Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/0/323830343a3464633a3a2f33322d313238203d3e20323632343734.roa
File:                     323830343a3464633a3a2f33322d313238203d3e20323632343734.roa (raw, json)
Hash identifier:          KfT/UvmGgc+5TanYfVNOShr/+SKSPzden2p0YEXvgAA=
Subject key identifier:   68:45:D4:EC:84:49:5A:DA:FE:86:F8:89:DE:90:2B:9B:F5:1A:7D:F9
Certificate issuer:       /CN=5DF6C9E1FF204B9B901D13DB0EA019AB4C0D0BF8
Certificate serial:       097736F01B88201444F13086B16D30A2E3A9A939
Authority key identifier: 5D:F6:C9:E1:FF:20:4B:9B:90:1D:13:DB:0E:A0:19:AB:4C:0D:0B:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DF6C9E1FF204B9B901D13DB0EA019AB4C0D0BF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/0/323830343a3464633a3a2f33322d313238203d3e20323632343734.roa
Signing time:             Sun 24 Mar 2024 17:41:03 +0000
ROA not before:           Sun 24 Mar 2024 17:36:03 +0000
ROA not after:            Sun 23 Mar 2025 17:41:03 +0000
asID:                     262474
IP address blocks:        2804:4dc::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:77:36:f0:1b:88:20:14:44:f1:30:86:b1:6d:30:a2:e3:a9:a9:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DF6C9E1FF204B9B901D13DB0EA019AB4C0D0BF8
        Validity
            Not Before: Mar 24 17:36:03 2024 GMT
            Not After : Mar 23 17:41:03 2025 GMT
        Subject: CN=6845D4EC84495ADAFE86F889DE902B9BF51A7DF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:74:f2:12:dc:7d:a6:fa:3d:ac:08:c9:31:96:
                    6b:9b:76:94:bb:ca:4d:30:dd:31:72:44:8a:46:c3:
                    6b:27:65:5f:1c:4d:28:28:34:e4:9a:3d:b2:2d:98:
                    7a:4c:79:ea:37:16:e7:ab:b2:45:e3:ef:16:ed:f3:
                    85:f1:3a:42:d3:02:28:9d:88:5d:05:78:70:61:16:
                    16:b6:d9:ab:2f:82:c4:8d:38:32:76:c1:0c:01:17:
                    27:3d:d3:1e:16:1b:0e:b2:78:ac:72:ac:60:4e:4d:
                    8f:51:3c:35:33:bc:45:bf:ac:ce:03:5f:47:fd:b7:
                    bd:07:e1:96:9d:11:e4:ca:ec:17:ed:a1:9f:43:54:
                    cc:cc:97:df:32:a0:fb:41:13:44:f2:dd:f3:c3:ce:
                    e1:8e:19:98:97:3c:df:b0:3e:0b:b4:d0:63:f4:36:
                    c8:f4:93:02:9d:33:98:11:2a:8a:de:33:34:63:36:
                    cd:7b:a5:83:54:a8:5b:b7:8c:1a:22:ae:c4:ec:0d:
                    79:8e:0b:45:70:76:c9:18:3b:a8:27:4a:bb:36:8e:
                    f3:52:5d:d0:23:15:87:77:bb:69:a0:6f:c2:8f:69:
                    c5:b6:da:8e:97:d7:71:6b:74:67:02:bb:f6:62:80:
                    c5:3b:0c:28:9b:84:86:ae:e7:43:f5:e7:5b:bf:5b:
                    db:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:45:D4:EC:84:49:5A:DA:FE:86:F8:89:DE:90:2B:9B:F5:1A:7D:F9
            X509v3 Authority Key Identifier:
                keyid:5D:F6:C9:E1:FF:20:4B:9B:90:1D:13:DB:0E:A0:19:AB:4C:0D:0B:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/0/5DF6C9E1FF204B9B901D13DB0EA019AB4C0D0BF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DF6C9E1FF204B9B901D13DB0EA019AB4C0D0BF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/0/323830343a3464633a3a2f33322d313238203d3e20323632343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:83:59:2a:04:5b:21:5c:1a:5d:5a:d1:92:17:91:9a:12:ac:
         41:51:e0:07:04:dd:32:4c:8b:60:21:c0:0d:c8:af:63:c3:a4:
         02:60:c0:9b:e5:28:66:91:a0:cf:83:3b:42:61:05:00:ec:e6:
         b8:00:23:c7:6c:01:e8:4f:c8:4f:bb:12:35:f5:44:b4:04:01:
         e7:ec:16:ff:ed:b0:e3:64:f3:72:cd:6d:df:00:81:ec:fe:05:
         c0:48:d0:91:9c:35:2f:24:d4:25:39:4c:f4:22:98:e7:05:e5:
         a0:e4:7b:03:a9:7c:30:39:b9:12:b6:b3:3e:1d:bf:59:fc:78:
         08:6d:7d:b1:dd:66:35:fb:95:f3:2b:69:bf:02:43:b1:31:16:
         7d:2f:17:57:b5:b9:c9:2b:c5:5a:d0:31:95:59:2d:70:a4:e3:
         ae:49:5f:db:8d:f0:40:1e:44:8d:57:03:b2:a9:96:c8:4c:d5:
         a8:b7:41:b6:90:98:e6:e2:3f:77:b6:42:ba:6a:80:bd:8b:7c:
         b2:15:8c:5a:6a:44:28:ff:94:f2:1f:e8:e6:02:2a:19:a0:71:
         c4:fe:4a:96:ff:cd:bc:46:04:c3:d2:4a:4e:32:3d:e3:43:13:
         27:d6:fa:57:e4:03:5c:78:71:ec:3e:15:88:15:87:1d:38:97:
         ec:76:e8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org