Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/323830343a313164343a3a2f33322d3338203d3e20323633343432.roa
File:                     323830343a313164343a3a2f33322d3338203d3e20323633343432.roa (raw, json)
Hash identifier:          0RV78JUc4vBefYHf4mXvU+bqXlltLe/2NUj5SLBVqYY=
Subject key identifier:   2B:09:6F:C8:EA:A8:6B:E7:D1:9E:E6:6B:AF:D5:97:0F:58:B2:71:82
Certificate issuer:       /CN=CBDF12320DDA3F9EED2220E9407354145B2BA620
Certificate serial:       2E00BBDA62BDECC84362E8E40FF9250FCFA28A50
Authority key identifier: CB:DF:12:32:0D:DA:3F:9E:ED:22:20:E9:40:73:54:14:5B:2B:A6:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CBDF12320DDA3F9EED2220E9407354145B2BA620.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/323830343a313164343a3a2f33322d3338203d3e20323633343432.roa
Signing time:             Tue 26 Dec 2023 19:18:52 +0000
ROA not before:           Tue 26 Dec 2023 19:13:52 +0000
ROA not after:            Tue 24 Dec 2024 19:18:52 +0000
asID:                     263442
IP address blocks:        2804:11d4::/32 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:00:bb:da:62:bd:ec:c8:43:62:e8:e4:0f:f9:25:0f:cf:a2:8a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDF12320DDA3F9EED2220E9407354145B2BA620
        Validity
            Not Before: Dec 26 19:13:52 2023 GMT
            Not After : Dec 24 19:18:52 2024 GMT
        Subject: CN=2B096FC8EAA86BE7D19EE66BAFD5970F58B27182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:91:7c:81:aa:7f:f2:5e:96:c2:bb:5c:9c:51:
                    f0:29:12:ba:e1:96:e6:0e:6d:0f:43:f0:10:76:6b:
                    ad:2a:d2:ca:f4:1e:04:b6:b1:86:30:c6:4c:54:7e:
                    aa:13:8b:a5:00:17:2e:18:22:2f:67:29:ce:5c:06:
                    47:f5:02:57:f3:25:9b:0b:e0:75:b7:3a:63:41:53:
                    43:0d:58:db:09:ef:5b:db:bd:5f:f7:fa:a6:40:74:
                    93:e6:a5:d8:64:8d:64:74:49:0c:fe:92:03:6c:80:
                    f1:c1:e2:6c:9d:48:62:18:28:66:9a:63:69:63:4e:
                    35:14:70:d9:6a:d7:36:57:c3:62:c0:bd:ee:e0:ff:
                    e8:0c:ab:58:f3:85:f7:13:b6:a7:e3:8a:4b:7e:7f:
                    90:5c:29:3f:10:2b:83:cf:c7:c6:68:8b:56:61:81:
                    a9:09:7b:34:c7:68:2c:21:70:f4:ec:60:14:21:a7:
                    9e:e9:9d:11:23:13:c4:91:89:77:f9:42:fe:bd:41:
                    b4:d5:61:82:81:a8:71:a4:c1:16:42:9d:e7:dc:d9:
                    28:e3:43:b6:03:01:3e:6a:dc:fa:f9:ba:78:e1:20:
                    4f:b0:40:36:ba:d4:28:a6:e1:b1:cb:8f:7e:59:8a:
                    76:aa:85:a5:45:21:9d:e3:0c:aa:e3:1d:9c:6e:cc:
                    3e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:09:6F:C8:EA:A8:6B:E7:D1:9E:E6:6B:AF:D5:97:0F:58:B2:71:82
            X509v3 Authority Key Identifier:
                keyid:CB:DF:12:32:0D:DA:3F:9E:ED:22:20:E9:40:73:54:14:5B:2B:A6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/CBDF12320DDA3F9EED2220E9407354145B2BA620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CBDF12320DDA3F9EED2220E9407354145B2BA620.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/323830343a313164343a3a2f33322d3338203d3e20323633343432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:11d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:ab:90:63:fc:86:3a:ad:60:70:34:0d:1a:d5:be:27:42:b0:
         f7:cb:3a:94:1a:3a:a8:3a:35:55:8b:99:8f:4d:0b:ed:47:07:
         62:f6:0d:cb:1d:53:3a:ed:79:b9:98:b0:da:0e:be:fb:33:ea:
         93:47:d7:b2:ca:a4:29:71:37:91:ed:dc:59:f0:66:c1:76:ee:
         5c:ef:e5:0a:5d:1e:a2:1e:61:27:19:aa:f4:cc:88:1a:04:52:
         f5:ef:c3:57:6f:94:fc:4b:ee:2d:8c:96:39:be:ac:2a:4c:ec:
         34:25:50:79:61:e2:5b:c8:f9:8d:a4:97:96:60:e6:40:51:4f:
         57:65:94:5f:25:dc:f4:ad:3f:b9:f3:0f:02:3d:33:83:66:b3:
         97:a5:e4:88:a5:bc:05:27:02:88:81:f9:8a:63:cd:c1:37:c9:
         fd:7b:b5:48:88:37:0e:8f:f3:f6:5b:c3:8e:6f:e3:dc:9b:cb:
         0f:ff:df:6d:f6:16:10:88:a2:63:fb:cd:f9:d3:ff:8c:c6:95:
         2f:f7:7c:60:a0:bf:f3:10:82:75:f6:87:b3:c6:2e:83:6b:39:
         41:1a:34:1f:90:86:fb:a5:f3:da:00:bd:03:c1:bc:e9:f1:93:
         19:10:61:7c:e3:45:ad:50:6e:d3:ab:63:ff:dd:2d:0d:11:3a:
         c0:0b:ab:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org