Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/0/323830343a6363343a31303a3a2f34382d3438203d3e203532353531.roa
File:                     323830343a6363343a31303a3a2f34382d3438203d3e203532353531.roa (raw, json)
Hash identifier:          waWhLPfj5As2sGkeO24AS71wnfjBckEmZltMqTehkJQ=
Subject key identifier:   88:A4:1C:3F:F2:00:E7:D9:61:B9:D5:B2:71:3F:FF:E6:81:0F:00:71
Certificate issuer:       /CN=8D69381991FAB54B082E60AF03ED726BB215241F
Certificate serial:       5906CC33C3E98A29CDE1768E72435E22595370A5
Authority key identifier: 8D:69:38:19:91:FA:B5:4B:08:2E:60:AF:03:ED:72:6B:B2:15:24:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D69381991FAB54B082E60AF03ED726BB215241F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/0/323830343a6363343a31303a3a2f34382d3438203d3e203532353531.roa
Signing time:             Wed 03 May 2023 19:14:24 +0000
ROA not before:           Wed 03 May 2023 19:09:24 +0000
ROA not after:            Wed 01 May 2024 19:14:24 +0000
asID:                     52551
IP address blocks:        2804:cc4:10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:06:cc:33:c3:e9:8a:29:cd:e1:76:8e:72:43:5e:22:59:53:70:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D69381991FAB54B082E60AF03ED726BB215241F
        Validity
            Not Before: May  3 19:09:24 2023 GMT
            Not After : May  1 19:14:24 2024 GMT
        Subject: CN=88A41C3FF200E7D961B9D5B2713FFFE6810F0071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fd:99:f2:5a:6b:11:12:2b:13:98:eb:76:7b:
                    70:5a:b8:b7:f8:3f:c3:5c:66:dd:03:2f:75:ca:64:
                    9b:b2:77:a1:e6:df:69:8a:4f:29:e4:d3:60:f4:f1:
                    40:24:2f:66:58:e1:3d:75:5d:dc:a9:ce:2b:73:a5:
                    4b:bb:3b:c6:49:bc:6c:d5:3f:af:23:fa:55:49:97:
                    42:8a:3f:c8:32:24:cd:56:55:a3:a2:67:b9:6e:7a:
                    e2:2b:c1:d5:56:02:51:8c:ca:c9:e7:ef:bb:b7:92:
                    a4:b8:06:a9:15:a4:a9:e2:25:94:8a:fb:8e:8d:ed:
                    1d:87:8b:9c:87:f4:27:f4:c3:e5:27:cc:36:28:c2:
                    a2:f5:70:83:87:c4:b7:03:31:cb:03:c8:dd:93:10:
                    5b:14:22:6b:ce:1a:ca:10:80:f5:bf:6a:06:c7:14:
                    cb:bc:cb:33:0d:c0:75:e8:ee:f0:53:ec:56:d0:54:
                    54:72:4c:35:d7:d5:57:ee:25:d7:11:07:71:2d:f0:
                    d8:0b:5b:83:24:95:35:2a:bb:27:7b:63:f8:24:c4:
                    77:2c:9f:21:b3:8e:59:8c:08:57:9d:68:11:43:0f:
                    6f:2d:f8:07:9d:cd:ad:f8:71:11:22:70:ee:05:f1:
                    a3:df:35:e7:8e:04:27:36:b2:34:a9:32:bc:be:14:
                    ea:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A4:1C:3F:F2:00:E7:D9:61:B9:D5:B2:71:3F:FF:E6:81:0F:00:71
            X509v3 Authority Key Identifier:
                keyid:8D:69:38:19:91:FA:B5:4B:08:2E:60:AF:03:ED:72:6B:B2:15:24:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/0/8D69381991FAB54B082E60AF03ED726BB215241F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D69381991FAB54B082E60AF03ED726BB215241F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/0/323830343a6363343a31303a3a2f34382d3438203d3e203532353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cc4:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:35:69:54:9f:aa:e9:ee:14:09:a2:06:f9:fd:77:48:2e:4a:
         4d:99:81:d1:b1:5a:86:0d:f3:ce:bc:ed:7b:c5:fb:cb:4a:fe:
         62:20:a6:ce:ad:46:22:2e:6a:35:32:45:66:67:29:62:8a:67:
         bd:da:a8:9c:fb:5f:98:49:8b:9e:b8:cd:21:d8:a7:88:96:8b:
         5b:aa:31:1a:d7:cc:ac:98:b6:59:1c:a1:db:40:ba:28:db:b0:
         e8:36:4c:27:81:9b:c7:6a:4c:d4:69:1a:1c:57:64:02:76:11:
         69:87:d7:61:ef:da:79:80:91:2c:f1:39:c4:92:24:c0:6a:96:
         d9:c9:26:c3:c8:88:ce:4c:5e:a7:84:6a:6d:a7:be:e8:84:55:
         b7:5f:77:0d:3b:4d:e7:d7:0f:e1:47:6d:5c:47:43:88:ee:60:
         83:c7:fe:ac:e7:f7:86:5e:fe:d1:d9:09:ea:68:91:37:43:92:
         b2:e8:c2:95:60:13:77:96:34:17:7d:d7:df:ba:d4:17:d3:db:
         18:af:af:73:07:60:97:f8:21:9d:ff:b5:62:62:d2:aa:af:9c:
         4f:d2:b3:ab:80:c9:71:64:ae:1e:c3:93:3e:7d:1d:6c:16:d2:
         34:6b:16:7c:82:8f:7b:c7:26:4b:69:d9:a9:db:be:74:a1:7f:
         4b:08:6c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org