Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/323830343a343162343a393030303a3a2f33362d3336203d3e20323637343531.roa
File:                     323830343a343162343a393030303a3a2f33362d3336203d3e20323637343531.roa (raw, json)
Hash identifier:          +MrI1crIt80bdvkCJjiWd99nyMteFFLllP8WA8fw9Ow=
Subject key identifier:   D6:2E:17:80:DC:30:DF:9A:63:EA:8B:14:04:7F:4F:30:30:FF:98:27
Certificate issuer:       /CN=9ECE9497765CBFF5ADF188D9EAED33445844495D
Certificate serial:       2EFAFD57216A22EF03A8541DB4C80ADC960CC8B8
Authority key identifier: 9E:CE:94:97:76:5C:BF:F5:AD:F1:88:D9:EA:ED:33:44:58:44:49:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/323830343a343162343a393030303a3a2f33362d3336203d3e20323637343531.roa
Signing time:             Tue 13 Jun 2023 17:24:53 +0000
ROA not before:           Tue 13 Jun 2023 17:19:53 +0000
ROA not after:            Tue 11 Jun 2024 17:24:53 +0000
asID:                     267451
IP address blocks:        2804:41b4:9000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:fa:fd:57:21:6a:22:ef:03:a8:54:1d:b4:c8:0a:dc:96:0c:c8:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ECE9497765CBFF5ADF188D9EAED33445844495D
        Validity
            Not Before: Jun 13 17:19:53 2023 GMT
            Not After : Jun 11 17:24:53 2024 GMT
        Subject: CN=D62E1780DC30DF9A63EA8B14047F4F3030FF9827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ac:b9:dc:cd:85:50:f0:ef:e6:98:ca:d4:10:
                    0b:48:f2:1f:a8:60:ba:51:14:bb:80:d7:8d:e8:a5:
                    a4:34:99:ea:4b:e1:ca:d4:aa:a9:d7:ee:ac:f0:b5:
                    33:26:0c:17:81:ee:8b:b7:a3:64:2c:f2:63:26:00:
                    f3:a8:36:0a:bc:e8:d3:92:b9:43:cf:7e:53:84:3a:
                    bd:c0:42:a9:e6:65:d4:b4:bb:89:9c:37:b9:23:e5:
                    1b:8d:41:93:fc:e3:5b:79:28:fd:40:27:89:1c:0e:
                    b0:7f:8e:9e:b0:3f:77:91:88:55:81:4c:ea:6f:82:
                    d6:a9:35:5e:18:70:ac:a4:c2:fc:ef:44:ed:d5:ee:
                    05:6f:5a:b4:ad:6d:09:de:05:5d:54:d6:87:3b:31:
                    6c:5d:d6:7c:78:46:1d:08:75:1e:01:49:bc:22:f9:
                    3a:26:2a:52:f8:8d:54:70:21:95:65:42:f7:f8:08:
                    4a:23:3f:f7:1c:4e:48:38:08:29:88:68:38:33:5c:
                    7d:71:68:20:a6:a1:05:8d:ed:57:f8:6c:c3:b2:a9:
                    d2:1e:66:47:d2:b5:6e:98:ca:96:27:cf:ff:fa:57:
                    03:bf:74:1c:f3:d9:85:b6:d9:d1:9a:46:27:a6:af:
                    39:ca:b6:03:ea:4a:34:aa:df:81:5f:04:3e:52:6e:
                    43:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2E:17:80:DC:30:DF:9A:63:EA:8B:14:04:7F:4F:30:30:FF:98:27
            X509v3 Authority Key Identifier:
                keyid:9E:CE:94:97:76:5C:BF:F5:AD:F1:88:D9:EA:ED:33:44:58:44:49:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/323830343a343162343a393030303a3a2f33362d3336203d3e20323637343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41b4:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         58:85:34:b5:4e:d3:8f:95:77:49:80:55:9d:f9:d2:17:8b:9a:
         ce:19:de:a2:5b:e2:d8:8a:2b:1d:f0:83:bc:5f:2b:69:b2:f5:
         e0:07:dc:fa:8f:13:3e:a6:9b:76:03:ed:55:24:e0:d7:57:81:
         9f:1b:38:34:98:3b:e2:84:71:61:c1:17:87:05:88:f2:ea:8a:
         01:df:47:87:6e:a1:31:15:8d:6d:b1:92:56:90:d6:5b:e5:aa:
         59:4c:f3:0a:08:df:bb:70:8b:28:52:81:a0:dd:a8:82:3e:c8:
         08:f0:7d:b2:42:2e:1e:38:ac:4e:ba:3f:17:27:e7:f6:6c:0a:
         76:3d:f2:90:c8:0a:2a:77:18:6a:f3:1a:ee:59:f1:27:f5:ea:
         a2:fe:c1:1f:e2:6a:4b:48:14:98:1a:0c:67:21:50:17:37:21:
         29:04:47:c2:b4:14:28:59:1b:e3:cf:c5:df:14:8e:71:9f:e2:
         e4:35:56:49:1e:d3:e3:5f:94:81:f5:2f:42:1e:af:d5:3d:1c:
         58:e5:97:d0:9b:51:5b:9d:20:33:41:5e:1a:54:b7:9a:b5:75:
         67:1d:64:25:25:cc:86:a1:3d:0b:ab:1d:87:bd:5d:75:29:29:
         75:96:e9:51:07:a0:f2:46:0e:55:4f:8c:d3:e5:94:8c:4f:f6:
         a1:c1:81:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org