Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a383261353a3a2f34382d3438203d3e20323632343934.roa
File:                     323830343a6164383a383261353a3a2f34382d3438203d3e20323632343934.roa (raw, json)
Hash identifier:          L63e8EDGcy5CfCh7Xs5RamY4XVctyyb9g0TRNeYeSW4=
Subject key identifier:   CB:DB:D6:6F:94:7B:3E:A0:1F:B9:4C:C1:79:BB:1E:1E:60:A5:2F:A6
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       3929C758DEA3F78323EE82A4BD6754F4D8B6FCC1
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a383261353a3a2f34382d3438203d3e20323632343934.roa
Signing time:             Sat 24 Feb 2024 01:15:57 +0000
ROA not before:           Sat 24 Feb 2024 01:10:57 +0000
ROA not after:            Mon 24 Feb 2025 01:15:57 +0000
asID:                     262494
IP address blocks:        2804:ad8:82a5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:29:c7:58:de:a3:f7:83:23:ee:82:a4:bd:67:54:f4:d8:b6:fc:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Feb 24 01:10:57 2024 GMT
            Not After : Feb 24 01:15:57 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b7:8b:3c:ad:81:cf:d9:0b:54:a2:e6:58:32:
                    ff:64:a4:b0:a7:3b:49:f3:56:f5:2f:3b:87:25:82:
                    07:68:06:26:e9:ac:bd:c5:b2:c7:5b:34:7c:47:69:
                    d9:13:6a:e1:1d:7d:0c:d3:aa:78:8b:1d:15:b9:8b:
                    46:f5:27:d7:c7:5c:07:bd:4b:9c:87:2c:67:4c:67:
                    2f:b8:e7:b6:e5:f4:1b:6c:e5:5d:4f:ec:cf:ba:ed:
                    2b:65:c2:08:f4:a4:fc:3a:1c:b1:c7:96:ab:60:98:
                    5e:dd:f4:69:84:20:21:9c:39:1b:f5:87:be:7d:eb:
                    15:44:e9:5b:9a:89:4d:3c:79:77:c9:53:5b:70:5c:
                    1a:ea:f3:91:78:10:c4:82:f8:63:57:80:ed:ed:86:
                    47:3d:ef:3d:77:47:cc:7b:23:66:f5:8f:db:5e:3b:
                    3f:3c:bb:95:57:c5:6a:44:3a:89:ad:a2:fe:53:f9:
                    2f:04:bd:d1:68:c3:15:39:c4:49:a3:34:7f:03:c6:
                    e9:56:2d:b5:49:b0:7c:e6:9f:1b:a6:bc:17:de:64:
                    1a:c8:2a:df:6f:e0:ea:1f:ac:2f:61:28:4f:53:05:
                    f7:99:17:6a:6d:ef:7a:79:14:5a:23:1a:fb:79:ef:
                    d3:f9:d4:9b:5a:84:53:f9:28:fd:56:58:ed:05:97:
                    73:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DB:D6:6F:94:7B:3E:A0:1F:B9:4C:C1:79:BB:1E:1E:60:A5:2F:A6
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a383261353a3a2f34382d3438203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:82a5::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:21:fb:c0:52:dd:bb:60:16:11:d4:19:69:30:44:0d:bb:03:
         69:82:ef:09:22:4e:16:67:d3:6b:75:aa:88:38:dc:75:f0:36:
         aa:75:20:f0:76:f4:41:9d:b1:69:5c:33:63:78:3a:de:59:cc:
         e7:26:72:f2:d8:c7:03:8b:ff:5d:af:1f:c9:17:aa:34:f9:3d:
         fb:df:94:52:79:6b:25:e4:26:23:2b:e2:d2:87:6f:05:f6:34:
         bb:d2:10:1b:60:5d:6a:e3:39:ab:bf:f9:b4:68:65:cf:09:3b:
         26:11:e1:3f:a5:8d:b6:63:b3:5c:6d:4a:59:78:1c:ad:2c:dd:
         17:70:d9:69:6b:38:64:11:61:d4:6d:e4:3d:ba:af:35:95:a4:
         6d:04:f4:02:ae:e6:6a:ab:9d:0d:a8:e6:8b:9c:3b:ef:f1:f4:
         b8:b6:df:7a:c7:7c:a7:31:0f:70:fd:af:c8:b4:cd:38:8f:0b:
         59:d7:06:0e:7a:23:3e:85:6e:b6:6e:f3:c3:b4:c5:3a:89:7a:
         66:00:70:7e:83:9f:9e:89:65:1b:d5:a7:db:a0:4b:f8:f5:de:
         64:b3:be:13:19:84:ec:50:f0:63:4f:03:c2:d0:71:47:85:a6:
         8c:16:81:cc:30:7b:16:1a:a4:74:0c:ba:70:32:1e:1b:e5:25:
         f8:f2:29:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org