Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/323830343a376139343a323030303a3a2f34302d3430203d3e20323731333830.roa
File:                     323830343a376139343a323030303a3a2f34302d3430203d3e20323731333830.roa (raw, json)
Hash identifier:          AKCc4xmGTv+Dz0CYLSjhk28mUjEjMkzbUHJIvsASNyU=
Subject key identifier:   31:34:21:D5:9B:1A:A8:28:17:AE:32:20:74:A0:CC:89:BA:DD:D9:BB
Certificate issuer:       /CN=CED693561B18E1F15DE112114489E7324E327A34
Certificate serial:       71B67D05CAD58EA6ED07FB6FF08896B2B0FDB65A
Authority key identifier: CE:D6:93:56:1B:18:E1:F1:5D:E1:12:11:44:89:E7:32:4E:32:7A:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CED693561B18E1F15DE112114489E7324E327A34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/323830343a376139343a323030303a3a2f34302d3430203d3e20323731333830.roa
Signing time:             Tue 28 Nov 2023 19:41:43 +0000
ROA not before:           Tue 28 Nov 2023 19:36:43 +0000
ROA not after:            Tue 26 Nov 2024 19:41:43 +0000
asID:                     271380
IP address blocks:        2804:7a94:2000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b6:7d:05:ca:d5:8e:a6:ed:07:fb:6f:f0:88:96:b2:b0:fd:b6:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CED693561B18E1F15DE112114489E7324E327A34
        Validity
            Not Before: Nov 28 19:36:43 2023 GMT
            Not After : Nov 26 19:41:43 2024 GMT
        Subject: CN=313421D59B1AA82817AE322074A0CC89BADDD9BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fa:ed:a9:20:64:0c:13:c7:0a:c8:60:1e:82:
                    52:8d:1d:0b:aa:33:1d:81:de:0a:38:53:9c:8a:44:
                    ac:8d:74:12:a1:70:4a:55:ba:97:3c:ec:74:26:7e:
                    47:05:23:19:9e:0b:40:f0:5c:03:b4:33:ec:5e:20:
                    e3:2a:96:a2:af:14:70:d5:3d:2a:c2:e9:11:0e:11:
                    30:30:3a:b4:28:63:e4:11:43:c1:5d:8a:d2:cf:c2:
                    94:c5:90:5f:28:1c:b6:c2:4f:bf:dd:7a:b6:05:af:
                    e4:73:8d:8b:03:55:79:9d:fb:46:3e:69:06:72:ab:
                    fb:39:f7:0b:43:39:80:95:7c:e5:ac:02:86:87:98:
                    ef:a3:74:31:6a:6d:b5:01:b4:c3:1b:fc:02:a1:75:
                    d9:9c:b2:bb:01:0a:33:d1:f6:56:56:6f:0e:ab:cd:
                    c6:79:3e:c0:86:b5:3e:88:76:6b:26:a2:ed:f0:ff:
                    7d:65:96:57:fe:f7:04:f1:1a:e6:93:5a:b4:ea:e3:
                    ff:de:7e:12:ca:d6:56:c1:a5:e1:20:10:4a:e0:52:
                    be:5c:af:a7:87:79:ad:13:ff:3a:62:69:85:64:40:
                    29:7d:f5:af:d6:27:8b:ed:bb:3c:93:b3:eb:f9:af:
                    fb:6c:bb:98:77:45:0d:e8:c8:a2:c4:a4:40:e8:e9:
                    ec:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:34:21:D5:9B:1A:A8:28:17:AE:32:20:74:A0:CC:89:BA:DD:D9:BB
            X509v3 Authority Key Identifier:
                keyid:CE:D6:93:56:1B:18:E1:F1:5D:E1:12:11:44:89:E7:32:4E:32:7A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/CED693561B18E1F15DE112114489E7324E327A34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CED693561B18E1F15DE112114489E7324E327A34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/323830343a376139343a323030303a3a2f34302d3430203d3e20323731333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a94:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         98:eb:67:bb:ee:cf:67:b7:67:e1:10:86:f9:5b:94:6f:c8:c3:
         14:79:9b:cc:80:77:25:50:c0:a8:b0:16:02:1e:ab:ab:2f:f8:
         31:50:78:0f:eb:73:35:40:9a:a0:31:39:90:44:1f:03:31:10:
         97:10:ea:a8:1f:e0:b9:a2:ba:fc:8b:33:dd:07:d4:60:23:b2:
         b9:73:da:22:81:88:c8:3a:12:f8:c1:7c:fb:50:8d:d1:99:c0:
         b8:84:e7:ac:3c:12:9c:fe:39:7f:2b:cb:79:d3:30:dd:4c:db:
         22:03:a7:ab:71:7d:d3:32:2d:b4:d1:54:71:3e:68:37:c5:4b:
         6a:ca:9c:c1:f8:d3:4c:44:cc:44:7d:49:e8:8d:26:0c:f5:15:
         d7:1e:fe:6b:6e:be:00:46:1c:fa:38:a8:e0:f2:ab:98:9d:fb:
         43:2b:0d:83:1e:d4:82:32:cb:41:7f:1b:73:f5:59:c4:95:cf:
         b4:9d:5c:fe:10:28:cd:0c:66:ab:d5:af:b4:93:ff:63:55:e7:
         b3:3a:c7:8e:36:f7:67:fa:17:5d:c6:3e:3c:1f:21:21:e7:74:
         e3:5a:df:d8:4c:9e:00:57:2e:1c:73:f6:bf:0c:a3:e7:7a:13:
         fc:56:69:58:13:0f:8b:28:2a:d3:d7:08:c3:89:ab:cf:f4:88:
         76:12:04:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:30 2024 by rpki-client on console-ams.rpki-client.org