Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/323830343a336534303a3a2f33322d3438203d3e20323636353833.roa
File:                     323830343a336534303a3a2f33322d3438203d3e20323636353833.roa (raw, json)
Hash identifier:          ArRBBW11mpJRyJECZt2++xl2rUTSvNcrna6tiC2jHMk=
Subject key identifier:   22:7B:24:30:CD:7F:03:ED:8C:3D:3C:EA:10:C4:75:FF:F4:0F:B1:66
Certificate issuer:       /CN=0BE63AC889C355E150DB71F2874FAD6A623AC0D9
Certificate serial:       48476171BF0BD9C66E9CD393FF4BDE49EB7DAD55
Authority key identifier: 0B:E6:3A:C8:89:C3:55:E1:50:DB:71:F2:87:4F:AD:6A:62:3A:C0:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0BE63AC889C355E150DB71F2874FAD6A623AC0D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/323830343a336534303a3a2f33322d3438203d3e20323636353833.roa
Signing time:             Thu 14 Sep 2023 20:59:54 +0000
ROA not before:           Thu 14 Sep 2023 20:54:54 +0000
ROA not after:            Thu 12 Sep 2024 20:59:54 +0000
asID:                     266583
IP address blocks:        2804:3e40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:47:61:71:bf:0b:d9:c6:6e:9c:d3:93:ff:4b:de:49:eb:7d:ad:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BE63AC889C355E150DB71F2874FAD6A623AC0D9
        Validity
            Not Before: Sep 14 20:54:54 2023 GMT
            Not After : Sep 12 20:59:54 2024 GMT
        Subject: CN=227B2430CD7F03ED8C3D3CEA10C475FFF40FB166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2b:1f:f9:af:62:5e:2e:55:a6:e5:64:de:10:
                    70:89:66:00:f6:fd:5f:2b:81:55:d0:48:07:02:bd:
                    ca:f9:24:eb:db:3e:37:94:da:ee:7f:50:9c:c0:d1:
                    cf:08:30:60:56:06:83:77:d9:ca:e1:76:2e:85:bc:
                    b5:99:12:b7:5c:b0:e5:14:02:be:12:6b:3e:fb:8a:
                    16:9d:d2:e2:54:d8:ff:d2:5e:c3:e1:13:09:d0:df:
                    b9:f3:ca:5a:67:1f:f7:e1:92:ff:8f:a2:1c:15:0a:
                    1d:23:77:14:d0:92:fd:5b:c0:0c:38:13:e6:10:38:
                    5b:0f:c0:30:9c:2a:cd:c3:4e:9f:19:07:b1:cf:f5:
                    58:65:d7:20:37:8b:f9:b1:76:df:43:58:fd:25:f6:
                    84:ee:3f:7c:20:ce:83:ed:76:3a:da:b1:06:15:dc:
                    40:dc:da:bd:08:72:13:ec:48:77:0a:e2:ec:ef:6b:
                    c0:99:1c:6f:a9:45:88:a1:47:8f:8b:0c:6b:e3:c1:
                    fd:76:f6:95:25:91:31:38:f0:0a:9d:30:13:ea:56:
                    12:02:51:93:bf:ad:fc:08:ed:9e:6b:14:d9:e4:6a:
                    57:17:30:5c:37:3e:f8:bd:13:27:77:7b:96:e5:e7:
                    6b:e2:eb:26:30:2c:2b:3e:e6:0f:00:b1:6a:90:68:
                    b1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7B:24:30:CD:7F:03:ED:8C:3D:3C:EA:10:C4:75:FF:F4:0F:B1:66
            X509v3 Authority Key Identifier:
                keyid:0B:E6:3A:C8:89:C3:55:E1:50:DB:71:F2:87:4F:AD:6A:62:3A:C0:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/0BE63AC889C355E150DB71F2874FAD6A623AC0D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0BE63AC889C355E150DB71F2874FAD6A623AC0D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/323830343a336534303a3a2f33322d3438203d3e20323636353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:aa:cc:0c:69:3f:71:5e:29:e2:ce:14:7c:8a:fb:0f:96:3c:
         86:c9:84:f1:1c:f6:a1:fb:0b:af:8f:ce:69:4e:58:69:4d:0e:
         80:fc:c5:77:ef:b8:4e:00:de:57:9a:9f:96:9b:84:f1:c7:b2:
         4e:aa:78:de:cd:14:9d:74:5d:f2:92:91:55:01:34:2f:fd:c3:
         5d:90:db:7c:73:5a:d3:bf:70:f8:a7:d7:74:08:9e:57:40:7b:
         c5:64:c3:5a:76:4d:4b:61:ca:f8:07:ba:52:97:71:56:70:53:
         c7:56:a5:a7:f1:be:53:35:d9:b6:d5:24:0d:06:89:9e:4a:46:
         fd:be:cb:83:13:f8:c4:86:34:11:9a:cf:c5:55:cb:7f:1e:3f:
         40:2f:4a:64:65:0c:d3:64:1b:fc:4a:8c:ed:d9:87:98:2a:db:
         66:ee:b8:b4:04:cd:2a:b6:22:e0:ba:cd:02:9a:a7:2b:f2:66:
         a1:73:df:66:ee:12:54:ea:76:d8:e4:c2:1c:95:08:e2:bc:4b:
         77:a9:ef:a9:98:c6:0b:da:68:9c:e4:62:9e:f4:ae:00:07:e4:
         a4:02:14:d8:ab:60:24:57:aa:8b:08:37:8e:54:c6:59:7b:42:
         44:5b:fd:5e:43:8d:9a:f0:c1:82:07:13:c4:60:da:b1:a4:e5:
         eb:5a:db:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org