Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/323830343a363465343a3a2f33332d3333203d3e20323639343536.roa
File:                     323830343a363465343a3a2f33332d3333203d3e20323639343536.roa (raw, json)
Hash identifier:          jP4lkEmOo4GBdVe7XfFQXZDEhMz4kRplNJUpGaYdhaQ=
Subject key identifier:   64:14:B8:42:21:40:D7:8A:A4:7B:25:6E:2E:52:A8:F1:85:5C:86:C2
Certificate issuer:       /CN=4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E
Certificate serial:       69143FE135363B290AE0A12C169E554ED6443085
Authority key identifier: 4B:96:DD:66:FD:78:5B:BF:E0:F1:4B:6C:83:A7:B5:F6:9F:37:43:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/323830343a363465343a3a2f33332d3333203d3e20323639343536.roa
Signing time:             Tue 26 Dec 2023 15:30:18 +0000
ROA not before:           Tue 26 Dec 2023 15:25:18 +0000
ROA not after:            Tue 24 Dec 2024 15:30:18 +0000
asID:                     269456
IP address blocks:        2804:64e4::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:14:3f:e1:35:36:3b:29:0a:e0:a1:2c:16:9e:55:4e:d6:44:30:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E
        Validity
            Not Before: Dec 26 15:25:18 2023 GMT
            Not After : Dec 24 15:30:18 2024 GMT
        Subject: CN=6414B8422140D78AA47B256E2E52A8F1855C86C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:01:9a:c6:8b:51:75:b2:e1:62:ab:6f:23:05:
                    c1:c8:82:4a:91:3f:40:10:a4:22:69:0d:00:c2:d4:
                    ec:a1:53:83:b7:95:66:9d:c1:95:08:51:28:e5:45:
                    09:fb:2b:6e:67:69:a5:68:00:fa:11:c0:10:d6:19:
                    4d:2d:0a:2b:b8:8a:04:ea:90:57:4f:f1:e7:03:f0:
                    ff:f7:cd:92:ef:0a:2e:05:04:be:6a:60:be:98:d1:
                    b3:fd:72:0a:7a:03:ad:08:28:2b:d8:5a:2a:4a:12:
                    fc:ac:10:a6:9d:bf:d0:4a:ae:8a:da:af:38:78:c0:
                    bc:cc:3f:57:21:17:14:a5:2e:48:62:09:b3:ba:6d:
                    89:32:2a:0e:c8:58:7b:e4:f1:e2:fb:1b:54:73:b1:
                    cb:ee:08:01:34:bf:ce:ba:86:c5:7a:17:21:3b:ee:
                    07:f9:8f:79:9f:0f:69:5f:03:65:6e:68:7f:ca:0b:
                    5e:09:51:0a:e4:0d:86:eb:61:08:82:1a:14:e9:07:
                    30:71:73:4a:cf:ff:59:cd:8b:6f:62:5d:3c:38:75:
                    4c:51:48:4b:17:ce:33:dd:24:d1:0f:42:41:e2:fc:
                    d6:c2:ab:47:5b:52:b9:a6:1d:c2:dc:98:80:2b:05:
                    30:33:ed:aa:88:f4:7f:c2:6a:2e:f9:f8:80:55:7f:
                    e3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:14:B8:42:21:40:D7:8A:A4:7B:25:6E:2E:52:A8:F1:85:5C:86:C2
            X509v3 Authority Key Identifier:
                keyid:4B:96:DD:66:FD:78:5B:BF:E0:F1:4B:6C:83:A7:B5:F6:9F:37:43:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/323830343a363465343a3a2f33332d3333203d3e20323639343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64e4::/33

    Signature Algorithm: sha256WithRSAEncryption
         5f:b5:74:fe:81:4d:fc:bb:1a:91:a6:be:78:07:99:8c:b8:08:
         eb:ed:67:a3:82:e1:16:d0:b5:2d:ba:09:3c:a1:de:d1:36:89:
         47:63:70:53:10:65:c7:c2:97:ec:20:6d:6a:1f:dc:5a:5a:c5:
         17:7c:71:1b:ad:dd:be:a1:b9:b8:31:a9:2a:91:d0:e3:82:7f:
         5c:f9:de:17:59:c0:5b:df:c8:ff:31:e4:f0:16:8c:70:be:56:
         01:14:12:2e:b4:79:b7:d3:3e:9f:21:e6:65:8b:d8:a9:32:fe:
         63:38:db:df:bb:69:73:42:c5:70:33:5c:11:26:42:d7:ad:04:
         d7:7e:24:26:1a:c4:e0:d7:f8:36:90:37:70:1b:29:d7:da:e9:
         fd:7b:c2:bf:70:b3:d7:15:12:7f:e3:00:74:d4:c0:70:a8:80:
         83:36:79:8d:bf:6c:4f:aa:d2:55:5d:31:3d:c2:fe:78:2f:0b:
         5b:6e:d1:79:72:03:6c:f3:9b:02:d0:36:dc:ba:01:a8:22:f9:
         6f:a6:b3:a3:85:6e:37:a5:99:08:f8:02:b4:dd:c0:d2:e6:10:
         9c:0d:82:b1:c9:e1:20:6c:0c:6c:dc:a5:96:d7:c4:4d:eb:3d:
         dc:fe:93:46:55:2e:40:34:87:0c:64:ce:80:96:90:8f:87:38:
         d6:1c:80:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org