Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/323830343a316263343a3a2f33322d3438203d3e203631373438.roa
File:                     323830343a316263343a3a2f33322d3438203d3e203631373438.roa (raw, json)
Hash identifier:          WtFqd++VHGi6QhJc4WWfSy7stK7sii2zNS6C4hXOILY=
Subject key identifier:   A2:F9:A4:91:81:F3:10:9F:AE:5F:E2:2C:19:95:F5:FE:73:BF:EA:7F
Certificate issuer:       /CN=E19F7769603EE2CCAE5ED590F2CEB2D8B6455274
Certificate serial:       0AB6205454A2B7F51D10C7D865ACF8ABEC51D96A
Authority key identifier: E1:9F:77:69:60:3E:E2:CC:AE:5E:D5:90:F2:CE:B2:D8:B6:45:52:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E19F7769603EE2CCAE5ED590F2CEB2D8B6455274.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/323830343a316263343a3a2f33322d3438203d3e203631373438.roa
Signing time:             Tue 20 Jun 2023 18:28:00 +0000
ROA not before:           Tue 20 Jun 2023 18:23:00 +0000
ROA not after:            Tue 18 Jun 2024 18:28:00 +0000
asID:                     61748
IP address blocks:        2804:1bc4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b6:20:54:54:a2:b7:f5:1d:10:c7:d8:65:ac:f8:ab:ec:51:d9:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19F7769603EE2CCAE5ED590F2CEB2D8B6455274
        Validity
            Not Before: Jun 20 18:23:00 2023 GMT
            Not After : Jun 18 18:28:00 2024 GMT
        Subject: CN=3082010A0282010100C9A5E2D5116A4EFED4E03B9F7B2DAC1983DA24E057D5632D7DC2802A3DC00360B05740A19B1267BA6D99441FEE5531A69423CA3F269815838798E75F2DC78AB12618F8A286C44F5B9E8554492AD48D27CEC4DBBB8EB8F6AB92037153ADA38BD82BA97CE502712F972A05A8E51F57C48173A7523DA64B659D3067E827F9B64C21D179EF9505E5AAB8D37618888695B27532E01991E27A224D26454508B35569D6672E9029A90232B2D3AEACEAF3772063150F8E7D163583270FE47807DFF2C7AABC18B07628A8F1E50E3D2A4BCDD9C4BA25EDA65784977DA100FE3681F0CF9D3A0EE91FA789BC3F876F09AD0D87C5FC5E3B52B2D5B9FE7317B13FDF71C656DC810203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a5:e2:d5:11:6a:4e:fe:d4:e0:3b:9f:7b:2d:
                    ac:19:83:da:24:e0:57:d5:63:2d:7d:c2:80:2a:3d:
                    c0:03:60:b0:57:40:a1:9b:12:67:ba:6d:99:44:1f:
                    ee:55:31:a6:94:23:ca:3f:26:98:15:83:87:98:e7:
                    5f:2d:c7:8a:b1:26:18:f8:a2:86:c4:4f:5b:9e:85:
                    54:49:2a:d4:8d:27:ce:c4:db:bb:8e:b8:f6:ab:92:
                    03:71:53:ad:a3:8b:d8:2b:a9:7c:e5:02:71:2f:97:
                    2a:05:a8:e5:1f:57:c4:81:73:a7:52:3d:a6:4b:65:
                    9d:30:67:e8:27:f9:b6:4c:21:d1:79:ef:95:05:e5:
                    aa:b8:d3:76:18:88:86:95:b2:75:32:e0:19:91:e2:
                    7a:22:4d:26:45:45:08:b3:55:69:d6:67:2e:90:29:
                    a9:02:32:b2:d3:ae:ac:ea:f3:77:20:63:15:0f:8e:
                    7d:16:35:83:27:0f:e4:78:07:df:f2:c7:aa:bc:18:
                    b0:76:28:a8:f1:e5:0e:3d:2a:4b:cd:d9:c4:ba:25:
                    ed:a6:57:84:97:7d:a1:00:fe:36:81:f0:cf:9d:3a:
                    0e:e9:1f:a7:89:bc:3f:87:6f:09:ad:0d:87:c5:fc:
                    5e:3b:52:b2:d5:b9:fe:73:17:b1:3f:df:71:c6:56:
                    dc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F9:A4:91:81:F3:10:9F:AE:5F:E2:2C:19:95:F5:FE:73:BF:EA:7F
            X509v3 Authority Key Identifier:
                keyid:E1:9F:77:69:60:3E:E2:CC:AE:5E:D5:90:F2:CE:B2:D8:B6:45:52:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/E19F7769603EE2CCAE5ED590F2CEB2D8B6455274.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E19F7769603EE2CCAE5ED590F2CEB2D8B6455274.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/323830343a316263343a3a2f33322d3438203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1bc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:4a:e2:b3:a5:c7:2c:e5:44:8d:65:4b:88:aa:e5:03:97:2b:
         20:4e:ac:c7:2b:b2:71:b1:1f:d2:55:92:90:98:2b:a2:93:dc:
         db:30:9c:24:4b:fc:8c:bf:96:29:4f:b0:a5:53:44:9a:58:4c:
         f6:56:c4:15:08:f3:ed:da:7c:f1:69:5e:1f:d8:1a:72:06:49:
         62:1c:7b:44:81:84:51:d8:5b:53:a8:c2:9e:0d:d9:11:68:6a:
         1d:1a:03:b7:ad:85:10:82:3f:4a:98:75:7f:fc:5e:58:22:2e:
         db:3a:a6:be:1c:fb:7d:97:1d:6c:b5:54:52:78:c5:c1:ae:0f:
         09:c3:4c:fc:ca:4a:9c:9b:e8:0b:07:03:fb:d5:2c:ff:f4:09:
         07:aa:26:15:4e:a2:54:b4:b1:c7:e9:8e:d3:63:0e:16:bb:83:
         64:30:e0:ee:90:04:e7:4b:01:e5:9a:7d:79:9c:00:7b:21:a1:
         ca:d7:0d:cc:e7:af:28:d8:83:6c:01:11:b9:5c:9d:d1:b3:da:
         10:49:fc:70:e5:5e:b8:d4:f8:3c:d6:43:2f:8b:04:29:35:05:
         56:02:19:1e:80:43:b9:76:16:e0:67:5f:7d:e6:bc:ab:1a:f0:
         b6:16:4c:87:44:1f:a6:4e:ca:ea:b4:94:15:62:3d:57:a2:71:
         62:0c:3f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org