Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/323830343a343162343a323030303a3a2f33362d3336203d3e20323637343531.roa
File:                     323830343a343162343a323030303a3a2f33362d3336203d3e20323637343531.roa (raw, json)
Hash identifier:          CL4M0xX5rmBNWJJ7s+TYW1QKMrLz52LZepeOZkz+MME=
Subject key identifier:   09:B1:45:0A:E1:DC:96:2F:5C:81:B7:96:3F:0A:23:8A:11:3C:C1:35
Certificate issuer:       /CN=9ECE9497765CBFF5ADF188D9EAED33445844495D
Certificate serial:       223DB6190F02C06807525CC1D4F678ABCD1742E5
Authority key identifier: 9E:CE:94:97:76:5C:BF:F5:AD:F1:88:D9:EA:ED:33:44:58:44:49:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/323830343a343162343a323030303a3a2f33362d3336203d3e20323637343531.roa
Signing time:             Tue 13 Jun 2023 17:24:26 +0000
ROA not before:           Tue 13 Jun 2023 17:19:26 +0000
ROA not after:            Tue 11 Jun 2024 17:24:26 +0000
asID:                     267451
IP address blocks:        2804:41b4:2000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:3d:b6:19:0f:02:c0:68:07:52:5c:c1:d4:f6:78:ab:cd:17:42:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ECE9497765CBFF5ADF188D9EAED33445844495D
        Validity
            Not Before: Jun 13 17:19:26 2023 GMT
            Not After : Jun 11 17:24:26 2024 GMT
        Subject: CN=09B1450AE1DC962F5C81B7963F0A238A113CC135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:39:d0:e4:53:0a:2f:d5:e7:42:9e:60:31:7c:
                    5e:3d:4b:7d:ca:c1:0a:bd:2a:49:d7:36:4e:63:3f:
                    53:c5:96:83:44:0a:d2:57:a0:b6:bf:9e:60:8c:7d:
                    8b:bc:88:6c:99:f4:3a:e5:75:97:8a:55:d0:4b:70:
                    9e:c2:e3:c9:60:39:a7:10:6a:d4:77:68:cc:7e:86:
                    9c:2d:f0:91:59:14:16:3c:b1:2e:5f:d8:84:f6:a1:
                    32:19:dc:47:85:8f:b6:b9:15:8e:b2:23:c4:c8:e8:
                    2c:df:78:8f:e1:06:99:e5:7d:0f:d1:b2:d6:35:ba:
                    16:c5:24:18:56:82:c6:be:46:6b:9b:8a:1b:93:63:
                    6a:48:e5:e7:21:1c:26:18:ea:7b:b6:6a:70:2a:7e:
                    88:e1:fb:02:98:7c:01:24:5a:21:a9:f7:b8:62:33:
                    d9:23:d4:d8:16:ac:ea:dd:d2:d0:0f:64:3c:fc:d3:
                    ad:0e:76:8e:ad:36:8c:20:7d:ef:b5:c8:23:1a:79:
                    f7:f4:9c:a0:e4:ff:06:04:60:9e:f7:cb:6f:79:99:
                    9f:7c:ff:88:7c:dc:16:c6:00:2d:16:e9:3f:59:f1:
                    4f:37:57:67:34:15:18:f5:48:42:cb:f2:6b:c8:b9:
                    71:27:d4:41:d0:85:08:d1:2b:b2:1d:22:80:e3:2c:
                    b1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B1:45:0A:E1:DC:96:2F:5C:81:B7:96:3F:0A:23:8A:11:3C:C1:35
            X509v3 Authority Key Identifier:
                keyid:9E:CE:94:97:76:5C:BF:F5:AD:F1:88:D9:EA:ED:33:44:58:44:49:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/323830343a343162343a323030303a3a2f33362d3336203d3e20323637343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41b4:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         85:6c:f1:4e:be:57:6e:d4:2a:84:39:e6:7a:dd:3f:47:07:52:
         0e:37:cd:86:52:e0:aa:18:0b:2d:72:a8:48:dd:02:bb:e9:d1:
         1c:4c:4a:57:f0:bc:1d:05:1d:f4:7f:21:77:bf:3c:3f:96:d1:
         68:1a:72:62:15:df:5a:7e:da:1d:29:ea:20:65:f0:60:5d:cf:
         e8:f5:1b:79:bc:e7:26:4c:88:cb:65:5b:c1:f8:63:a0:7e:7c:
         a9:8f:c7:00:eb:a5:ad:95:69:b2:71:6a:6f:02:bc:58:ba:c9:
         39:91:40:4b:84:07:98:e2:5a:0c:b7:7f:ac:d2:25:ac:ae:98:
         d4:f6:88:5d:ae:5f:52:8c:48:fc:75:30:96:d7:3a:53:35:11:
         ae:a1:c0:6b:7d:61:e5:19:3d:d9:a0:30:0e:7e:97:d9:14:89:
         f9:f6:73:8c:44:80:b5:8b:e0:96:18:e3:65:b6:6f:ad:dd:71:
         1c:f3:1b:4f:f2:67:96:c8:29:a2:a0:ed:54:0f:50:05:1f:cd:
         9e:f8:b9:5d:21:ec:b4:3b:9d:77:0b:3e:78:e9:d0:37:8f:a9:
         df:bd:b4:bf:cb:79:18:a2:28:96:58:ef:f1:0e:fd:91:82:f0:
         f9:e7:2f:cb:0e:aa:c5:80:0b:03:b7:19:d9:9a:b1:57:48:49:
         52:93:95:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org