Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/323830343a353134633a3a2f33332d3333203d3e20323638343434.roa
File:                     323830343a353134633a3a2f33332d3333203d3e20323638343434.roa (raw, json)
Hash identifier:          VOOJ+QOwoXzY3TXd99Wn1NgKX0s6/+c26oyC5sy8XhA=
Subject key identifier:   1B:1F:86:89:CF:B3:40:C1:E2:07:A9:59:85:08:42:0C:81:79:E4:02
Certificate issuer:       /CN=AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25
Certificate serial:       5FB349265C4D148AAD933B7BF37DDD4CDDE5B173
Authority key identifier: AC:5C:A9:D3:5B:F5:6C:0D:C5:B0:65:F4:48:B0:58:5A:D0:7F:7F:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/323830343a353134633a3a2f33332d3333203d3e20323638343434.roa
Signing time:             Mon 08 Jan 2024 16:45:42 +0000
ROA not before:           Mon 08 Jan 2024 16:40:42 +0000
ROA not after:            Mon 06 Jan 2025 16:45:42 +0000
asID:                     268444
IP address blocks:        2804:514c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b3:49:26:5c:4d:14:8a:ad:93:3b:7b:f3:7d:dd:4c:dd:e5:b1:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25
        Validity
            Not Before: Jan  8 16:40:42 2024 GMT
            Not After : Jan  6 16:45:42 2025 GMT
        Subject: CN=1B1F8689CFB340C1E207A9598508420C8179E402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:76:be:af:ff:11:08:38:78:08:2a:e0:cf:61:
                    bd:26:2d:6c:8f:4c:12:d6:48:f4:5c:26:de:ce:06:
                    ba:ff:22:70:08:29:9c:f3:05:48:88:21:e3:d2:89:
                    20:dd:6c:86:59:46:ae:c1:c3:57:73:88:49:1d:31:
                    2d:ba:9a:42:5c:93:06:e0:c2:60:be:5e:b2:f2:0c:
                    73:cf:74:51:f5:5b:46:c2:b2:38:65:c0:7a:39:21:
                    1b:49:c6:c4:b1:88:6d:b6:a4:7c:e7:d1:01:cf:4d:
                    2f:05:d3:b7:31:09:f1:26:03:73:49:df:b7:78:cd:
                    9b:6b:ae:83:41:98:27:4e:63:46:17:9f:c1:66:83:
                    e1:52:d3:e3:c9:58:13:fd:70:88:91:ba:22:e6:90:
                    9e:e4:27:53:76:c3:17:55:bf:f6:4a:9a:bb:3c:a6:
                    94:e0:0f:2a:90:fe:80:57:7d:82:b8:44:fa:ea:f6:
                    f6:29:e5:39:5b:a6:4f:70:ff:86:e9:ca:47:b4:4d:
                    7c:ed:ce:59:a8:a7:b1:e5:0c:ab:65:ca:55:d2:9e:
                    26:3c:b0:44:2e:27:64:36:e9:b7:37:a2:60:44:1c:
                    fe:b9:b9:f9:80:97:b9:ba:a2:33:c3:d3:05:91:46:
                    ac:84:2a:ab:a7:ff:75:b7:e0:c3:50:b3:d7:0a:12:
                    87:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1F:86:89:CF:B3:40:C1:E2:07:A9:59:85:08:42:0C:81:79:E4:02
            X509v3 Authority Key Identifier:
                keyid:AC:5C:A9:D3:5B:F5:6C:0D:C5:B0:65:F4:48:B0:58:5A:D0:7F:7F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/323830343a353134633a3a2f33332d3333203d3e20323638343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:514c::/33

    Signature Algorithm: sha256WithRSAEncryption
         94:79:d9:18:0d:7a:5b:c9:e7:2b:18:35:59:12:ee:bb:a9:dd:
         29:56:ae:30:0d:67:02:8d:2d:4c:9f:cd:d7:92:ce:80:82:49:
         a0:fe:69:fd:7a:67:4d:1a:6c:0c:3b:54:95:9c:85:59:f2:2c:
         62:61:70:64:47:64:6b:50:4a:c6:d6:61:e7:63:cb:9e:86:52:
         e0:d7:c8:9d:6a:f4:c4:93:60:cb:0f:1c:e7:2d:7d:f8:9c:23:
         a1:a5:ac:e9:b0:02:8b:ad:58:23:7e:b1:96:1d:5d:ba:82:25:
         0b:9b:8a:c5:b6:d2:8f:36:74:0b:07:d2:8a:8b:71:f5:4a:f5:
         8e:3c:d1:9b:bd:4c:47:f3:7e:e6:66:c8:2b:50:89:67:76:68:
         d6:29:a2:48:fd:b9:1b:3e:46:12:0e:ef:0c:98:92:32:81:e2:
         a4:ba:7a:f8:f7:99:21:ea:be:e6:4c:bd:2b:75:7f:aa:aa:13:
         50:a3:b1:f3:59:03:33:63:ac:48:51:bd:7e:f2:cd:33:2f:97:
         62:f1:25:32:e5:46:2c:b5:ba:05:18:aa:ff:0f:85:65:db:54:
         e8:30:2a:10:ed:f6:47:49:ff:52:de:b6:d4:7b:8e:60:c4:00:
         8b:d3:cd:02:f0:68:d0:4a:ea:ad:3a:93:b6:e1:3a:44:62:b1:
         f1:a8:82:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org