Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/323830343a343162343a373030303a3a2f33362d3336203d3e20323637343531.roa
File:                     323830343a343162343a373030303a3a2f33362d3336203d3e20323637343531.roa (raw, json)
Hash identifier:          mrl5Z+VzNqr/A1xME5lP+weekwNrubry5+SMAeAlMD0=
Subject key identifier:   1F:39:5D:69:A7:30:14:E2:8F:D2:1D:E2:2E:C6:03:5A:16:05:A9:A4
Certificate issuer:       /CN=9ECE9497765CBFF5ADF188D9EAED33445844495D
Certificate serial:       72F301E5A582230D07FEF27AE929DCF4D5FFA390
Authority key identifier: 9E:CE:94:97:76:5C:BF:F5:AD:F1:88:D9:EA:ED:33:44:58:44:49:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/323830343a343162343a373030303a3a2f33362d3336203d3e20323637343531.roa
Signing time:             Tue 13 Jun 2023 17:24:42 +0000
ROA not before:           Tue 13 Jun 2023 17:19:42 +0000
ROA not after:            Tue 11 Jun 2024 17:24:42 +0000
asID:                     267451
IP address blocks:        2804:41b4:7000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f3:01:e5:a5:82:23:0d:07:fe:f2:7a:e9:29:dc:f4:d5:ff:a3:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ECE9497765CBFF5ADF188D9EAED33445844495D
        Validity
            Not Before: Jun 13 17:19:42 2023 GMT
            Not After : Jun 11 17:24:42 2024 GMT
        Subject: CN=1F395D69A73014E28FD21DE22EC6035A1605A9A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a7:b2:08:de:ff:e5:11:bc:07:a9:af:07:3b:
                    8e:ea:28:0d:a0:38:2b:e7:49:0f:7d:7c:bb:a5:85:
                    d5:d3:8b:6c:68:6e:7d:84:35:36:be:b2:1f:8f:53:
                    ed:89:28:01:ff:3f:3d:e0:aa:62:59:b9:f9:b5:1f:
                    63:f9:a3:31:23:86:b8:f6:b4:7f:6f:0f:d8:d7:5f:
                    c8:19:18:fe:6e:d6:0e:e6:8c:cb:75:34:47:a6:ee:
                    af:1e:21:ba:d4:dc:ca:60:2a:a0:dc:a2:20:44:90:
                    fd:4d:71:70:43:e2:42:f8:01:32:d3:7b:bd:30:6a:
                    ec:a3:2f:14:bc:3c:2c:68:03:e0:57:1e:c9:cc:37:
                    e2:c8:4c:61:72:79:d3:03:1d:28:e6:e8:95:a3:41:
                    2a:b9:82:61:86:c2:39:95:d2:cc:3f:6b:c5:8c:bf:
                    16:f8:24:b7:02:ea:54:a5:39:e1:b1:52:48:a4:fa:
                    af:ca:00:44:38:96:16:fb:50:38:53:36:a9:7a:30:
                    80:fb:d4:67:2d:0b:40:98:7b:12:b6:88:d2:99:3c:
                    4f:12:62:31:c7:d1:86:68:8f:b2:80:06:15:3c:af:
                    0b:55:08:55:74:30:ed:10:15:51:cd:37:43:8d:5e:
                    9a:8a:d2:2a:e6:27:95:10:6f:03:e6:b6:db:73:49:
                    7c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:39:5D:69:A7:30:14:E2:8F:D2:1D:E2:2E:C6:03:5A:16:05:A9:A4
            X509v3 Authority Key Identifier:
                keyid:9E:CE:94:97:76:5C:BF:F5:AD:F1:88:D9:EA:ED:33:44:58:44:49:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/323830343a343162343a373030303a3a2f33362d3336203d3e20323637343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41b4:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4b:42:2e:47:27:68:27:59:6c:2e:45:a0:d7:53:d4:5e:64:cb:
         4e:df:3f:57:54:0e:61:89:57:83:44:ff:a2:0f:55:67:3b:17:
         79:16:d1:87:ab:9a:59:f4:61:01:da:46:8d:36:7f:ad:7f:a9:
         1f:a3:b8:ca:d9:3e:d9:af:b4:e3:fd:44:fc:ce:43:d5:13:5d:
         08:9c:ed:11:5b:37:55:1f:79:03:66:b5:fa:d9:f3:bb:39:7b:
         42:ba:73:8d:ca:64:d5:38:05:c9:d1:72:59:c8:09:4d:dc:4f:
         1d:49:2f:68:5c:09:1d:4c:94:9d:18:eb:13:53:b8:1e:52:bc:
         08:14:cf:f0:ee:45:1e:9a:f3:cf:4c:e3:f4:2a:5a:5f:d6:c1:
         ea:9e:dd:0c:04:ff:1e:40:e0:49:4b:c0:58:bf:38:9b:66:11:
         36:bb:b3:0e:6a:4b:67:4e:8f:dd:2e:1a:9b:41:ce:48:74:2c:
         e3:9e:c0:f9:d3:c9:68:9b:1a:86:2a:6d:c3:c3:4a:b3:5e:c4:
         25:73:f1:4c:20:50:87:d0:7a:84:47:cb:19:60:43:0e:12:4b:
         a5:d8:40:26:82:b5:ca:6a:5d:d0:e5:91:55:ad:ce:05:d8:63:
         f0:5b:3a:6f:83:2c:b8:80:56:60:b0:7e:42:5f:93:3b:9f:3e:
         a0:be:a0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org