Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a383030303a3a2f33362d3336203d3e20323637393432.roa
File:                     323830343a353539303a383030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier:          JnOieeOUb7qVXBjbsze8JGcKFlUEFP64KZVXVPabsLg=
Subject key identifier:   AC:1B:ED:F0:FC:25:D2:48:72:1C:B9:64:62:98:69:A4:0E:43:F8:4D
Certificate issuer:       /CN=AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73
Certificate serial:       6136DB776EAF6B0D468A2BE71323377B15BAB0AD
Authority key identifier: AF:BE:5F:9D:8B:8C:17:D6:EB:A4:E6:94:F3:6F:C1:E7:9F:50:FF:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a383030303a3a2f33362d3336203d3e20323637393432.roa
Signing time:             Mon 19 Feb 2024 20:58:11 +0000
ROA not before:           Mon 19 Feb 2024 20:53:11 +0000
ROA not after:            Mon 17 Feb 2025 20:58:11 +0000
asID:                     267942
IP address blocks:        2804:5590:8000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:36:db:77:6e:af:6b:0d:46:8a:2b:e7:13:23:37:7b:15:ba:b0:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73
        Validity
            Not Before: Feb 19 20:53:11 2024 GMT
            Not After : Feb 17 20:58:11 2025 GMT
        Subject: CN=AC1BEDF0FC25D248721CB964629869A40E43F84D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:49:2c:14:fa:14:8b:54:6a:3a:3e:64:5e:53:
                    0b:ab:09:ae:fc:e8:86:35:ce:4d:1b:8b:53:93:f0:
                    8b:fa:a6:da:24:9a:33:b1:cc:98:ae:7d:49:b2:2d:
                    98:31:3f:a0:32:e2:b4:fa:a8:4b:8a:43:5d:3b:0e:
                    f9:fe:75:e8:a4:0a:bd:3d:9d:2a:1b:70:c1:9e:7c:
                    4c:34:f8:a4:bc:94:a0:cb:fd:14:29:2a:8c:e0:76:
                    e4:54:8a:ad:dc:ee:28:86:84:d4:cb:92:09:86:cd:
                    28:a1:43:65:84:9b:91:c9:b6:29:95:68:58:f5:96:
                    f5:f7:5a:ff:9e:c9:4f:8c:47:d0:d9:f0:dd:f3:e3:
                    77:0d:90:20:de:91:10:4e:45:10:82:80:3d:3e:db:
                    fa:f7:6e:00:d3:ad:07:24:2a:6b:d1:ce:99:91:c7:
                    29:00:5b:75:e5:56:ff:b2:9a:4e:85:ef:7b:53:92:
                    b2:66:6f:d9:07:9a:2f:2e:e0:ea:78:7c:83:7f:94:
                    08:ab:b4:d5:a3:66:01:3f:f2:e5:fd:d2:ae:33:c6:
                    1a:4f:64:22:a3:c0:6e:2f:42:42:61:cd:f9:ff:49:
                    f4:91:9d:6a:82:47:cf:29:d5:59:f7:3d:e6:86:f6:
                    e2:d2:fd:98:be:f7:37:f0:9a:f7:6c:d6:29:89:d4:
                    38:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1B:ED:F0:FC:25:D2:48:72:1C:B9:64:62:98:69:A4:0E:43:F8:4D
            X509v3 Authority Key Identifier:
                keyid:AF:BE:5F:9D:8B:8C:17:D6:EB:A4:E6:94:F3:6F:C1:E7:9F:50:FF:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a383030303a3a2f33362d3336203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5590:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a4:0a:48:ae:70:50:70:5c:81:e6:2d:1b:03:a3:7d:53:7e:f4:
         de:b5:8c:20:a6:ef:35:f3:d8:0f:7b:ec:1f:29:48:36:8f:34:
         a1:9a:45:64:b0:cd:4c:e8:fa:f1:c5:23:93:b4:28:a2:cf:86:
         a1:d0:01:ad:fc:21:c9:ed:ea:9e:a4:6b:04:09:dd:33:15:6e:
         15:af:95:45:22:12:cb:d8:3c:c5:f3:00:4e:49:8a:77:e8:78:
         1a:92:f3:0f:17:65:f6:cb:9e:e3:26:0d:c5:8a:53:0f:e9:18:
         f3:ab:aa:8a:59:ec:c5:63:0a:36:f9:f7:d8:4c:fa:8b:b5:6a:
         94:10:25:cb:dc:e0:53:14:1e:b5:6a:0b:5b:3a:1d:17:7b:9b:
         fb:d3:6c:a1:d2:e3:6b:59:c9:40:9d:9f:61:35:17:dc:05:59:
         00:c5:13:f7:99:5f:0e:a2:d1:a1:13:3a:e0:68:66:d7:d3:3c:
         18:aa:46:d3:1c:02:b2:75:1a:8a:46:ee:8f:92:9a:40:60:52:
         d9:e3:02:e8:e4:ba:16:fb:2a:d1:0d:0d:18:90:0e:20:85:1a:
         1c:c7:95:04:a0:cb:00:7a:4c:fa:fc:f5:0e:17:0f:42:18:4c:
         f0:fb:c7:0b:c6:33:a8:54:40:75:b9:95:2c:29:9d:d5:62:6d:
         54:f8:36:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org