Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/0/323830343a333530343a666630303a3a2f34302d3430203d3e20323635343935.roa
File:                     323830343a333530343a666630303a3a2f34302d3430203d3e20323635343935.roa (raw, json)
Hash identifier:          0MHum/JHd+5kyA/WIftw3QbeT909hOVNVDuL4JbyCP8=
Subject key identifier:   94:6A:2E:B7:9D:B0:2D:EF:DD:94:AD:96:B7:79:6C:D2:71:D7:83:C6
Certificate issuer:       /CN=ACAB551AAA41D00C17FEB2D03995311064730A91
Certificate serial:       6599701B1751EBC33901297A714434C604D9092C
Authority key identifier: AC:AB:55:1A:AA:41:D0:0C:17:FE:B2:D0:39:95:31:10:64:73:0A:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACAB551AAA41D00C17FEB2D03995311064730A91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/0/323830343a333530343a666630303a3a2f34302d3430203d3e20323635343935.roa
Signing time:             Wed 14 Feb 2024 20:14:52 +0000
ROA not before:           Wed 14 Feb 2024 20:09:52 +0000
ROA not after:            Wed 12 Feb 2025 20:14:52 +0000
asID:                     265495
IP address blocks:        2804:3504:ff00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:99:70:1b:17:51:eb:c3:39:01:29:7a:71:44:34:c6:04:d9:09:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACAB551AAA41D00C17FEB2D03995311064730A91
        Validity
            Not Before: Feb 14 20:09:52 2024 GMT
            Not After : Feb 12 20:14:52 2025 GMT
        Subject: CN=946A2EB79DB02DEFDD94AD96B7796CD271D783C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2b:5d:a1:d0:a3:a3:1b:fb:88:6c:20:e1:7f:
                    2e:c7:70:57:96:7f:e2:d3:f4:c2:dc:90:89:99:5e:
                    3c:fd:4e:c9:84:4d:b7:65:c6:c3:54:aa:69:7e:9e:
                    01:82:a5:cc:f7:92:ec:dd:e5:15:58:6c:c9:c5:d4:
                    b5:4d:15:eb:bf:ab:44:e5:cd:15:08:3a:ab:bc:e8:
                    3a:2c:d2:92:12:07:3a:a2:7a:34:52:fb:39:6b:89:
                    96:12:fa:ef:85:b9:54:f2:a0:7e:0e:e0:72:5b:4b:
                    0a:0f:97:d9:ab:ca:11:17:db:a6:68:10:de:4c:b2:
                    53:b3:6a:58:d4:40:35:7d:62:e7:70:2d:09:82:a9:
                    5c:1f:78:c8:54:a4:7a:35:87:39:32:fc:20:5c:0f:
                    4f:c2:d9:dd:9e:e1:47:f8:f4:59:1a:ef:45:29:e0:
                    c1:42:e8:f9:7f:5f:b6:4e:82:43:48:ea:44:f8:2b:
                    84:5f:a0:6f:68:0e:b7:29:dc:31:d3:8f:68:e8:00:
                    e7:ea:3b:8d:36:ac:c9:61:18:d1:4c:46:9f:e5:df:
                    a0:76:1f:b9:7f:21:f3:cb:2c:90:f6:32:41:05:06:
                    e2:35:40:c6:6d:d8:26:74:ec:9c:91:25:8b:a2:59:
                    e4:80:67:4e:8f:08:0b:2c:25:08:97:73:b1:11:c0:
                    0e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6A:2E:B7:9D:B0:2D:EF:DD:94:AD:96:B7:79:6C:D2:71:D7:83:C6
            X509v3 Authority Key Identifier:
                keyid:AC:AB:55:1A:AA:41:D0:0C:17:FE:B2:D0:39:95:31:10:64:73:0A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/0/ACAB551AAA41D00C17FEB2D03995311064730A91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACAB551AAA41D00C17FEB2D03995311064730A91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/0/323830343a333530343a666630303a3a2f34302d3430203d3e20323635343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3504:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:23:d8:19:84:0b:8b:c2:60:af:06:96:cf:dd:24:bb:05:9d:
         52:18:b4:2d:81:33:0a:27:59:90:d9:c0:7e:15:b8:c9:49:d8:
         a5:2b:d3:a5:94:53:af:6b:f4:23:ad:4f:51:ca:93:af:fc:2c:
         cb:be:c4:85:62:6d:4a:08:fd:48:0b:d4:1e:c1:32:de:a6:36:
         81:5c:6d:f9:d1:8f:36:28:62:db:50:79:a8:52:7f:2d:b6:9f:
         0d:38:77:b1:93:f4:9a:58:19:df:7c:6b:18:56:51:5c:37:e1:
         90:63:b1:fd:14:c5:b6:b8:9f:bb:2b:62:ca:38:b7:02:39:02:
         bb:96:98:15:69:4e:83:91:fa:c9:9a:21:fc:23:c7:31:26:82:
         e2:9a:04:0c:82:90:43:75:8d:ed:f5:75:49:ad:32:9b:12:84:
         db:88:ff:be:82:91:f9:61:85:f2:4d:fe:3d:a3:03:71:16:38:
         08:58:f1:12:5d:b1:84:c9:19:cc:e7:73:dd:54:db:2f:2e:63:
         62:8f:a8:93:b3:45:ec:57:2f:be:d9:62:aa:3c:f8:9a:92:6f:
         04:95:19:3a:1b:e7:98:bd:0b:d4:82:e0:6d:6d:2c:0a:81:4e:
         8f:ae:23:59:82:91:1b:12:d0:0d:ab:68:19:ff:cb:2a:26:fc:
         2e:2f:dd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org