Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/323830343a343162343a343030303a3a2f33342d3334203d3e20323637343531.roa
File:                     323830343a343162343a343030303a3a2f33342d3334203d3e20323637343531.roa (raw, json)
Hash identifier:          JEVrKzQv/WBlxQxtQF+AJO5sUBYx9dfDMwH76EqUARk=
Subject key identifier:   39:BC:58:DE:8B:72:BE:A7:91:29:1B:7C:5C:6E:35:66:54:4C:02:81
Certificate issuer:       /CN=9ECE9497765CBFF5ADF188D9EAED33445844495D
Certificate serial:       55E74D186D23501B1EC7F009A94CCAF31B45F93D
Authority key identifier: 9E:CE:94:97:76:5C:BF:F5:AD:F1:88:D9:EA:ED:33:44:58:44:49:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/323830343a343162343a343030303a3a2f33342d3334203d3e20323637343531.roa
Signing time:             Tue 13 Jun 2023 17:24:32 +0000
ROA not before:           Tue 13 Jun 2023 17:19:32 +0000
ROA not after:            Tue 11 Jun 2024 17:24:32 +0000
asID:                     267451
IP address blocks:        2804:41b4:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e7:4d:18:6d:23:50:1b:1e:c7:f0:09:a9:4c:ca:f3:1b:45:f9:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ECE9497765CBFF5ADF188D9EAED33445844495D
        Validity
            Not Before: Jun 13 17:19:32 2023 GMT
            Not After : Jun 11 17:24:32 2024 GMT
        Subject: CN=39BC58DE8B72BEA791291B7C5C6E3566544C0281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0f:3b:07:01:79:27:2b:7b:13:32:19:62:47:
                    2c:75:97:c7:08:60:8c:4a:e5:01:74:90:ca:d3:cc:
                    2f:1b:ba:0e:36:b1:99:b9:30:64:5e:b4:4b:6d:96:
                    36:f2:d4:74:27:9d:74:bc:11:c8:17:84:5c:b5:9d:
                    ce:33:7a:3c:b3:46:91:35:49:16:a7:cf:20:51:45:
                    f4:bd:77:39:00:80:6f:4f:9c:af:fc:fe:91:51:cd:
                    a3:ce:c5:59:6d:b9:1b:66:09:92:e9:e7:3b:cd:df:
                    32:83:f0:87:75:9f:69:86:b2:30:99:53:55:cd:43:
                    72:b0:95:c3:0c:15:04:74:51:90:da:f9:01:38:b8:
                    d1:cf:2c:f8:20:2b:97:f0:21:d4:14:46:11:0f:a9:
                    3e:25:1a:7b:91:11:a2:89:2d:16:df:95:13:21:68:
                    ad:00:a9:81:41:c3:c2:a4:0c:3d:e0:4a:87:3d:34:
                    d7:e2:44:76:cb:dc:2d:c3:36:c2:ce:b2:60:b3:fd:
                    9e:6a:d4:f1:de:bb:7f:c1:67:79:c2:d3:81:48:17:
                    9e:8a:6c:a8:d9:b5:b2:11:c1:c6:27:ce:8b:45:c8:
                    82:2b:00:eb:2c:ed:d2:d3:8a:0d:e2:57:f4:b6:b6:
                    4b:d2:99:5a:fd:1d:31:eb:2e:a2:34:35:56:96:19:
                    75:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BC:58:DE:8B:72:BE:A7:91:29:1B:7C:5C:6E:35:66:54:4C:02:81
            X509v3 Authority Key Identifier:
                keyid:9E:CE:94:97:76:5C:BF:F5:AD:F1:88:D9:EA:ED:33:44:58:44:49:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/323830343a343162343a343030303a3a2f33342d3334203d3e20323637343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41b4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         d4:34:41:e1:0b:9e:b4:2e:18:20:8e:a8:a3:6b:65:d3:83:d0:
         f6:94:51:45:f4:22:ba:e9:b3:31:da:54:40:d4:9a:07:25:d4:
         d9:b6:10:61:df:c8:5c:5b:60:ad:b3:d9:55:12:c5:65:1e:b9:
         31:6d:0b:c8:87:66:14:28:5e:b9:59:02:31:1e:79:10:73:78:
         85:5c:fd:9e:b0:e7:1f:fc:33:98:2c:af:f6:0d:aa:bc:76:c3:
         7f:7d:86:64:bc:d6:0f:12:0d:b5:1b:a6:29:32:49:b0:b8:a1:
         18:54:14:7b:13:5e:b6:af:75:bc:78:0e:5f:16:89:e8:91:de:
         ca:4b:aa:1f:4d:40:3c:52:48:b8:02:7d:8a:ba:a0:6d:06:ca:
         67:89:4c:70:6a:6f:ab:42:1a:98:20:23:03:2c:65:ec:bf:56:
         88:33:3b:a8:2a:19:b6:32:ba:0d:11:28:3f:f6:2f:3f:82:95:
         4d:46:23:9b:93:ed:5b:0b:94:62:28:98:f3:ac:8e:b8:37:80:
         be:ce:84:38:f8:a3:10:e3:62:f1:2f:1e:a0:5a:14:4f:1b:35:
         b0:94:6f:83:d0:bd:95:4a:94:ee:75:10:5b:8c:80:26:f8:73:
         b1:a9:91:ed:7c:38:7f:7a:c1:e6:01:e2:48:9d:66:50:9b:22:
         82:82:76:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org