Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/323830343a35343a316330303a3a2f34302d3430203d3e203238323230.roa
File:                     323830343a35343a316330303a3a2f34302d3430203d3e203238323230.roa (raw, json)
Hash identifier:          Zm2DX2ABGusSAzOWG6gxe50ImjoeoN2zFxkbCJacpYw=
Subject key identifier:   55:4E:40:98:00:68:F9:81:B8:89:B3:E7:84:A9:09:BD:7D:DF:F7:5E
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       31FE0B48E8561D958F3783BE716C13EC18DAB35A
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/323830343a35343a316330303a3a2f34302d3430203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:26 +0000
ROA not before:           Tue 12 Mar 2024 19:46:26 +0000
ROA not after:            Tue 11 Mar 2025 19:51:26 +0000
asID:                     28220
IP address blocks:        2804:54:1c00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:fe:0b:48:e8:56:1d:95:8f:37:83:be:71:6c:13:ec:18:da:b3:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:26 2024 GMT
            Not After : Mar 11 19:51:26 2025 GMT
        Subject: CN=554E40980068F981B889B3E784A909BD7DDFF75E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7c:c0:d0:56:6b:ce:32:36:f3:b7:de:f5:05:
                    e6:c3:f4:8a:85:fc:30:9c:df:ee:4d:b0:82:4c:8d:
                    30:af:3b:1a:93:e3:6d:3d:03:46:3b:96:9b:66:50:
                    09:1a:0c:1d:a7:bc:18:c2:70:2e:5d:2b:2d:88:0c:
                    fe:3d:b3:c9:be:26:82:9e:42:b7:83:89:e0:51:9a:
                    74:03:59:8d:c8:42:dd:ec:c7:2a:c5:6d:2d:1d:5e:
                    23:96:cc:d8:f7:ce:70:f4:00:cf:a3:b4:40:43:83:
                    c2:2d:ec:7b:d3:e2:d3:c6:dc:db:f9:ff:d2:1d:c3:
                    83:b8:70:d1:53:ca:b0:96:4d:e7:0a:7c:58:9e:05:
                    22:3b:f1:a2:1c:ad:8e:5a:a5:0e:35:4a:4c:f6:19:
                    81:10:7a:83:a9:f0:8a:da:69:9c:ac:1d:b6:0d:7e:
                    5a:28:57:12:75:78:06:fd:3c:4f:98:df:02:52:90:
                    b2:d8:e2:59:a8:ee:57:1e:c2:95:df:9e:67:28:e7:
                    09:83:aa:5c:98:0f:37:b2:1c:85:75:67:bd:18:0a:
                    7a:a2:ef:73:ab:6b:0e:d3:e2:2a:c8:35:15:ea:02:
                    aa:e1:9d:64:78:c6:3c:87:9c:2f:62:f7:df:ed:bf:
                    1b:6b:35:2d:85:18:d7:79:47:de:9c:68:83:0f:0c:
                    e8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4E:40:98:00:68:F9:81:B8:89:B3:E7:84:A9:09:BD:7D:DF:F7:5E
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/323830343a35343a316330303a3a2f34302d3430203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54:1c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0c:ae:21:85:ab:96:3f:e5:c7:ba:7e:72:9a:15:fa:f3:81:6c:
         74:11:79:85:f2:7b:0f:23:65:51:46:1b:35:30:0d:71:70:45:
         9d:6b:ae:e4:7e:16:d8:9c:99:ce:ab:3b:dc:fe:fa:72:f2:b8:
         8e:a7:2f:a4:15:cd:1e:c4:1e:19:37:6b:e9:30:55:51:c6:a5:
         6b:c6:dd:ce:b9:a7:30:34:6a:a3:93:16:7f:b3:07:ce:1e:13:
         cb:73:4a:bf:85:af:61:ab:aa:84:e1:45:ba:59:48:bf:0f:8f:
         b3:0c:36:0d:c8:38:68:d2:b5:9d:3a:2e:4a:19:7a:f6:33:cb:
         22:62:cc:34:7d:ba:21:f6:b7:5e:df:11:93:29:36:18:1a:49:
         92:4a:43:d4:e6:e3:88:f8:7e:a1:af:a7:ba:8a:34:f3:22:2f:
         39:84:52:f8:e6:57:37:f3:26:f6:14:eb:00:a4:fb:04:c2:2d:
         f0:3a:0e:06:aa:db:e9:8a:3f:5c:1b:1f:06:6d:85:25:a1:1c:
         a9:52:59:3d:18:e2:fb:f1:22:c7:4a:59:33:65:26:70:c4:c4:
         49:28:c7:a3:fb:61:66:fd:b8:e3:34:d8:71:f9:42:c1:6d:87:
         fe:18:3d:3b:b4:fe:6c:6b:b8:3b:73:e1:5b:a3:8c:23:ef:5f:
         98:4b:8a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org