Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/323830343a373163383a3a2f33322d3430203d3e20323730383131.roa
File:                     323830343a373163383a3a2f33322d3430203d3e20323730383131.roa (raw, json)
Hash identifier:          YHe+AuQaliIW9m9vfG0oVyAJjkZuWui5Od8ABAIVnJg=
Subject key identifier:   2A:F1:05:AC:08:F3:68:FC:88:92:A0:35:13:A8:10:DB:03:81:67:C6
Certificate issuer:       /CN=A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD
Certificate serial:       0A863089B789E9EBF4DAAAAE34969099E47FEDD0
Authority key identifier: A1:4F:63:10:75:D0:C5:AF:8A:05:B4:E8:CE:8A:EA:C8:3A:F7:12:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/323830343a373163383a3a2f33322d3430203d3e20323730383131.roa
Signing time:             Wed 17 May 2023 14:43:07 +0000
ROA not before:           Wed 17 May 2023 14:38:07 +0000
ROA not after:            Wed 15 May 2024 14:43:07 +0000
asID:                     270811
IP address blocks:        2804:71c8::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:86:30:89:b7:89:e9:eb:f4:da:aa:ae:34:96:90:99:e4:7f:ed:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD
        Validity
            Not Before: May 17 14:38:07 2023 GMT
            Not After : May 15 14:43:07 2024 GMT
        Subject: CN=2AF105AC08F368FC8892A03513A810DB038167C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:16:04:17:fb:33:5f:fc:d4:69:26:2d:93:4c:
                    ed:e8:a4:3f:6f:6e:15:8c:fb:1f:71:e9:50:d0:ed:
                    3c:c0:66:c0:1b:48:47:f8:d0:4d:46:08:c0:b6:ba:
                    23:05:5d:28:83:b6:15:ef:95:ec:3f:ec:03:9e:98:
                    bb:8f:7b:f5:27:3a:f4:7b:43:93:bc:fc:ef:35:63:
                    d6:59:fd:cb:74:fb:2c:19:5d:f9:17:f7:76:74:47:
                    bf:96:20:33:78:9a:65:ec:6d:b7:d9:a5:58:f8:af:
                    35:69:d4:72:d5:a7:5e:b9:80:b4:91:fa:14:39:20:
                    22:20:f0:b8:e3:43:bf:b7:98:f9:25:fb:7d:cd:44:
                    58:bc:8b:b3:14:e3:63:42:0a:69:a8:c2:bd:1a:22:
                    a5:b5:04:b7:30:ef:dd:dc:8d:78:e3:ec:1c:e2:ef:
                    d6:92:44:82:64:f3:b8:b0:70:65:b1:fe:42:9c:6e:
                    da:5d:04:3f:32:00:b9:a6:09:f1:ee:9d:bc:0c:8a:
                    c7:59:57:ba:0c:d9:7e:d9:85:94:0c:91:ec:8d:29:
                    06:4a:ca:2b:b7:b8:28:11:10:19:75:26:74:1a:2e:
                    d4:7c:5f:ca:16:85:9c:db:43:c8:34:22:41:7b:eb:
                    c9:87:93:d5:de:97:25:13:a6:66:b3:21:b4:bb:c1:
                    77:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F1:05:AC:08:F3:68:FC:88:92:A0:35:13:A8:10:DB:03:81:67:C6
            X509v3 Authority Key Identifier:
                keyid:A1:4F:63:10:75:D0:C5:AF:8A:05:B4:E8:CE:8A:EA:C8:3A:F7:12:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/323830343a373163383a3a2f33322d3430203d3e20323730383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:71c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:51:ba:4b:a0:46:71:37:b4:60:6e:22:48:e1:a0:4d:2e:3a:
         45:e9:cc:bd:9c:21:1d:cd:9f:fd:77:19:6a:c6:58:3f:96:b9:
         db:78:ab:15:db:c1:6b:53:82:91:a6:4a:0f:19:a5:d5:47:f1:
         99:e9:31:39:7c:65:8c:bd:95:ec:f0:51:f8:ae:70:8f:6e:28:
         29:78:5e:e4:af:e6:fb:2e:90:b5:98:df:b0:f8:f7:84:b6:b8:
         86:06:3e:ed:89:0a:b3:bd:05:f4:83:c2:a0:0e:9f:48:bc:8b:
         b3:ca:9b:05:09:05:03:bf:97:3c:a9:a2:b4:20:9c:5d:af:6b:
         e7:a0:d8:46:c0:65:15:cc:d2:6f:42:75:c1:0d:99:85:cc:90:
         dc:cb:b2:21:18:07:4a:04:4f:ff:fe:db:eb:62:3a:ce:e8:65:
         74:d3:e8:ad:d7:25:79:ef:2c:08:91:3e:36:f0:b5:ff:03:f8:
         54:3b:d5:a6:d4:14:fb:46:33:98:9b:0c:1d:94:49:21:67:ea:
         76:bb:9a:64:c8:bf:b8:cf:22:fb:c0:83:76:d2:b9:ec:ac:10:
         8a:20:35:53:d9:c1:c5:ce:f4:60:be:5c:79:4e:ba:1f:3f:55:
         41:1f:cc:b1:5d:34:81:ce:b9:0c:3e:4b:1e:56:6e:e1:97:92:
         07:7a:d6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org