Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/323830343a376139343a313230303a3a2f34302d3432203d3e20323731333830.roa
File:                     323830343a376139343a313230303a3a2f34302d3432203d3e20323731333830.roa (raw, json)
Hash identifier:          YZupZ3coA+I8/3WagjGuRyQJQBVr3cuT27ibezrlTFQ=
Subject key identifier:   CF:95:3B:CF:89:81:33:83:B6:A5:47:37:50:BF:D1:7D:FA:76:E7:06
Certificate issuer:       /CN=CED693561B18E1F15DE112114489E7324E327A34
Certificate serial:       203383A5A7A925C4C329D3CFB1BD14C4A8F0FFEE
Authority key identifier: CE:D6:93:56:1B:18:E1:F1:5D:E1:12:11:44:89:E7:32:4E:32:7A:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CED693561B18E1F15DE112114489E7324E327A34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/323830343a376139343a313230303a3a2f34302d3432203d3e20323731333830.roa
Signing time:             Wed 05 Apr 2023 19:59:09 +0000
ROA not before:           Wed 05 Apr 2023 19:54:09 +0000
ROA not after:            Wed 03 Apr 2024 19:59:09 +0000
asID:                     271380
IP address blocks:        2804:7a94:1200::/40 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:33:83:a5:a7:a9:25:c4:c3:29:d3:cf:b1:bd:14:c4:a8:f0:ff:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CED693561B18E1F15DE112114489E7324E327A34
        Validity
            Not Before: Apr  5 19:54:09 2023 GMT
            Not After : Apr  3 19:59:09 2024 GMT
        Subject: CN=CF953BCF89813383B6A5473750BFD17DFA76E706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e0:1d:43:07:f3:aa:55:21:96:eb:e8:7f:6c:
                    4a:04:2d:c8:48:0c:2f:e6:a0:3b:8a:65:c9:cd:d4:
                    8a:4e:2b:1b:b7:ab:d0:f4:9e:91:db:60:7e:35:ce:
                    98:08:51:c0:8a:70:fb:92:0b:ad:85:77:46:c0:84:
                    ab:f5:96:6a:a5:23:7e:9f:fe:b5:74:1a:99:13:4f:
                    43:1f:f5:cc:0f:6a:0f:17:73:0d:2c:9a:4f:ca:f8:
                    10:07:34:9a:30:85:0a:42:62:66:b1:2a:3e:5c:50:
                    b2:64:eb:1b:65:73:c6:00:57:a5:c8:c8:fc:a3:5e:
                    e4:0c:f0:2a:4e:40:f4:93:1c:bd:46:9c:b6:fe:88:
                    e0:60:cf:82:f6:4c:9b:bc:de:41:b3:6a:1e:00:03:
                    31:e4:ac:31:e7:ae:5c:8c:b4:d0:78:af:1e:79:19:
                    6a:58:2c:8b:d1:f8:17:f7:86:a3:a0:6a:69:8f:4d:
                    cb:34:a3:34:c4:7e:30:b3:63:d9:13:9d:ae:54:9f:
                    e4:11:96:01:e1:ca:89:ae:b7:93:65:13:4b:45:8b:
                    26:0d:df:06:7d:d3:1d:ca:c9:8e:2f:40:8b:df:ea:
                    e6:ad:3f:34:ef:b2:d6:de:15:fa:ab:89:2a:19:aa:
                    23:5a:7d:6d:32:8c:c0:f1:8c:5c:fb:80:9d:49:84:
                    76:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:95:3B:CF:89:81:33:83:B6:A5:47:37:50:BF:D1:7D:FA:76:E7:06
            X509v3 Authority Key Identifier:
                keyid:CE:D6:93:56:1B:18:E1:F1:5D:E1:12:11:44:89:E7:32:4E:32:7A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/CED693561B18E1F15DE112114489E7324E327A34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CED693561B18E1F15DE112114489E7324E327A34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/323830343a376139343a313230303a3a2f34302d3432203d3e20323731333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a94:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         2f:1a:ff:2d:71:8f:c7:ae:02:2c:6b:72:e7:12:8e:3e:a9:db:
         b6:f2:4e:86:a9:55:59:3b:44:b8:2a:d5:9b:d2:bb:fc:97:b5:
         1e:38:26:5f:f9:cb:b5:19:46:9d:be:1c:2e:94:54:f3:b1:92:
         ef:0d:a4:5e:42:c0:9e:be:a2:57:0c:42:cb:47:5a:55:a8:21:
         21:37:06:cd:c1:ee:47:c0:c4:bc:20:86:b5:57:e4:f0:8f:5f:
         46:2d:7f:2e:a1:ee:4a:da:76:1d:a9:af:bc:73:2e:63:d3:e6:
         11:fe:d0:7d:08:68:54:7d:20:4e:18:41:2f:bf:19:8d:32:1a:
         5c:f0:68:91:ad:4e:ad:52:bf:3e:46:74:46:bc:01:e2:2b:15:
         f8:e1:87:3b:dc:6a:1f:f3:19:d8:28:e6:a4:5e:9d:63:64:28:
         d0:23:b5:bc:4d:74:73:39:d4:9d:a0:a0:6e:d6:7c:a9:bb:a3:
         5c:a4:62:12:c1:d3:46:1c:12:15:3c:39:97:0a:1f:30:9a:4f:
         e1:bf:d9:b6:af:6b:39:35:11:f6:56:09:41:24:1b:eb:ca:cd:
         11:2f:cd:dd:05:d6:1a:6f:11:8e:fb:08:02:c2:c0:80:c9:22:
         eb:e7:26:fc:19:1e:c2:fb:bb:9c:49:5e:24:a6:eb:18:bb:79:
         a0:91:98:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:28 2024 by rpki-client on console-ams.rpki-client.org