Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/323830343a316431633a3a2f33322d3430203d3e203533313936.roa
File:                     323830343a316431633a3a2f33322d3430203d3e203533313936.roa (raw, json)
Hash identifier:          3MbbGTTDzlsCnCA7NylfhcNRhcVdL0Z7fCecUBsf0z4=
Subject key identifier:   DB:D4:D2:07:E0:E1:A2:7D:AD:9C:E9:4F:E3:7B:6E:71:60:54:B8:8B
Certificate issuer:       /CN=B14A9C61375F471EA01094C9014C886AD5FF6A19
Certificate serial:       7271B0A06AC38B78FDE6EB1E9CF89F1B43EF652F
Authority key identifier: B1:4A:9C:61:37:5F:47:1E:A0:10:94:C9:01:4C:88:6A:D5:FF:6A:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B14A9C61375F471EA01094C9014C886AD5FF6A19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/323830343a316431633a3a2f33322d3430203d3e203533313936.roa
Signing time:             Mon 11 Sep 2023 13:53:28 +0000
ROA not before:           Mon 11 Sep 2023 13:48:28 +0000
ROA not after:            Mon 09 Sep 2024 13:53:28 +0000
asID:                     53196
IP address blocks:        2804:1d1c::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:71:b0:a0:6a:c3:8b:78:fd:e6:eb:1e:9c:f8:9f:1b:43:ef:65:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B14A9C61375F471EA01094C9014C886AD5FF6A19
        Validity
            Not Before: Sep 11 13:48:28 2023 GMT
            Not After : Sep  9 13:53:28 2024 GMT
        Subject: CN=DBD4D207E0E1A27DAD9CE94FE37B6E716054B88B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:82:8c:48:22:30:d8:47:26:90:51:69:f8:ee:
                    00:2b:08:4a:46:59:8d:59:a9:21:37:07:87:d5:71:
                    77:3e:8b:7c:4b:1b:94:8a:f6:04:17:b2:83:62:bc:
                    74:c5:d4:a7:aa:95:55:d7:4d:26:79:89:c2:e4:7c:
                    d5:48:d8:92:d2:ac:de:b3:e6:47:0f:b7:17:f9:dc:
                    ae:81:4a:45:41:8e:25:b6:fc:8f:08:98:0f:34:4f:
                    e8:97:e1:cb:51:7e:53:f1:77:c3:d0:70:1c:d8:8c:
                    66:2a:14:4c:1a:88:dd:c5:56:bb:23:29:57:dd:06:
                    9c:11:ed:a0:8c:e3:a7:67:0a:33:db:fa:e8:7e:d3:
                    fa:27:b2:6e:cb:f0:7f:63:e6:57:f3:9c:1a:09:23:
                    5a:9c:54:4d:2e:1b:49:10:dc:df:c9:a5:e4:1d:f6:
                    5e:e7:8d:ad:b4:21:9a:79:df:bf:54:4d:4c:54:42:
                    70:32:84:94:fc:f6:e0:7b:cd:cd:30:94:c3:65:a8:
                    f9:20:3b:4a:5b:e2:18:c4:5f:ee:b7:6b:8c:df:ac:
                    5c:bd:0c:79:b7:b0:a5:2d:05:6c:5f:ee:d8:08:6a:
                    27:c3:94:a1:6c:d1:e1:25:ad:dd:da:fa:8f:27:ec:
                    7e:ec:7f:4d:4b:4e:46:04:63:5d:5e:32:a1:2e:af:
                    1a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D4:D2:07:E0:E1:A2:7D:AD:9C:E9:4F:E3:7B:6E:71:60:54:B8:8B
            X509v3 Authority Key Identifier:
                keyid:B1:4A:9C:61:37:5F:47:1E:A0:10:94:C9:01:4C:88:6A:D5:FF:6A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/B14A9C61375F471EA01094C9014C886AD5FF6A19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B14A9C61375F471EA01094C9014C886AD5FF6A19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/323830343a316431633a3a2f33322d3430203d3e203533313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:b2:a2:88:ff:f0:c2:3c:41:4e:3c:e7:b4:b7:0d:ea:3a:59:
         58:0d:e0:45:83:05:78:18:54:69:8b:b4:5d:c3:bd:ef:de:3c:
         af:60:91:0a:35:7f:3c:fb:4b:86:81:a2:50:75:a9:32:0f:bd:
         1e:5d:a2:e8:0d:a2:f2:a7:67:d9:17:a7:9f:ae:96:57:f2:11:
         50:bb:e0:19:f2:a6:f9:77:01:35:a4:40:90:f3:6a:3e:9f:87:
         ec:8b:3d:b2:3d:02:58:a6:d9:33:79:04:e1:0d:6a:f9:0a:5a:
         d3:d1:45:9f:07:0f:aa:aa:36:40:96:82:72:f4:d5:e1:2d:22:
         95:08:a3:a6:14:fc:7c:97:b0:67:03:17:53:51:e3:7a:c8:83:
         d2:cb:be:ac:29:0b:eb:f3:3a:50:a0:d2:31:3a:17:c4:26:39:
         32:b0:e6:b2:07:2b:0a:6d:96:c1:df:e9:ca:53:e9:95:97:60:
         7d:74:21:7a:34:b3:5a:d9:a7:93:25:05:86:07:c1:eb:60:38:
         d0:71:87:0e:d5:4e:a4:83:c9:d0:ee:54:d1:90:b7:39:6f:87:
         e9:dc:20:74:fa:08:5f:ff:57:21:f1:7d:4f:d7:12:d2:15:57:
         6d:ad:ce:86:0a:41:6e:21:7d:90:ed:79:2d:29:54:0c:cc:3b:
         41:53:48:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:41 2024 by rpki-client on console-fra.rpki-client.org