Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/323830343a363465343a383030303a3a2f33332d3333203d3e20323639343536.roa
File:                     323830343a363465343a383030303a3a2f33332d3333203d3e20323639343536.roa (raw, json)
Hash identifier:          0sI1jHZ0tdKsqewJPxf4WjE1/Q1Ixec5hWiWiaTTuZI=
Subject key identifier:   54:93:B0:7F:13:01:41:EF:78:8F:6F:D1:D4:CD:AC:3D:C8:49:0E:88
Certificate issuer:       /CN=4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E
Certificate serial:       5EAE019CF46B659C81F37C49AED46253837A5AFF
Authority key identifier: 4B:96:DD:66:FD:78:5B:BF:E0:F1:4B:6C:83:A7:B5:F6:9F:37:43:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/323830343a363465343a383030303a3a2f33332d3333203d3e20323639343536.roa
Signing time:             Tue 26 Dec 2023 15:30:28 +0000
ROA not before:           Tue 26 Dec 2023 15:25:28 +0000
ROA not after:            Tue 24 Dec 2024 15:30:28 +0000
asID:                     269456
IP address blocks:        2804:64e4:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ae:01:9c:f4:6b:65:9c:81:f3:7c:49:ae:d4:62:53:83:7a:5a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E
        Validity
            Not Before: Dec 26 15:25:28 2023 GMT
            Not After : Dec 24 15:30:28 2024 GMT
        Subject: CN=5493B07F130141EF788F6FD1D4CDAC3DC8490E88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:df:e7:fd:79:2d:fb:d3:92:2c:c4:fb:f5:80:
                    5e:2f:97:57:07:e7:4c:90:76:1b:c1:19:54:c6:15:
                    05:77:69:0c:71:f2:5c:45:08:e8:ce:3d:61:1c:e6:
                    b2:9a:c5:5d:c2:59:7a:73:0c:d9:05:89:f9:d7:2a:
                    01:42:06:08:8c:57:69:6b:7c:8a:17:4d:8c:26:16:
                    58:86:36:5e:a6:9c:05:00:1e:86:d1:cc:9b:d2:e3:
                    d7:c7:32:ba:c2:dd:9e:d1:a5:d5:76:70:08:22:e0:
                    64:cf:05:cf:ac:15:5d:1e:38:8d:5e:4a:e4:d9:f1:
                    77:e7:29:b1:ab:59:20:cf:ef:fc:f8:9f:16:36:02:
                    d6:21:f1:ca:f1:69:fb:46:38:a9:ff:6f:d0:c6:2f:
                    d5:59:8c:e0:b5:e6:bd:85:1c:87:2e:1e:09:98:0d:
                    0e:6b:d3:f3:b4:44:77:3e:ec:87:82:9d:e2:07:34:
                    9b:23:7f:95:19:ae:7d:72:41:72:51:07:b4:ab:d1:
                    82:86:c3:8f:cc:59:55:dd:c3:14:60:4c:bb:c7:04:
                    07:1c:68:e5:76:bc:d2:7d:e1:4f:6f:34:9f:ef:3d:
                    be:a9:58:c9:3d:37:c7:b1:09:5c:d5:3d:28:89:19:
                    89:fb:af:a0:f2:2d:37:4f:15:49:29:99:e5:cc:09:
                    4f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:93:B0:7F:13:01:41:EF:78:8F:6F:D1:D4:CD:AC:3D:C8:49:0E:88
            X509v3 Authority Key Identifier:
                keyid:4B:96:DD:66:FD:78:5B:BF:E0:F1:4B:6C:83:A7:B5:F6:9F:37:43:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/323830343a363465343a383030303a3a2f33332d3333203d3e20323639343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64e4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         69:f3:ce:de:fe:88:e3:ff:68:f1:ab:4d:db:58:62:80:d6:11:
         7e:21:53:b9:23:7f:c5:c6:df:4e:fc:73:ed:4f:9c:a0:44:84:
         8c:90:23:9b:f5:7d:c9:85:3d:d0:f9:6d:11:97:86:24:0c:32:
         31:6b:0d:9b:b4:f8:61:45:87:00:4f:f4:93:d2:52:80:87:a0:
         69:75:4e:9b:4f:1d:b2:c2:d6:13:11:e3:8d:b6:7b:fd:41:f3:
         0a:12:e5:b0:93:9b:b9:6a:4d:a7:1e:32:6f:32:19:af:fd:48:
         90:5d:fc:0d:16:12:99:62:50:96:e5:cf:52:4b:bb:1a:64:9c:
         1c:a7:eb:19:3c:6e:f8:86:62:be:fd:d1:32:8a:a8:93:aa:66:
         2e:87:e6:c3:b1:b6:ee:79:12:f6:1d:ce:bf:b7:f2:9e:bd:26:
         5d:f9:0f:83:b0:d8:d3:69:12:48:6e:db:4a:cf:db:3d:aa:3c:
         b8:b7:56:87:de:fe:07:e3:48:e8:3a:6c:28:99:5b:79:b4:ed:
         33:79:82:e9:1e:54:aa:d8:8f:f7:1f:0b:19:7c:b2:11:41:bf:
         bd:5d:0a:ff:92:20:a6:75:65:16:35:4e:86:89:0b:c7:01:3f:
         a5:56:8b:5b:a7:51:24:06:7b:8e:0d:50:b0:00:b6:79:58:17:
         bd:f2:53:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org