Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a383239623a3a2f34382d3438203d3e20323632343934.roa
File:                     323830343a6164383a383239623a3a2f34382d3438203d3e20323632343934.roa (raw, json)
Hash identifier:          4inX1HR9uKH4jF/JdS9wwQV2KILEkMaOcseJvNvF/Ec=
Subject key identifier:   1F:FD:9D:D5:35:00:9B:9B:C9:C1:37:AD:A2:1A:96:4C:7C:C1:4C:89
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       0ED6690947ED86A8CEAC27EF1D08320BA3680D5A
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a383239623a3a2f34382d3438203d3e20323632343934.roa
Signing time:             Sat 24 Feb 2024 01:15:04 +0000
ROA not before:           Sat 24 Feb 2024 01:10:04 +0000
ROA not after:            Mon 24 Feb 2025 01:15:04 +0000
asID:                     262494
IP address blocks:        2804:ad8:829b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d6:69:09:47:ed:86:a8:ce:ac:27:ef:1d:08:32:0b:a3:68:0d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Feb 24 01:10:04 2024 GMT
            Not After : Feb 24 01:15:04 2025 GMT
        Subject: CN=3082010A0282010100D4A2180193795A89AA6C27F91B8A4F9C9DA6C1E985B559CEAE21C46AC2F8D6D2720400800D7F500843FB0E3236467BA0B49F2D42F6F1CC5122ED624B330E91E3DE3CBBB2CA67FAC5B1DEB1A58B7A597FEFD020D98DCB2C6B555663C3F7EA55E4BFB11B0A3928A4B019C77109B319B24C00F15057172A5138FF082777C465557EE8381AC5425CCDA22641494A741839F8B7F3E320FD4FF87A6CB337910B96C8597AEBDB2B4B8C6B834C3370349647CC1C023E071A3EDC303E50F734C962195A81BA2B9ED7BB7DB4D66580406BEB917606E4B44EE832F8ED2599E44291B8A2EB417F0EAFAD70E194EFC2D6DAF6A7058CB1058C40F508638535A758BFBC3C9E575B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a2:18:01:93:79:5a:89:aa:6c:27:f9:1b:8a:
                    4f:9c:9d:a6:c1:e9:85:b5:59:ce:ae:21:c4:6a:c2:
                    f8:d6:d2:72:04:00:80:0d:7f:50:08:43:fb:0e:32:
                    36:46:7b:a0:b4:9f:2d:42:f6:f1:cc:51:22:ed:62:
                    4b:33:0e:91:e3:de:3c:bb:b2:ca:67:fa:c5:b1:de:
                    b1:a5:8b:7a:59:7f:ef:d0:20:d9:8d:cb:2c:6b:55:
                    56:63:c3:f7:ea:55:e4:bf:b1:1b:0a:39:28:a4:b0:
                    19:c7:71:09:b3:19:b2:4c:00:f1:50:57:17:2a:51:
                    38:ff:08:27:77:c4:65:55:7e:e8:38:1a:c5:42:5c:
                    cd:a2:26:41:49:4a:74:18:39:f8:b7:f3:e3:20:fd:
                    4f:f8:7a:6c:b3:37:91:0b:96:c8:59:7a:eb:db:2b:
                    4b:8c:6b:83:4c:33:70:34:96:47:cc:1c:02:3e:07:
                    1a:3e:dc:30:3e:50:f7:34:c9:62:19:5a:81:ba:2b:
                    9e:d7:bb:7d:b4:d6:65:80:40:6b:eb:91:76:06:e4:
                    b4:4e:e8:32:f8:ed:25:99:e4:42:91:b8:a2:eb:41:
                    7f:0e:af:ad:70:e1:94:ef:c2:d6:da:f6:a7:05:8c:
                    b1:05:8c:40:f5:08:63:85:35:a7:58:bf:bc:3c:9e:
                    57:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FD:9D:D5:35:00:9B:9B:C9:C1:37:AD:A2:1A:96:4C:7C:C1:4C:89
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a383239623a3a2f34382d3438203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:829b::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:20:50:24:a4:75:52:3a:64:00:5a:f0:1c:cb:3d:ac:6a:1a:
         b6:e0:4d:39:1b:30:d7:39:bc:bf:54:19:c6:b8:6b:f5:e0:bc:
         f8:a8:bf:0d:d3:71:3a:d0:7c:05:47:dc:e3:ab:bf:84:b1:0e:
         c9:ab:14:32:77:b3:b4:ec:fa:49:e3:4e:ef:d6:d3:52:62:67:
         30:1e:e7:76:06:b7:cc:80:42:34:f7:fa:1e:dd:d1:ce:31:81:
         e3:92:e3:c8:66:db:b8:14:95:3b:72:74:7a:6d:b1:39:14:41:
         88:90:51:c2:bf:8f:98:ad:cc:aa:d8:bb:45:57:55:79:f5:a7:
         92:b5:29:f1:76:a4:7d:00:a2:ab:05:3c:ce:e8:2d:6c:61:0f:
         be:c9:5a:ca:64:e3:59:80:93:0c:ce:22:fd:25:9a:0e:53:ac:
         ca:a9:52:9b:89:c0:51:5a:4b:8b:db:59:a0:85:c1:18:15:e7:
         e0:d5:98:bf:70:e0:33:4e:82:6b:3c:31:11:0b:a1:3d:6a:ee:
         0a:18:78:8d:c2:ce:62:2c:a6:82:81:cf:21:7b:07:57:a7:2c:
         f3:6b:0f:4a:12:5f:0c:2a:12:60:34:38:90:41:10:10:f3:87:
         6a:04:b8:e0:1b:6b:af:a9:be:b3:43:a7:cd:39:85:bb:da:cb:
         b4:08:cb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org