Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a3a2f33322d3438203d3e20323632353838.roa
File:                     323830343a323930343a3a2f33322d3438203d3e20323632353838.roa (raw, json)
Hash identifier:          RNdlkPzJVznkFke5zqUGNcZO2bac2d0XjyRW0yU8drw=
Subject key identifier:   CE:62:E5:31:8A:71:80:D2:58:83:9A:2D:7B:0B:8C:65:73:F0:92:CF
Certificate issuer:       /CN=5CC02E8E2938AFADEA467289D4C793583546A57D
Certificate serial:       4A006C7F9B5A0C9770EBFEDBF90BC622F42F6557
Authority key identifier: 5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a3a2f33322d3438203d3e20323632353838.roa
Signing time:             Mon 25 Sep 2023 19:13:49 +0000
ROA not before:           Mon 25 Sep 2023 19:08:49 +0000
ROA not after:            Mon 23 Sep 2024 19:13:49 +0000
asID:                     262588
IP address blocks:        2804:2904::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:00:6c:7f:9b:5a:0c:97:70:eb:fe:db:f9:0b:c6:22:f4:2f:65:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CC02E8E2938AFADEA467289D4C793583546A57D
        Validity
            Not Before: Sep 25 19:08:49 2023 GMT
            Not After : Sep 23 19:13:49 2024 GMT
        Subject: CN=CE62E5318A7180D258839A2D7B0B8C6573F092CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:74:84:be:d9:39:dd:b2:87:6d:33:7d:bd:d9:
                    19:0c:32:af:cc:20:03:aa:a2:41:4a:c8:db:9f:3d:
                    4a:cf:fa:4e:93:37:64:27:4d:e8:dc:df:8d:a7:77:
                    11:e2:6e:be:cd:0d:48:b4:65:47:1e:62:1e:37:e1:
                    1e:b5:5f:0b:72:df:02:fb:68:21:c8:60:7c:18:16:
                    67:89:c9:be:3e:62:9a:a4:70:4d:dd:74:2b:85:20:
                    70:d8:7e:ac:7c:01:78:c6:e9:f2:a9:12:ba:2f:23:
                    f3:a3:42:99:37:ed:1a:10:43:e8:aa:9a:ba:8a:84:
                    1a:ed:1e:cd:1a:e5:ec:11:ce:17:9f:f0:68:2a:9c:
                    c4:96:a8:94:bd:e4:51:6f:4e:9e:02:ba:02:de:f1:
                    4e:33:1c:52:66:52:04:b2:ca:cb:aa:1b:7c:2e:69:
                    f5:81:d4:ec:94:01:03:ba:d5:02:0b:f0:dc:dc:96:
                    8d:41:2d:db:fa:96:78:9b:97:16:b1:06:31:ae:87:
                    b9:0d:25:ae:ff:cd:37:f1:5d:e6:37:2d:e6:0b:9e:
                    ba:ca:84:9a:9f:4f:25:3b:e9:c2:25:43:1e:6e:53:
                    4a:8a:2e:86:f0:1b:54:d0:1e:49:8a:0b:f3:ee:0d:
                    b7:88:d3:26:d6:5a:fb:55:46:87:b9:e9:ef:40:6c:
                    e4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:62:E5:31:8A:71:80:D2:58:83:9A:2D:7B:0B:8C:65:73:F0:92:CF
            X509v3 Authority Key Identifier:
                keyid:5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/5CC02E8E2938AFADEA467289D4C793583546A57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a3a2f33322d3438203d3e20323632353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2904::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:77:94:a9:9a:db:00:e1:e9:fa:2e:12:a7:78:2f:77:38:35:
         45:5b:73:07:38:1f:dc:8e:90:16:3c:5d:68:1d:d9:cd:b9:3f:
         e8:12:eb:84:ea:40:4b:7c:a0:45:40:f0:15:90:c7:b7:46:36:
         3b:a8:cd:35:57:6e:f2:a8:49:ca:f5:d4:03:c6:4e:1f:35:1a:
         ff:e1:0e:bd:6f:68:a2:e3:85:e2:40:b2:d1:f8:93:96:7e:17:
         5b:da:91:bc:46:a5:f1:c4:1c:be:fd:f6:21:ad:a0:d6:b3:b6:
         64:76:a8:71:64:ec:ee:57:cb:f7:f8:bf:44:60:26:cd:08:7e:
         41:db:5a:81:ee:62:24:5e:de:c1:dd:c7:65:e1:e9:d9:1a:ec:
         9f:d9:b0:44:cb:00:fc:c7:5d:44:9d:ed:6d:28:3a:a2:0a:c8:
         13:ab:a8:c1:7e:44:85:91:ba:26:b4:c4:c4:79:90:06:26:ed:
         ac:f8:61:04:05:e4:a7:54:59:2f:89:60:73:e6:e1:8c:f8:7e:
         4b:a6:ac:c8:43:d0:80:20:56:58:aa:24:74:1e:93:d2:80:73:
         13:52:4d:9f:e5:9a:62:4f:86:ba:14:c0:f1:af:a1:01:61:9a:
         a5:e0:62:7b:c5:c9:55:08:a2:b9:10:94:0c:87:b4:8f:5e:33:
         66:59:78:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:13 2024 by rpki-client on console-ams.rpki-client.org