Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/0/323830343a353965343a383030303a3a2f33332d3333203d3e20323638373332.roa
File:                     323830343a353965343a383030303a3a2f33332d3333203d3e20323638373332.roa (raw, json)
Hash identifier:          gN/PvTrLLZtqZZ+b3CI4eUktfHdYWSH4bSUUBQWAiNI=
Subject key identifier:   39:4C:00:A7:B0:56:45:77:9F:11:FB:71:AB:86:EE:E5:80:75:E3:82
Certificate issuer:       /CN=44F1E4B94FF224CCCBA4BB09DE960E59459274F5
Certificate serial:       04E84E461A5301F097D039E5088D4D6FB4C0B59E
Authority key identifier: 44:F1:E4:B9:4F:F2:24:CC:CB:A4:BB:09:DE:96:0E:59:45:92:74:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44F1E4B94FF224CCCBA4BB09DE960E59459274F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/0/323830343a353965343a383030303a3a2f33332d3333203d3e20323638373332.roa
Signing time:             Thu 18 Jan 2024 19:00:00 +0000
ROA not before:           Thu 18 Jan 2024 18:55:00 +0000
ROA not after:            Thu 16 Jan 2025 19:00:00 +0000
asID:                     268732
IP address blocks:        2804:59e4:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e8:4e:46:1a:53:01:f0:97:d0:39:e5:08:8d:4d:6f:b4:c0:b5:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44F1E4B94FF224CCCBA4BB09DE960E59459274F5
        Validity
            Not Before: Jan 18 18:55:00 2024 GMT
            Not After : Jan 16 19:00:00 2025 GMT
        Subject: CN=394C00A7B05645779F11FB71AB86EEE58075E382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d0:f9:12:b2:44:08:b4:29:af:50:97:04:0b:
                    68:c2:c3:ef:2b:44:e2:64:86:e7:48:ea:ac:a2:25:
                    d9:82:07:38:dc:ec:e5:7b:a1:39:d3:34:c7:7c:ef:
                    66:c3:7c:8e:7f:05:8a:f0:fc:98:0e:4d:91:90:bf:
                    84:63:b4:1c:eb:23:04:11:f9:8b:3b:98:8c:05:4a:
                    db:af:73:06:17:d7:f0:9d:e6:05:bf:c7:35:8e:04:
                    c5:c7:85:58:cc:43:e0:3b:c4:81:2d:99:61:81:d3:
                    23:92:9e:e9:54:48:d2:92:f1:42:8b:ed:e7:26:f4:
                    ef:a0:bf:8f:6b:7f:19:15:e6:68:93:62:ec:e4:96:
                    46:c7:6e:71:5e:e3:cf:66:fa:9e:2a:96:af:71:7a:
                    25:46:5a:76:b0:5a:5e:f2:38:cf:3e:d4:39:51:1f:
                    e5:be:85:45:99:33:36:34:63:b8:c0:2a:f1:d0:da:
                    0d:c7:f8:43:7a:81:8a:3d:f4:cb:7b:8d:65:02:28:
                    d9:13:7f:68:0c:61:88:cd:84:3c:24:86:14:df:7e:
                    c7:ef:9e:c7:7a:3d:8f:b0:d3:c2:dc:6e:4f:1a:a0:
                    63:f7:d5:ab:b5:52:cc:28:88:be:cc:77:d7:f5:da:
                    b2:84:cd:5d:7e:cb:46:63:0d:12:cf:08:78:af:ee:
                    8f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:4C:00:A7:B0:56:45:77:9F:11:FB:71:AB:86:EE:E5:80:75:E3:82
            X509v3 Authority Key Identifier:
                keyid:44:F1:E4:B9:4F:F2:24:CC:CB:A4:BB:09:DE:96:0E:59:45:92:74:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/0/44F1E4B94FF224CCCBA4BB09DE960E59459274F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44F1E4B94FF224CCCBA4BB09DE960E59459274F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/0/323830343a353965343a383030303a3a2f33332d3333203d3e20323638373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59e4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a0:30:fd:da:cb:96:ef:a7:68:f8:61:27:11:29:2b:ec:8c:8f:
         e7:9b:92:40:ba:2f:15:96:57:7e:94:2b:87:f8:c1:cd:7c:10:
         17:e8:c7:6c:fa:77:7d:5f:87:e2:b6:1a:74:35:2a:63:15:3b:
         81:fa:88:db:54:e2:1e:12:0c:9d:a6:bd:9e:97:aa:29:12:1d:
         72:b8:79:c3:2a:7b:f8:87:b6:5b:32:aa:7f:c6:f0:cd:a2:0e:
         bd:ae:05:18:92:dd:5e:6e:f0:17:d5:e0:2c:19:d5:87:3b:db:
         31:d9:a2:28:c2:46:12:e7:42:d9:c4:32:86:61:df:f8:17:57:
         3e:9e:16:95:ed:8e:5f:f8:6c:96:ac:ca:a8:b5:9e:8e:4a:50:
         35:94:8e:6f:55:65:26:ee:36:03:fe:e8:95:97:e8:ba:4b:3c:
         69:b1:35:c5:d6:b1:85:ee:83:79:c7:60:45:f3:46:dc:4a:68:
         3a:b0:4c:46:f1:63:b9:46:16:98:03:fd:61:18:a6:2b:14:1e:
         9d:98:aa:d7:fd:d9:39:f7:10:2a:5e:6f:48:46:01:68:41:5d:
         de:2c:c1:a8:3c:23:02:e8:64:fb:c8:87:98:bf:2b:37:80:44:
         43:4b:f8:c0:45:49:0f:e0:d4:07:ee:4c:99:1c:61:8d:17:63:
         49:3c:83:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org