Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/323830343a316563633a3a2f33322d3438203d3e20323634343438.roa
File:                     323830343a316563633a3a2f33322d3438203d3e20323634343438.roa (raw, json)
Hash identifier:          q68IX68LB3lirupJyXkENGONHxKr7YQN9Lj/sK0q3dE=
Subject key identifier:   28:04:F0:E3:3A:B3:CC:EA:52:FF:66:A1:72:B6:1D:A9:B7:80:EB:11
Certificate issuer:       /CN=383B2C6B85855E4779ED18240ADF1496B0DEC78F
Certificate serial:       174899EE1C657589B73FB5C555072EAD44C9FA22
Authority key identifier: 38:3B:2C:6B:85:85:5E:47:79:ED:18:24:0A:DF:14:96:B0:DE:C7:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/383B2C6B85855E4779ED18240ADF1496B0DEC78F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/323830343a316563633a3a2f33322d3438203d3e20323634343438.roa
Signing time:             Thu 14 Sep 2023 20:38:51 +0000
ROA not before:           Thu 14 Sep 2023 20:33:51 +0000
ROA not after:            Thu 12 Sep 2024 20:38:51 +0000
asID:                     264448
IP address blocks:        2804:1ecc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:48:99:ee:1c:65:75:89:b7:3f:b5:c5:55:07:2e:ad:44:c9:fa:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=383B2C6B85855E4779ED18240ADF1496B0DEC78F
        Validity
            Not Before: Sep 14 20:33:51 2023 GMT
            Not After : Sep 12 20:38:51 2024 GMT
        Subject: CN=2804F0E33AB3CCEA52FF66A172B61DA9B780EB11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ea:63:5b:b3:2d:81:53:e9:c3:b2:6a:60:4d:
                    3a:58:90:f6:59:99:09:1e:60:8a:93:ee:4e:93:30:
                    6c:94:ca:64:58:a3:cc:67:d8:cf:0e:90:15:55:77:
                    78:e2:02:ed:5a:18:55:c2:17:ac:0f:a8:61:4e:5c:
                    1e:94:0d:e6:60:80:ba:44:74:3c:65:c6:dc:e2:1e:
                    78:a9:f5:fa:39:cc:7d:08:fe:4b:b3:c3:e0:99:a6:
                    f2:e9:8a:f2:11:e8:2d:cf:df:91:cf:b4:88:b0:be:
                    96:09:f2:51:cc:c3:c8:c7:af:74:5f:3e:d4:cc:f9:
                    61:83:f3:89:32:33:1c:b9:19:fd:82:2e:7f:eb:99:
                    7d:b1:d0:86:7a:bc:0c:0d:72:80:1f:0b:cf:99:50:
                    6e:ec:08:35:83:4d:5a:ea:e4:70:28:19:6f:2c:0f:
                    43:5e:c6:e5:c4:a4:1f:67:87:9d:33:a4:d4:95:9a:
                    31:27:ea:0f:aa:15:25:d5:ec:77:01:58:a0:b8:c3:
                    7c:41:1d:27:59:2b:82:4f:30:9d:ca:57:7a:45:2e:
                    5d:87:fb:63:fc:24:f7:d5:2e:8c:ed:14:e5:40:07:
                    9a:bb:85:05:15:c0:d8:25:81:dd:8f:80:f5:9a:82:
                    ab:af:37:a0:bb:77:2d:54:f3:72:0c:db:dc:55:bc:
                    28:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:04:F0:E3:3A:B3:CC:EA:52:FF:66:A1:72:B6:1D:A9:B7:80:EB:11
            X509v3 Authority Key Identifier:
                keyid:38:3B:2C:6B:85:85:5E:47:79:ED:18:24:0A:DF:14:96:B0:DE:C7:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/383B2C6B85855E4779ED18240ADF1496B0DEC78F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/383B2C6B85855E4779ED18240ADF1496B0DEC78F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/323830343a316563633a3a2f33322d3438203d3e20323634343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ecc::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:4c:79:d4:19:4e:80:02:ea:bb:bf:1c:ec:b5:4c:54:4e:50:
         e8:24:1b:dd:58:c8:5b:ce:66:30:63:85:62:16:ae:74:ab:1b:
         2b:11:56:8e:69:ea:7e:af:82:57:e7:2e:5a:f5:0d:44:ec:e7:
         dc:d0:e8:54:3c:38:03:67:91:c3:3a:1d:0e:23:98:c5:78:5d:
         18:51:39:9d:db:a3:7b:d9:02:66:4e:e9:19:26:d5:a8:db:2c:
         80:b1:f5:65:be:82:e5:46:ba:29:34:f6:67:92:01:79:78:eb:
         02:b7:ef:4a:6f:1f:c3:64:06:08:55:7f:81:df:43:ca:a2:ba:
         89:77:d4:b8:9a:4e:0e:ef:23:1a:3d:d0:c0:5b:21:71:45:39:
         7a:e7:50:c8:09:3a:74:76:5e:66:93:2b:db:77:a6:b7:73:52:
         87:33:9f:a4:9c:06:3e:95:ba:f0:53:1d:03:08:50:7d:06:58:
         fd:ee:f0:93:90:13:fa:69:de:0b:51:54:9c:99:b7:c9:9e:9d:
         52:8d:de:3c:0e:d8:6a:af:5e:3d:19:c8:e4:7d:4a:d9:62:3c:
         9f:80:cc:cc:2e:3e:00:3f:d5:01:6d:a7:28:38:47:3a:ca:a3:
         fc:d1:76:c1:7e:f7:96:61:19:c9:56:91:84:b8:df:f0:75:5d:
         e2:88:54:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:25 2024 by rpki-client on console-ams.rpki-client.org