Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EstCeSggA2m3NQmiYYdxS1XmB6mMaWtKasrpiTcx286A/0/323830343a326166343a3a2f33322d3438203d3e20323635313237.roa
File:                     323830343a326166343a3a2f33322d3438203d3e20323635313237.roa (raw, json)
Hash identifier:          gsUhG3r4cw3YZVdVKCF4B33SjUgVBrlOn+ZnA87LTgM=
Subject key identifier:   82:47:05:46:E7:94:49:58:5C:E7:CA:17:29:45:6A:E9:B1:55:EA:0C
Certificate issuer:       /CN=9DBE1BBDECAC236DCAEDC2B8681988894070DBE9
Certificate serial:       5B4D33884E8D05E36BAB8220F1262967457F9E2A
Authority key identifier: 9D:BE:1B:BD:EC:AC:23:6D:CA:ED:C2:B8:68:19:88:89:40:70:DB:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DBE1BBDECAC236DCAEDC2B8681988894070DBE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EstCeSggA2m3NQmiYYdxS1XmB6mMaWtKasrpiTcx286A/0/323830343a326166343a3a2f33322d3438203d3e20323635313237.roa
Signing time:             Fri 06 Oct 2023 13:48:55 +0000
ROA not before:           Fri 06 Oct 2023 13:43:55 +0000
ROA not after:            Fri 04 Oct 2024 13:48:55 +0000
asID:                     265127
IP address blocks:        2804:2af4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:4d:33:88:4e:8d:05:e3:6b:ab:82:20:f1:26:29:67:45:7f:9e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBE1BBDECAC236DCAEDC2B8681988894070DBE9
        Validity
            Not Before: Oct  6 13:43:55 2023 GMT
            Not After : Oct  4 13:48:55 2024 GMT
        Subject: CN=82470546E79449585CE7CA1729456AE9B155EA0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2c:6b:76:42:d1:46:d3:b1:98:2b:c0:27:ca:
                    4f:b0:69:97:81:18:aa:57:d4:53:5a:4c:ae:5b:00:
                    8d:dc:51:87:78:d8:4e:5c:fe:d3:60:23:4e:01:e4:
                    40:cb:81:b7:19:12:94:56:87:dc:f6:e7:17:98:84:
                    db:2a:f5:ed:9f:a3:bc:df:cd:06:58:c3:e8:a4:75:
                    74:ef:71:70:7d:40:ee:cd:2f:e9:e5:b6:8a:ac:42:
                    a2:d2:5c:4f:a0:dd:69:e9:4d:de:ac:b9:4d:52:52:
                    69:0d:a3:dc:98:4d:57:ff:24:7d:a7:b5:a7:9e:ab:
                    f7:9a:3d:b4:92:50:79:40:22:fe:f5:5e:ea:1f:0d:
                    77:5d:40:a6:0d:dc:b9:4c:ae:5d:56:15:43:82:d5:
                    c4:1f:a2:0d:7a:10:79:72:d4:84:5e:4c:b8:a4:46:
                    8c:f2:89:de:b1:6c:33:79:bf:c2:2c:1b:e1:8f:ee:
                    e6:9b:10:c1:80:1b:51:b7:27:0c:10:e5:60:a2:11:
                    91:d9:64:93:35:14:75:c7:89:a5:9d:16:d7:ee:81:
                    14:82:b4:46:f0:f8:81:85:44:2f:f9:a8:0f:05:22:
                    a9:83:e3:8e:11:a2:1d:f8:51:11:ea:c5:91:58:b3:
                    c3:16:08:86:77:a5:60:62:35:e5:d7:ab:9d:e9:69:
                    a2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:47:05:46:E7:94:49:58:5C:E7:CA:17:29:45:6A:E9:B1:55:EA:0C
            X509v3 Authority Key Identifier:
                keyid:9D:BE:1B:BD:EC:AC:23:6D:CA:ED:C2:B8:68:19:88:89:40:70:DB:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EstCeSggA2m3NQmiYYdxS1XmB6mMaWtKasrpiTcx286A/0/9DBE1BBDECAC236DCAEDC2B8681988894070DBE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DBE1BBDECAC236DCAEDC2B8681988894070DBE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EstCeSggA2m3NQmiYYdxS1XmB6mMaWtKasrpiTcx286A/0/323830343a326166343a3a2f33322d3438203d3e20323635313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2af4::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:fe:6e:81:ca:c5:fc:d2:57:75:01:12:63:6b:ec:80:df:90:
         a3:0a:7d:f5:b4:08:a7:bd:61:db:00:8a:f2:98:fc:1d:c9:1f:
         1d:ce:0e:27:3b:c5:76:62:e3:29:31:3b:cd:23:72:4a:01:fe:
         67:7c:98:0c:ec:c9:70:b8:66:9f:3c:96:5d:55:8a:d6:e5:74:
         ed:e7:47:a3:69:ec:d4:90:01:6b:9b:9d:ac:7b:1d:66:e2:2e:
         69:c1:ae:87:e1:1a:c4:be:72:25:f5:79:c6:71:28:22:66:e3:
         9d:d3:35:ef:09:9a:58:1f:e2:e1:b5:15:f6:55:11:59:94:17:
         14:7f:ed:31:24:21:f5:30:71:d3:72:a6:3a:97:f4:a8:f7:44:
         f1:73:9d:9f:0c:e8:b4:87:15:f7:1f:9f:73:da:5b:cf:d9:28:
         d1:4b:39:ab:21:3c:ab:4c:70:82:4a:cc:c4:63:03:ed:97:50:
         1a:28:85:23:41:ff:46:2a:6d:15:3c:db:dc:85:42:be:b6:48:
         38:94:b0:4d:75:01:e3:f1:86:01:a3:3e:ce:7d:d9:22:7b:c7:
         0e:32:6f:37:5f:5e:e5:f2:d3:b7:7f:d2:c5:55:49:a3:cc:cc:
         9e:36:8a:f6:15:6b:19:b9:e0:b2:06:c7:1a:b3:63:df:20:a9:
         8d:18:b3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:41 2024 by rpki-client on console-fra.rpki-client.org