Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cs7MLsKNVrMsfGhBAeeDuNJmVG6gYi1T58iWyCUzDZX/0/323830343a313062343a3a2f33322d3438203d3e20323633363435.roa
File:                     323830343a313062343a3a2f33322d3438203d3e20323633363435.roa (raw, json)
Hash identifier:          cZvtWlbxgC6MB9idaAFT1QRaD+cl2evyJBECU5ztIqU=
Subject key identifier:   50:36:C4:B2:32:BC:8C:C2:BB:F8:1B:FE:92:0F:5F:2A:B8:32:9C:CB
Certificate issuer:       /CN=26E4DBF7EA004FC1585051F89749136C28953EC1
Certificate serial:       1EEB5077BEFF0FC5A97A641BD8E5DDAAACC1E910
Authority key identifier: 26:E4:DB:F7:EA:00:4F:C1:58:50:51:F8:97:49:13:6C:28:95:3E:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E4DBF7EA004FC1585051F89749136C28953EC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cs7MLsKNVrMsfGhBAeeDuNJmVG6gYi1T58iWyCUzDZX/0/323830343a313062343a3a2f33322d3438203d3e20323633363435.roa
Signing time:             Fri 03 May 2024 21:10:51 +0000
ROA not before:           Fri 03 May 2024 21:05:51 +0000
ROA not after:            Fri 02 May 2025 21:10:51 +0000
asID:                     263645
IP address blocks:        2804:10b4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:eb:50:77:be:ff:0f:c5:a9:7a:64:1b:d8:e5:dd:aa:ac:c1:e9:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26E4DBF7EA004FC1585051F89749136C28953EC1
        Validity
            Not Before: May  3 21:05:51 2024 GMT
            Not After : May  2 21:10:51 2025 GMT
        Subject: CN=5036C4B232BC8CC2BBF81BFE920F5F2AB8329CCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:30:0c:2d:a2:23:4a:0d:db:a8:d7:0c:f9:06:
                    9b:df:01:a1:94:76:b5:51:e7:2a:e3:40:20:47:6b:
                    ce:01:fe:a8:ae:bc:5b:72:29:ba:ac:f5:3f:b3:a3:
                    dd:16:c9:94:b8:54:cd:f4:5e:56:1b:09:62:a6:fd:
                    bb:30:65:d9:5c:25:68:76:25:b2:7e:df:14:57:d7:
                    af:f1:06:86:c5:71:08:4f:bd:38:0e:7e:d7:d6:4d:
                    70:77:f3:d8:63:7d:be:6b:fd:1a:7a:1b:b6:9c:66:
                    91:5b:b4:e6:13:0a:e5:ad:49:dd:fd:79:02:a6:c7:
                    3c:21:08:3c:6d:8a:26:67:32:4b:bb:08:cd:21:74:
                    b0:06:5d:ba:4e:62:13:30:99:c6:95:f5:ba:9e:4b:
                    85:30:e5:7c:e2:b2:ff:4e:ce:d1:fe:69:79:79:4f:
                    0d:f1:02:f6:1d:cd:35:4c:e7:ce:16:f7:9c:ef:68:
                    df:39:56:11:3a:d7:eb:b6:8c:72:bc:21:40:ba:f8:
                    e4:b6:41:5b:83:9e:bc:2e:e2:2f:96:4b:a1:7b:c7:
                    e3:46:7d:1e:33:32:f7:d0:e8:36:85:10:ad:64:b6:
                    89:3d:a2:90:97:f6:9d:f7:07:39:52:af:c5:ff:43:
                    75:2f:9d:0f:c4:71:b9:f3:2e:7b:b7:a1:13:2a:b2:
                    4a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:36:C4:B2:32:BC:8C:C2:BB:F8:1B:FE:92:0F:5F:2A:B8:32:9C:CB
            X509v3 Authority Key Identifier:
                keyid:26:E4:DB:F7:EA:00:4F:C1:58:50:51:F8:97:49:13:6C:28:95:3E:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cs7MLsKNVrMsfGhBAeeDuNJmVG6gYi1T58iWyCUzDZX/0/26E4DBF7EA004FC1585051F89749136C28953EC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E4DBF7EA004FC1585051F89749136C28953EC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cs7MLsKNVrMsfGhBAeeDuNJmVG6gYi1T58iWyCUzDZX/0/323830343a313062343a3a2f33322d3438203d3e20323633363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:19:64:50:ae:06:1a:ad:a4:dc:9a:ea:e3:b2:a4:ad:5d:2c:
         90:8b:8f:d8:c5:44:91:32:01:92:39:cd:21:bd:a2:38:09:63:
         a0:ea:30:c5:7c:ae:bc:e9:39:d6:a7:06:b1:96:13:ad:c9:3c:
         3c:81:39:d8:fd:7c:ee:e9:47:5e:ab:e9:81:f7:0c:a0:1c:61:
         4f:55:cd:a0:3d:ce:33:cb:a7:51:f5:d3:9e:1b:be:2a:31:97:
         7b:a6:dd:3b:fd:54:48:5e:53:1f:50:67:9b:3d:68:df:8c:c5:
         ba:7e:35:0a:24:f1:ee:6a:23:3a:27:38:b8:bb:ef:12:e1:ea:
         76:4e:13:98:08:9c:0e:b5:54:88:02:ed:d2:0e:95:1c:5d:e9:
         2f:9c:53:35:a3:b3:e1:52:5b:a9:6e:ac:fe:09:0b:59:06:46:
         52:4f:35:9d:73:ec:39:e4:29:56:4c:b8:1a:2e:bc:28:c2:20:
         d6:6d:f6:c6:33:9c:5b:4b:99:9e:05:68:19:ca:a4:7d:7c:f2:
         4d:69:16:cb:9d:5d:e1:93:24:26:04:4a:f6:fb:54:8d:e8:b1:
         04:d9:87:4f:9f:7f:61:84:f8:3d:57:be:b3:b9:97:3b:34:1d:
         82:e1:0f:85:be:3a:ce:64:cc:83:73:f3:e5:dc:35:18:ec:0b:
         2e:fe:df:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org