Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/323830343a346533303a3a2f33322d3438203d3e20323638323435.roa
File:                     323830343a346533303a3a2f33322d3438203d3e20323638323435.roa (raw, json)
Hash identifier:          zXulbS0khMyufBsuqq+jUfHOxp5adc+ukm/Ei7Iboas=
Subject key identifier:   53:D5:13:2D:34:D6:7D:33:7B:A9:ED:9F:0B:4D:5D:8A:73:B9:14:FB
Certificate issuer:       /CN=97071FFFD8FB901780C3CDDCBFF099B99B961467
Certificate serial:       25613F039FCFE3758C7297A9D117CAE94A556981
Authority key identifier: 97:07:1F:FF:D8:FB:90:17:80:C3:CD:DC:BF:F0:99:B9:9B:96:14:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97071FFFD8FB901780C3CDDCBFF099B99B961467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/323830343a346533303a3a2f33322d3438203d3e20323638323435.roa
Signing time:             Tue 28 Nov 2023 19:45:11 +0000
ROA not before:           Tue 28 Nov 2023 19:40:11 +0000
ROA not after:            Tue 26 Nov 2024 19:45:11 +0000
asID:                     268245
IP address blocks:        2804:4e30::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:61:3f:03:9f:cf:e3:75:8c:72:97:a9:d1:17:ca:e9:4a:55:69:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97071FFFD8FB901780C3CDDCBFF099B99B961467
        Validity
            Not Before: Nov 28 19:40:11 2023 GMT
            Not After : Nov 26 19:45:11 2024 GMT
        Subject: CN=53D5132D34D67D337BA9ED9F0B4D5D8A73B914FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:92:49:c0:89:67:db:bd:9a:70:f7:51:ac:e4:
                    57:c4:10:b3:6b:ae:3a:3b:9d:92:5f:30:39:5f:76:
                    88:07:f4:9e:c8:8d:07:4a:42:35:fc:af:40:86:7b:
                    f9:f6:53:fc:06:8c:40:2b:15:b5:13:b9:47:d6:56:
                    e5:ae:45:56:f6:a3:07:04:65:19:7b:28:f0:51:a3:
                    10:10:e2:79:19:d5:07:0e:d3:3f:1d:48:4b:a7:9e:
                    e9:b3:52:7c:b5:24:57:e4:e9:e4:3a:99:83:3e:17:
                    08:69:bb:15:29:a1:36:41:e2:cc:76:a4:ca:57:87:
                    45:9c:91:2f:35:1a:68:3e:3b:40:0b:cc:30:f8:cf:
                    8e:ad:a3:54:d6:ac:e9:03:b5:0f:70:ca:da:fc:f9:
                    2f:56:68:bf:3c:68:29:bd:0c:ba:93:85:58:13:06:
                    1b:27:0e:a1:01:a9:22:d1:fb:8a:96:e3:c5:43:b2:
                    78:76:27:d1:36:39:59:57:bb:d9:c3:81:21:ef:e4:
                    98:99:a5:9a:c2:4c:32:17:35:3c:ab:0e:7a:2f:83:
                    a0:8a:cb:5a:65:2f:31:8d:a2:17:73:89:5f:38:84:
                    1c:21:59:d7:4e:66:9a:e6:70:a6:ad:9b:19:88:82:
                    db:97:6c:99:4d:e5:f1:97:81:fa:5f:f8:1f:f5:44:
                    02:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D5:13:2D:34:D6:7D:33:7B:A9:ED:9F:0B:4D:5D:8A:73:B9:14:FB
            X509v3 Authority Key Identifier:
                keyid:97:07:1F:FF:D8:FB:90:17:80:C3:CD:DC:BF:F0:99:B9:9B:96:14:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/97071FFFD8FB901780C3CDDCBFF099B99B961467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97071FFFD8FB901780C3CDDCBFF099B99B961467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/323830343a346533303a3a2f33322d3438203d3e20323638323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e30::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:86:db:c3:13:a6:f2:78:06:7f:d3:0c:6c:ca:43:aa:2c:f1:
         09:54:2c:6b:bf:55:b3:d2:12:ab:d5:7e:d4:17:41:cf:32:0d:
         db:8b:03:ed:10:48:d4:47:fd:0a:e7:f6:5b:14:3e:de:7b:b8:
         4a:64:fe:cb:cf:80:b6:ea:c3:e2:07:29:d3:8b:cb:98:36:b8:
         39:d7:2c:c1:6c:6e:98:9e:f0:5f:11:5c:ba:9d:98:4a:ce:a8:
         ab:55:5c:d2:dd:2a:49:a3:4b:46:3a:60:21:80:88:f5:e9:b2:
         9f:b0:c9:4d:c8:60:8a:25:05:f3:55:0e:00:c3:d9:d8:99:2f:
         aa:43:af:25:66:34:43:65:d6:f8:81:da:fb:42:5f:79:62:ed:
         09:09:b9:a1:cf:ba:85:81:51:3f:ca:b4:de:06:ae:d3:5e:c8:
         54:a7:44:89:ce:f8:d2:00:26:2c:12:bc:ea:eb:e2:98:45:aa:
         ae:fc:01:df:ed:0c:59:55:83:ab:38:16:65:e5:13:ef:3f:7f:
         e5:d2:b4:6f:5c:d7:7c:0b:51:79:c6:b3:59:07:6d:30:5f:ba:
         7c:a8:19:26:d1:d9:1c:62:3a:08:61:b2:e6:22:10:cd:ec:8c:
         47:0e:b2:e4:ed:e6:d7:0f:a3:92:30:6b:d3:9e:2c:a0:c0:67:
         c4:06:fb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org