Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/323830343a326363303a3a2f33332d3333203d3e20323635323431.roa
File:                     323830343a326363303a3a2f33332d3333203d3e20323635323431.roa (raw, json)
Hash identifier:          vpjkkpZWGjg9zvvL2WgQbrHy4ZDfmvfBqE9feDUfLAQ=
Subject key identifier:   55:12:85:8C:78:E6:EC:48:FE:97:3C:5F:FF:7A:CD:13:FC:B3:5F:F6
Certificate issuer:       /CN=15F445D08CF8B48A7724CDD35F0A54D5425E3CBA
Certificate serial:       27110D1AC40BFBC95E187E44D444DDC1E21BDF3A
Authority key identifier: 15:F4:45:D0:8C:F8:B4:8A:77:24:CD:D3:5F:0A:54:D5:42:5E:3C:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/323830343a326363303a3a2f33332d3333203d3e20323635323431.roa
Signing time:             Thu 04 Apr 2024 23:07:38 +0000
ROA not before:           Thu 04 Apr 2024 23:02:38 +0000
ROA not after:            Thu 03 Apr 2025 23:07:38 +0000
asID:                     265241
IP address blocks:        2804:2cc0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:11:0d:1a:c4:0b:fb:c9:5e:18:7e:44:d4:44:dd:c1:e2:1b:df:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15F445D08CF8B48A7724CDD35F0A54D5425E3CBA
        Validity
            Not Before: Apr  4 23:02:38 2024 GMT
            Not After : Apr  3 23:07:38 2025 GMT
        Subject: CN=5512858C78E6EC48FE973C5FFF7ACD13FCB35FF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d1:1d:68:9a:c7:e7:d1:28:b1:53:fe:fb:26:
                    22:a7:ab:bb:c2:fc:85:6d:20:d6:5c:c5:78:40:53:
                    14:d3:ec:e4:0f:ba:af:1a:cd:79:6c:99:2b:16:e7:
                    76:6e:6a:45:70:8f:fe:69:c2:0e:3a:ae:53:c9:b5:
                    22:b5:c6:f1:dd:9b:1c:64:db:8d:25:6b:18:ed:8f:
                    4d:97:31:61:f5:4d:7b:99:49:93:c3:09:a3:db:fe:
                    56:16:55:43:8b:f7:9b:68:24:03:e4:27:92:04:01:
                    1f:0c:97:d0:af:70:00:91:87:03:cd:ed:dd:b7:45:
                    a7:29:b5:87:5e:42:6a:c7:e0:1d:49:36:06:be:02:
                    f8:ed:65:80:c1:13:3e:ee:cc:bf:96:d7:59:21:93:
                    ed:45:de:ad:04:cf:6a:aa:a1:71:0f:c5:80:82:3e:
                    02:10:72:8a:a4:bb:9e:a2:6a:82:6e:0d:bf:c8:fd:
                    a7:57:92:72:fa:e9:b0:5a:67:d0:99:40:0a:61:0e:
                    e9:ff:68:9b:3a:6d:53:df:25:12:9c:c7:59:73:ee:
                    71:f3:8d:33:d8:39:80:0d:2a:0c:b6:e8:7a:9c:fa:
                    44:12:ec:7f:e5:e0:16:3c:10:c8:ef:35:f9:70:4f:
                    95:3e:14:d8:91:cd:1e:4a:da:97:74:bd:e1:0e:dd:
                    ea:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:12:85:8C:78:E6:EC:48:FE:97:3C:5F:FF:7A:CD:13:FC:B3:5F:F6
            X509v3 Authority Key Identifier:
                keyid:15:F4:45:D0:8C:F8:B4:8A:77:24:CD:D3:5F:0A:54:D5:42:5E:3C:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/323830343a326363303a3a2f33332d3333203d3e20323635323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cc0::/33

    Signature Algorithm: sha256WithRSAEncryption
         36:77:38:bc:e3:36:62:d9:75:49:71:1c:0a:20:1c:86:82:04:
         0c:51:46:6d:cf:0f:7f:ae:61:d0:8f:8f:5c:29:96:b9:1c:4d:
         27:01:9b:47:29:98:3b:5a:dd:4d:78:36:65:10:cd:04:bc:42:
         01:dd:5d:b2:a4:f1:59:c2:dd:0a:eb:a2:5e:b8:07:72:57:9e:
         28:6d:a6:b7:ec:9e:9b:ff:04:f5:a2:a6:07:b8:46:d0:65:66:
         48:0e:ba:f5:3a:10:5c:51:f0:06:69:c2:1c:3c:66:bc:28:99:
         f0:34:0e:ad:c9:3b:d1:73:2e:60:3a:65:f5:c5:a7:31:29:58:
         a7:0d:4c:5e:e5:57:53:a5:e6:36:22:9e:5a:3a:16:e1:f9:d8:
         8e:03:fb:c2:f7:8f:a8:d6:c5:d2:ee:61:cf:73:ec:a5:66:83:
         f2:19:b0:e9:6c:0f:a3:6c:32:ba:1d:d9:5e:53:de:fe:ab:08:
         9e:85:09:8f:ea:da:11:cf:8e:e6:84:5c:51:0d:3d:32:a4:cd:
         04:38:fe:9b:d3:76:b7:4e:29:5e:1c:81:dd:eb:a4:96:dd:7f:
         31:52:e3:60:c9:90:0c:ae:eb:46:1c:20:31:fd:91:d9:92:4d:
         90:7d:ec:4c:ba:13:3f:d3:25:04:9b:7c:f4:d4:fb:67:52:a0:
         e6:3e:2b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org