Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/1/323830343a366439633a383030303a3a2f33332d3333203d3e20323730353434.roa
File:                     323830343a366439633a383030303a3a2f33332d3333203d3e20323730353434.roa (raw, json)
Hash identifier:          UiZtwCVHmd/9OPHNd8x5vvj+ZwXr0xDpWaqDGw2YHAk=
Subject key identifier:   9C:6B:9B:7C:73:D4:A7:07:68:AB:54:F4:FA:E7:0E:0E:BA:3F:8B:32
Certificate issuer:       /CN=5A96080087CD6DEA60732C4BB764DEF86100C18B
Certificate serial:       661F951141228B8466C207E03C15EEE9243B93EB
Authority key identifier: 5A:96:08:00:87:CD:6D:EA:60:73:2C:4B:B7:64:DE:F8:61:00:C1:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A96080087CD6DEA60732C4BB764DEF86100C18B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/1/323830343a366439633a383030303a3a2f33332d3333203d3e20323730353434.roa
Signing time:             Thu 04 Apr 2024 09:25:24 +0000
ROA not before:           Thu 04 Apr 2024 09:20:24 +0000
ROA not after:            Thu 03 Apr 2025 09:25:24 +0000
asID:                     270544
IP address blocks:        2804:6d9c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:1f:95:11:41:22:8b:84:66:c2:07:e0:3c:15:ee:e9:24:3b:93:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A96080087CD6DEA60732C4BB764DEF86100C18B
        Validity
            Not Before: Apr  4 09:20:24 2024 GMT
            Not After : Apr  3 09:25:24 2025 GMT
        Subject: CN=9C6B9B7C73D4A70768AB54F4FAE70E0EBA3F8B32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4c:c1:91:4e:93:90:94:03:51:99:1b:c4:08:
                    ba:2f:9e:32:40:c8:21:a0:ca:c2:ba:ef:96:53:d0:
                    31:9d:74:77:34:6c:97:56:49:0c:0a:ff:5f:9b:75:
                    1c:d0:04:cc:c0:11:39:e9:d7:22:21:2e:e2:a8:d0:
                    2e:f6:5b:c2:d2:f1:87:eb:b9:3f:2f:35:8d:43:47:
                    61:81:16:15:32:87:82:1d:f9:3c:84:e1:30:7f:f5:
                    50:19:d8:27:25:55:3c:fe:ed:c2:5f:5e:29:66:ac:
                    1e:26:7b:89:8b:8e:6f:a9:a7:ba:40:23:f9:b4:4d:
                    dc:e5:d5:35:1d:6e:da:10:41:45:aa:a1:56:2a:1e:
                    8d:3d:5b:3e:04:7f:91:e9:fe:02:b9:88:ef:17:22:
                    2e:98:82:00:45:18:2d:a4:dc:5d:8c:2b:cd:59:ac:
                    cb:e7:f3:04:dc:b4:6b:cf:26:72:a9:e3:c4:d4:2e:
                    09:a8:65:10:bd:6b:98:fa:d8:61:d9:e9:49:1a:17:
                    13:50:97:be:e8:25:d5:b3:0f:82:75:99:10:e3:71:
                    fc:97:43:15:59:06:1e:8d:07:67:8b:63:f0:97:b1:
                    a7:b2:b6:bf:f1:55:19:8e:98:cb:57:13:a3:57:f8:
                    25:91:71:2d:be:b4:fc:26:51:3d:03:48:f1:99:e7:
                    92:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6B:9B:7C:73:D4:A7:07:68:AB:54:F4:FA:E7:0E:0E:BA:3F:8B:32
            X509v3 Authority Key Identifier:
                keyid:5A:96:08:00:87:CD:6D:EA:60:73:2C:4B:B7:64:DE:F8:61:00:C1:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/1/5A96080087CD6DEA60732C4BB764DEF86100C18B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A96080087CD6DEA60732C4BB764DEF86100C18B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/1/323830343a366439633a383030303a3a2f33332d3333203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d9c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         84:ed:5c:5a:22:d9:9e:eb:05:4f:75:53:36:62:a2:3b:f0:a9:
         bd:5f:0b:cf:7d:a4:d3:da:ce:b7:0c:7d:6c:b5:df:63:48:21:
         ac:2e:4d:0b:80:d8:58:c9:cd:1f:4b:f7:e9:13:4e:de:94:e0:
         7e:3e:3d:e6:37:0b:1b:42:7a:78:b7:79:13:32:9d:6d:e2:e6:
         52:11:ce:ca:4b:9a:17:65:6e:98:0e:43:c1:26:f3:68:bf:59:
         e3:0d:fa:3e:57:d3:8b:4e:ee:50:8b:56:23:a9:f8:90:bf:b2:
         6f:a8:5e:df:41:69:4d:fc:92:d6:00:a3:91:2d:70:f0:7e:3f:
         d7:57:21:7a:76:b8:7f:59:a6:b6:6a:9e:87:7d:af:61:13:c3:
         5f:52:3d:3e:04:ff:11:6b:87:c1:29:23:d8:73:c3:04:aa:34:
         80:6d:d8:0a:35:98:74:af:6e:7f:37:45:26:ee:20:74:47:22:
         e3:f3:48:c2:63:bf:5e:5f:a9:28:e2:fc:74:44:b9:fb:94:6d:
         a5:9a:83:0f:a5:12:58:fe:cb:7e:42:13:3f:b6:83:aa:46:3a:
         03:d5:3f:cb:42:6a:10:9f:f2:29:ad:1c:f2:72:ec:de:6b:8c:
         78:e1:0c:99:a1:56:bc:b8:86:52:77:46:2a:d7:5f:3d:99:ca:
         6c:02:de:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org