Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a3138303a3a2f34312d3431203d3e20323632343934.roa
File:                     323830343a6164383a3138303a3a2f34312d3431203d3e20323632343934.roa (raw, json)
Hash identifier:          HrLnCRw4cOwodehzzciwsQhLmmiS2ulSZxpjzHO8CjA=
Subject key identifier:   58:CA:89:C8:15:9E:D0:9C:92:22:C7:77:D4:48:3C:E2:B0:DD:AB:DF
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       19F5EB34C0AD8BF19F6547F69C9687C2F824C61F
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a3138303a3a2f34312d3431203d3e20323632343934.roa
Signing time:             Sat 24 Feb 2024 01:12:33 +0000
ROA not before:           Sat 24 Feb 2024 01:07:33 +0000
ROA not after:            Mon 24 Feb 2025 01:12:33 +0000
asID:                     262494
IP address blocks:        2804:ad8:180::/41 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f5:eb:34:c0:ad:8b:f1:9f:65:47:f6:9c:96:87:c2:f8:24:c6:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Feb 24 01:07:33 2024 GMT
            Not After : Feb 24 01:12:33 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3c:44:24:cf:e3:29:0c:e4:94:49:c2:9f:36:
                    44:c4:c9:91:b4:af:21:66:8d:79:4e:5c:59:0f:5c:
                    61:94:86:8e:01:28:2d:15:0c:77:6b:b5:91:b3:28:
                    76:31:b3:ae:7a:66:6d:88:12:33:1b:d2:ea:8a:2e:
                    1d:41:53:58:53:93:c2:8e:e4:53:57:96:74:67:55:
                    03:62:fa:aa:66:f6:9e:e5:c1:24:af:26:94:00:91:
                    a6:90:b8:ba:45:fa:8b:3b:a3:57:41:66:87:8d:23:
                    2a:cf:0f:2f:b2:7f:aa:f3:2c:9a:e4:be:e6:9a:be:
                    3e:49:69:75:f1:77:4b:2b:c3:2b:6a:31:52:0f:3f:
                    0d:ec:55:b7:39:e2:bc:4a:29:bf:19:fd:e6:5e:af:
                    6d:38:43:2b:fd:fd:ce:15:04:92:e4:a3:1e:4f:9e:
                    21:d3:b5:c1:57:39:42:81:8f:9b:9a:0a:a6:e9:46:
                    0c:c8:2c:b2:11:76:af:ee:22:e5:25:e3:4a:78:11:
                    d5:1a:ba:7e:86:ca:73:9a:a0:ee:9c:63:c7:3a:f2:
                    7b:c5:8c:66:34:22:6d:91:39:5e:23:24:b7:07:d2:
                    90:ef:c3:27:13:87:8e:e0:69:58:22:ca:65:5a:aa:
                    5f:c2:ba:32:b5:81:2b:6b:aa:3d:ce:88:30:fa:8d:
                    00:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CA:89:C8:15:9E:D0:9C:92:22:C7:77:D4:48:3C:E2:B0:DD:AB:DF
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a3138303a3a2f34312d3431203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:180::/41

    Signature Algorithm: sha256WithRSAEncryption
         a4:f2:5b:43:d0:a6:33:38:0e:76:5c:a3:81:d6:62:1a:67:21:
         3c:f3:c4:02:30:d9:c4:f3:56:41:82:73:a1:e7:d6:59:b6:8b:
         d4:28:c4:32:9a:f3:02:06:33:f4:97:85:0c:43:f9:09:10:8e:
         1e:e5:5c:07:62:aa:46:7f:46:dd:85:9e:9f:a1:2b:e1:84:21:
         3a:7b:9f:a3:3a:92:38:b3:ce:0d:f3:b2:03:aa:f1:6f:4a:7e:
         c1:85:e9:a7:16:7c:85:2a:a7:a3:06:8c:58:f0:4c:00:e0:ab:
         2b:8e:1c:57:4c:e5:fd:59:23:7f:29:3b:7b:04:c6:c3:9b:56:
         0f:d3:38:64:c5:55:22:60:0d:43:90:3b:d8:94:e2:48:da:c0:
         69:25:1c:59:c2:99:8a:08:55:3c:9c:93:51:be:b6:1d:dc:f6:
         86:ce:9a:42:34:7c:94:cb:e3:06:4b:7f:cf:f6:21:87:83:bd:
         c4:4e:dd:17:4c:65:a9:0e:5b:1f:12:8c:45:2b:6e:f5:8d:9e:
         b6:15:f9:b5:65:b9:a8:d8:4a:20:76:b2:1c:ae:7c:6c:70:49:
         ec:62:91:ac:88:71:72:87:4c:bc:9a:29:0c:0e:3b:49:d9:ec:
         1f:6a:e9:89:bd:9f:a2:f0:bd:78:ee:08:6d:42:92:4e:32:ca:
         c2:be:20:e7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org