Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/323830343a363461303a3a2f33322d3334203d3e20323639343339.roa
File:                     323830343a363461303a3a2f33322d3334203d3e20323639343339.roa (raw, json)
Hash identifier:          /yRTL4AjFQmQ/hs1J88/3YoX3nm2P7vSGViDpPuK6+4=
Subject key identifier:   24:D1:BE:75:9F:23:DA:24:88:40:87:31:14:4E:9E:2A:0E:E7:2F:ED
Certificate issuer:       /CN=93F3F857B1F9E1EC7AFE49B49953E6E27BD4B3D7
Certificate serial:       481AF724BC0B57C751FAFB665EBF95AFDAE061EE
Authority key identifier: 93:F3:F8:57:B1:F9:E1:EC:7A:FE:49:B4:99:53:E6:E2:7B:D4:B3:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93F3F857B1F9E1EC7AFE49B49953E6E27BD4B3D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/323830343a363461303a3a2f33322d3334203d3e20323639343339.roa
Signing time:             Tue 16 May 2023 18:00:00 +0000
ROA not before:           Tue 16 May 2023 17:55:00 +0000
ROA not after:            Tue 14 May 2024 18:00:00 +0000
asID:                     269439
IP address blocks:        2804:64a0::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1a:f7:24:bc:0b:57:c7:51:fa:fb:66:5e:bf:95:af:da:e0:61:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93F3F857B1F9E1EC7AFE49B49953E6E27BD4B3D7
        Validity
            Not Before: May 16 17:55:00 2023 GMT
            Not After : May 14 18:00:00 2024 GMT
        Subject: CN=3082010A0282010100C4ECD0A95E020AF95375043C18918C3FC7B02B83A5B3868B7695C055B6F717C058E674E04E342F2F7FD87519DD68A960EE56759859B17928338BA67333D10870979DF531A29256D39EB56E155F7CB1C6F8C0B5E47866DB7EE381B734C819B36CFA8ADBDBCFBAFAE53F5534BA6ADC76F8E925F96785039336B47E76A3B89FE371221635D19CB8C38E574C84218FACE252C6E7F936E7356E3BC3208FBEB85E7053079F08DF52B544D4357C960888428369D3E3E06497B959BE1B42B2E745E774ED21B6E84C609269DBD8283FE2918B044AA76D75972A60EB2AB136C56CF2F6B60AB14CDC62E0C04008CB55946F80E5E77DF3A240B06133678D2B1BEFBC8D8FF6970203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ec:d0:a9:5e:02:0a:f9:53:75:04:3c:18:91:
                    8c:3f:c7:b0:2b:83:a5:b3:86:8b:76:95:c0:55:b6:
                    f7:17:c0:58:e6:74:e0:4e:34:2f:2f:7f:d8:75:19:
                    dd:68:a9:60:ee:56:75:98:59:b1:79:28:33:8b:a6:
                    73:33:d1:08:70:97:9d:f5:31:a2:92:56:d3:9e:b5:
                    6e:15:5f:7c:b1:c6:f8:c0:b5:e4:78:66:db:7e:e3:
                    81:b7:34:c8:19:b3:6c:fa:8a:db:db:cf:ba:fa:e5:
                    3f:55:34:ba:6a:dc:76:f8:e9:25:f9:67:85:03:93:
                    36:b4:7e:76:a3:b8:9f:e3:71:22:16:35:d1:9c:b8:
                    c3:8e:57:4c:84:21:8f:ac:e2:52:c6:e7:f9:36:e7:
                    35:6e:3b:c3:20:8f:be:b8:5e:70:53:07:9f:08:df:
                    52:b5:44:d4:35:7c:96:08:88:42:83:69:d3:e3:e0:
                    64:97:b9:59:be:1b:42:b2:e7:45:e7:74:ed:21:b6:
                    e8:4c:60:92:69:db:d8:28:3f:e2:91:8b:04:4a:a7:
                    6d:75:97:2a:60:eb:2a:b1:36:c5:6c:f2:f6:b6:0a:
                    b1:4c:dc:62:e0:c0:40:08:cb:55:94:6f:80:e5:e7:
                    7d:f3:a2:40:b0:61:33:67:8d:2b:1b:ef:bc:8d:8f:
                    f6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D1:BE:75:9F:23:DA:24:88:40:87:31:14:4E:9E:2A:0E:E7:2F:ED
            X509v3 Authority Key Identifier:
                keyid:93:F3:F8:57:B1:F9:E1:EC:7A:FE:49:B4:99:53:E6:E2:7B:D4:B3:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/93F3F857B1F9E1EC7AFE49B49953E6E27BD4B3D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93F3F857B1F9E1EC7AFE49B49953E6E27BD4B3D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/323830343a363461303a3a2f33322d3334203d3e20323639343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:09:68:d1:f1:b2:39:83:cc:37:75:77:6c:52:06:77:14:45:
         ec:7c:e3:45:94:93:98:21:5a:57:14:c5:a6:e4:05:b5:cc:f7:
         99:c1:a9:76:fc:a5:8e:67:46:14:6f:6b:2d:65:44:19:c9:27:
         a2:0e:e3:db:da:2e:37:80:5f:59:23:45:b8:dc:18:c8:c1:ff:
         24:f0:82:99:c2:18:fc:13:43:27:14:c6:c3:ba:eb:9c:55:f5:
         04:9d:cd:7b:a8:5d:d6:b7:ae:41:92:5d:fc:24:5c:e6:84:60:
         ff:17:76:38:f6:5e:fb:cf:88:8a:89:87:d4:32:3f:74:0f:23:
         76:a0:83:57:e9:11:43:42:b5:a4:fd:3b:1a:26:89:5e:ec:8c:
         27:f9:ad:45:14:62:f4:cf:3d:60:5d:6c:86:18:9c:6f:26:0c:
         e2:66:51:4d:70:15:b2:ab:7d:bb:c8:9b:d4:42:da:f4:32:dd:
         13:be:61:90:63:69:9c:41:84:4e:47:a8:6b:8c:f6:66:09:de:
         01:9e:97:fa:0c:47:db:f3:38:ac:cb:19:37:83:c9:f2:33:96:
         51:0d:cf:12:82:f5:46:e1:8b:f8:51:8b:3c:e6:b2:d6:0c:a3:
         ce:01:c0:da:4f:40:a2:47:b9:30:91:67:94:dd:fd:e2:23:69:
         c7:40:da:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org