Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a643030303a3a2f33362d3336203d3e20323637393432.roa
File:                     323830343a353539303a643030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier:          /7de1NwFgRwsavO9QVeziHoSya2Crk6o8lgretC3/1o=
Subject key identifier:   90:CB:51:F5:EA:10:69:53:C0:3C:38:60:01:FB:CF:D8:4C:AB:A5:5C
Certificate issuer:       /CN=AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73
Certificate serial:       6870D5DEB718D5776AA68F3AAE378100D06A0489
Authority key identifier: AF:BE:5F:9D:8B:8C:17:D6:EB:A4:E6:94:F3:6F:C1:E7:9F:50:FF:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a643030303a3a2f33362d3336203d3e20323637393432.roa
Signing time:             Mon 19 Feb 2024 20:58:28 +0000
ROA not before:           Mon 19 Feb 2024 20:53:28 +0000
ROA not after:            Mon 17 Feb 2025 20:58:28 +0000
asID:                     267942
IP address blocks:        2804:5590:d000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:70:d5:de:b7:18:d5:77:6a:a6:8f:3a:ae:37:81:00:d0:6a:04:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73
        Validity
            Not Before: Feb 19 20:53:28 2024 GMT
            Not After : Feb 17 20:58:28 2025 GMT
        Subject: CN=90CB51F5EA106953C03C386001FBCFD84CABA55C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c0:57:a2:e4:7d:33:71:91:1d:66:7c:2b:97:
                    12:05:0e:28:08:23:38:70:41:a2:f8:36:d2:5b:f8:
                    69:3f:75:d1:18:79:a4:36:0c:2e:01:f9:d1:54:2b:
                    5a:35:18:6b:2d:de:21:36:67:74:e1:fa:7f:3f:f3:
                    f1:c0:33:74:d8:3c:0e:50:34:ec:23:21:fc:d4:6d:
                    1e:72:40:28:53:73:38:0c:62:c1:ed:31:b5:55:5c:
                    33:e0:6b:c9:f9:06:3a:60:53:67:eb:be:56:53:15:
                    08:4e:86:47:be:31:46:35:dc:c7:34:7c:7b:f7:45:
                    c0:24:ce:a7:07:90:7c:2d:74:45:fb:39:65:b5:8f:
                    1e:01:f0:3b:8f:c9:82:04:e3:1d:4d:6e:a1:7a:12:
                    76:4e:d3:70:68:14:a8:11:05:a7:e6:90:22:82:41:
                    ff:8d:38:9f:89:c4:dd:f8:62:b3:ec:e3:92:fb:0b:
                    ae:df:ac:c4:f3:19:ed:49:d9:bc:d1:25:13:a2:ba:
                    51:8c:67:6b:c9:3f:47:60:cb:ee:77:02:22:a1:e5:
                    d7:06:e0:f3:c0:72:9e:fb:8e:26:f4:e2:18:0a:ad:
                    e6:85:a3:02:ff:f7:43:bc:7a:a8:c4:20:15:35:1b:
                    ac:15:7e:a4:19:70:dc:3a:ba:06:0e:e8:9a:e3:17:
                    0b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CB:51:F5:EA:10:69:53:C0:3C:38:60:01:FB:CF:D8:4C:AB:A5:5C
            X509v3 Authority Key Identifier:
                keyid:AF:BE:5F:9D:8B:8C:17:D6:EB:A4:E6:94:F3:6F:C1:E7:9F:50:FF:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a643030303a3a2f33362d3336203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5590:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         71:19:b2:64:8f:89:7b:33:ad:ec:8a:7e:b3:38:17:c5:85:c7:
         37:b6:5e:92:2d:4c:c1:87:2f:4e:8f:15:f3:bf:a4:f6:3a:94:
         c7:6b:f4:4a:4a:3f:e1:a3:73:0a:55:3d:ff:e4:43:39:10:31:
         97:98:6f:73:ff:3c:af:bf:44:c4:16:15:cf:04:16:c0:94:52:
         95:8f:a4:7c:48:bb:2d:48:33:14:56:37:2e:95:2a:81:3c:5e:
         5d:b2:d7:fa:af:9d:b0:89:8d:0d:65:a3:19:56:3f:af:8c:7e:
         3b:a6:cb:63:4f:34:a7:42:6b:75:bf:2a:d9:e3:1b:f8:c1:22:
         f0:e6:f8:8d:29:c4:52:e9:35:4e:fc:4b:78:d6:0d:d9:cc:b3:
         47:a8:3d:cb:60:08:06:99:7f:63:ec:be:ab:a6:85:90:cb:37:
         5b:53:ff:5c:fa:33:23:c3:ac:81:c3:b7:02:19:e3:fd:f1:a2:
         dc:68:7a:74:04:96:9f:79:77:b5:14:ae:93:47:f2:11:a1:aa:
         88:3c:5a:8d:db:ca:ff:39:f9:f1:4a:31:43:f7:47:6b:f5:b7:
         69:7d:fd:5f:d3:c7:f1:e6:34:9e:5c:0f:5c:ea:2e:c0:cf:ff:
         6c:3d:d4:aa:9a:46:17:ee:3d:be:14:3b:c3:c7:df:0a:9d:7d:
         e3:16:dc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org