a5:7e:63:3f:64:5c:ed:c3:06:e5:72:fe:d5:dd:
         04:3f:ce:57:92:23:cb:85:e4:65:e8:31:b5:a6:41:54:ac:f1:
         88:d7:1c:d0:ed:4b:b5:b3:85:b2:87:2f:90:9d:31:7b:32:7c:
         45:30:f8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org