Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/0/323830343a343431383a3a2f33322d3334203d3e20323637363032.roa
File:                     323830343a343431383a3a2f33322d3334203d3e20323637363032.roa (raw, json)
Hash identifier:          aCleQYm1sZLyTkqYnZUWrd1y8LG6ZpqLFJyuc/7NDwg=
Subject key identifier:   39:2D:A9:0B:2A:5D:C9:50:3D:FB:42:38:CC:82:2E:E0:F3:94:03:19
Certificate issuer:       /CN=AFA3BA1E41526FCAF71A02A06CE46CD901C069C6
Certificate serial:       1BF8C3BE8473723D66E4E6E81280D8824DD48D4A
Authority key identifier: AF:A3:BA:1E:41:52:6F:CA:F7:1A:02:A0:6C:E4:6C:D9:01:C0:69:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFA3BA1E41526FCAF71A02A06CE46CD901C069C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/0/323830343a343431383a3a2f33322d3334203d3e20323637363032.roa
Signing time:             Thu 09 Nov 2023 14:47:48 +0000
ROA not before:           Thu 09 Nov 2023 14:42:48 +0000
ROA not after:            Thu 07 Nov 2024 14:47:48 +0000
asID:                     267602
IP address blocks:        2804:4418::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f8:c3:be:84:73:72:3d:66:e4:e6:e8:12:80:d8:82:4d:d4:8d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA3BA1E41526FCAF71A02A06CE46CD901C069C6
        Validity
            Not Before: Nov  9 14:42:48 2023 GMT
            Not After : Nov  7 14:47:48 2024 GMT
        Subject: CN=392DA90B2A5DC9503DFB4238CC822EE0F3940319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cf:b1:b0:7a:21:0d:68:b7:0a:1c:e1:87:fd:
                    5c:92:6d:c1:ff:21:6c:88:0d:cb:cf:73:07:74:0e:
                    6b:4f:80:e1:47:ec:36:8c:3d:98:f3:a3:7c:0d:79:
                    f1:2c:b5:a1:4d:31:e5:2f:66:3a:cd:fd:61:d5:1f:
                    35:c0:92:20:3d:58:b2:68:77:0b:d0:41:a9:e0:5d:
                    92:e7:a4:ae:f2:91:dd:49:a6:30:c8:d7:1e:18:30:
                    cd:1d:60:c6:25:28:d8:4c:07:8c:62:d2:41:43:d2:
                    da:9b:c2:62:d5:33:6b:75:12:61:b2:fd:9f:0e:d5:
                    d0:bc:e7:22:bf:f5:9d:9f:1e:aa:b6:01:92:0a:bf:
                    52:91:b4:c4:3a:42:c0:e4:55:c1:70:b7:1f:57:a0:
                    96:ca:3e:55:02:30:20:3f:3c:6e:40:cf:6f:62:96:
                    0f:63:e1:ce:d0:6a:8c:cf:56:6a:dd:40:f9:ec:55:
                    22:95:54:7e:95:3c:c0:fb:0b:83:ed:9e:88:92:2f:
                    97:e9:30:07:09:5e:92:be:a3:91:34:75:1a:a3:e9:
                    a4:6f:e8:76:23:1c:e9:18:f3:16:95:64:b2:36:42:
                    96:1f:1d:e9:0c:df:6d:ee:d6:86:3a:0a:34:34:0a:
                    27:b5:02:39:77:f7:5a:37:80:b7:8c:35:e0:6b:30:
                    0c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2D:A9:0B:2A:5D:C9:50:3D:FB:42:38:CC:82:2E:E0:F3:94:03:19
            X509v3 Authority Key Identifier:
                keyid:AF:A3:BA:1E:41:52:6F:CA:F7:1A:02:A0:6C:E4:6C:D9:01:C0:69:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/0/AFA3BA1E41526FCAF71A02A06CE46CD901C069C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFA3BA1E41526FCAF71A02A06CE46CD901C069C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/0/323830343a343431383a3a2f33322d3334203d3e20323637363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4418::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:86:6d:02:1a:6d:ff:80:f7:b0:39:b6:3b:79:ea:af:cb:0b:
         42:89:4f:3f:6e:c5:5a:12:13:b5:7d:0f:57:1a:22:0b:af:24:
         b5:66:c3:b0:71:66:55:77:a6:60:0e:f6:2a:9b:b1:c7:8a:1c:
         ed:10:f8:d3:a2:a8:01:7f:a3:5c:85:51:46:65:5f:fc:ea:58:
         ab:36:bc:6e:2b:3d:d0:00:90:02:44:04:8e:bc:65:04:86:86:
         eb:b7:22:05:af:a6:d6:03:14:33:28:6f:53:4e:08:3e:d8:47:
         fc:c8:61:4b:b4:05:08:f0:78:e4:6a:bd:93:09:61:c5:83:ce:
         df:f5:4a:fe:fa:62:36:9e:b9:b5:f2:85:4b:2c:17:a2:e0:2f:
         da:19:c7:8c:38:1d:1a:97:dd:cf:63:87:4d:1d:85:2d:96:a0:
         d0:5b:6c:a2:4a:7a:32:e0:77:03:6c:30:03:1d:7a:4a:eb:bd:
         d4:d5:2e:04:27:c7:3d:92:63:88:76:f5:93:d9:17:97:d9:41:
         95:2e:3e:3d:01:a9:ad:1e:fd:3b:b9:59:5a:fb:81:27:9c:69:
         49:19:c4:f7:bb:c7:a8:48:ad:48:b0:c2:9c:37:96:9f:2a:0e:
         2b:85:a9:81:be:f1:0a:1f:f3:d0:3a:04:c2:61:71:41:35:42:
         a4:f7:27:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org