Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/323830343a323935633a3a2f33322d3438203d3e203533323039.roa
File:                     323830343a323935633a3a2f33322d3438203d3e203533323039.roa (raw, json)
Hash identifier:          529VoAB7hkmIdD3uFXSOgEU4WKOPicb6XuID06ucZH0=
Subject key identifier:   CC:89:D4:42:22:32:18:28:60:99:0A:7A:DF:47:4B:AC:1E:F7:9A:EF
Certificate issuer:       /CN=A0751734ECAAA4CA4F27E6F57D46AB3A4124B6F9
Certificate serial:       20AA9FCEA4FD9DC428FEA8F4A1C559158E61F54A
Authority key identifier: A0:75:17:34:EC:AA:A4:CA:4F:27:E6:F5:7D:46:AB:3A:41:24:B6:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0751734ECAAA4CA4F27E6F57D46AB3A4124B6F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/323830343a323935633a3a2f33322d3438203d3e203533323039.roa
Signing time:             Tue 20 Feb 2024 13:12:11 +0000
ROA not before:           Tue 20 Feb 2024 13:07:11 +0000
ROA not after:            Tue 18 Feb 2025 13:12:11 +0000
asID:                     53209
IP address blocks:        2804:295c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:aa:9f:ce:a4:fd:9d:c4:28:fe:a8:f4:a1:c5:59:15:8e:61:f5:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0751734ECAAA4CA4F27E6F57D46AB3A4124B6F9
        Validity
            Not Before: Feb 20 13:07:11 2024 GMT
            Not After : Feb 18 13:12:11 2025 GMT
        Subject: CN=CC89D4422232182860990A7ADF474BAC1EF79AEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:35:87:fe:22:a1:70:77:ff:b3:e5:04:92:29:
                    a6:0d:72:b6:29:e6:e0:d6:b5:0b:f2:31:77:4a:80:
                    0e:66:59:9e:c4:ce:a5:6f:32:e7:a6:c0:dd:36:9a:
                    77:b0:fb:b8:e6:04:47:98:80:9e:7b:f7:af:2b:96:
                    53:69:b4:be:23:d9:02:77:9f:a5:d1:b1:2a:1e:3c:
                    bc:d6:22:02:03:90:ca:7d:6a:41:04:b0:3c:f4:2b:
                    f2:34:ae:fb:70:b0:07:75:e0:cb:40:ee:db:c3:67:
                    4e:7b:93:4e:2e:3b:09:3f:14:79:ad:0f:1e:06:3f:
                    ea:2b:e1:98:12:03:05:f3:a8:fb:51:76:ab:63:07:
                    f4:b8:a0:6f:1f:8b:26:9e:6c:fd:20:94:fa:e9:3c:
                    41:76:e4:d1:f8:96:7d:74:d5:52:6c:22:fa:ce:15:
                    9f:01:c1:92:e6:21:6e:a4:01:7e:cd:78:68:b0:4b:
                    b0:21:a1:d9:c7:80:6e:6d:6c:9a:f3:7f:ca:23:20:
                    08:6c:7b:df:db:fc:68:a1:32:bf:69:46:91:cb:4b:
                    0a:b7:d5:f1:4f:7c:4d:bb:9a:4e:10:e7:1f:46:fc:
                    7a:08:b4:32:a0:4c:25:30:49:e4:53:d6:ba:47:92:
                    53:56:48:18:b2:2e:97:1f:a7:d0:41:da:af:45:27:
                    28:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:89:D4:42:22:32:18:28:60:99:0A:7A:DF:47:4B:AC:1E:F7:9A:EF
            X509v3 Authority Key Identifier:
                keyid:A0:75:17:34:EC:AA:A4:CA:4F:27:E6:F5:7D:46:AB:3A:41:24:B6:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/A0751734ECAAA4CA4F27E6F57D46AB3A4124B6F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0751734ECAAA4CA4F27E6F57D46AB3A4124B6F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/323830343a323935633a3a2f33322d3438203d3e203533323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:295c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:db:d2:62:fe:48:9a:c8:5f:67:6d:ca:b1:8d:f6:f7:92:17:
         e4:ea:25:81:43:c2:62:97:2f:ee:fd:e7:1f:bf:08:a5:2f:62:
         92:d7:b3:92:af:07:34:43:69:ef:ef:15:86:b7:8c:dd:e5:dd:
         6f:fb:17:75:52:a2:42:16:9e:f9:0e:91:88:d1:75:f3:6a:57:
         b0:f6:66:a4:2a:b3:7c:43:0c:8e:6a:cb:d4:19:38:63:3b:35:
         0c:1a:99:d1:a2:1e:cb:40:8b:fe:82:08:96:5d:48:0f:6b:ac:
         df:ae:f4:df:d2:75:1e:81:f2:2c:82:01:1f:c0:38:17:99:75:
         29:b7:d3:5c:af:18:ec:23:4c:2a:76:31:66:90:8c:d6:7b:26:
         62:7d:13:23:b7:51:cd:e7:59:ad:10:6d:7a:64:d6:b7:96:f2:
         12:c6:7e:70:db:88:b6:9d:0e:0b:b1:82:e7:4e:59:f5:8a:9c:
         01:a1:41:b2:cf:d2:d7:25:f9:b2:7e:8a:a3:1c:c2:66:c5:b9:
         19:25:54:53:12:26:62:40:54:7b:a8:3b:b5:24:11:52:e7:bf:
         ad:22:db:4f:84:84:17:5e:0c:ae:9b:b4:fd:9e:88:45:f8:b1:
         d7:ba:95:c9:f6:9b:c2:e0:0b:62:7b:a9:99:de:b6:ff:c3:c1:
         77:a2:44:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org