Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/323830343a3733383a3a2f33322d3332203d3e203533313533.roa
File:                     323830343a3733383a3a2f33322d3332203d3e203533313533.roa (raw, json)
Hash identifier:          ZzVJVV1wg4l2CGfmeZ0shOIRnr7D2eAsw9k3PIppD2Q=
Subject key identifier:   CF:9F:86:F9:8F:DE:C2:D5:EF:6F:42:0F:6A:F8:02:45:42:8F:E8:CD
Certificate issuer:       /CN=17A68DA7CE4974FE82917110852855A6036A6AAF
Certificate serial:       4930A1621D8E59F9865CF9AB03FD15C7F5001BA4
Authority key identifier: 17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/323830343a3733383a3a2f33322d3332203d3e203533313533.roa
Signing time:             Wed 15 Mar 2023 20:03:53 +0000
ROA not before:           Wed 15 Mar 2023 19:58:53 +0000
ROA not after:            Wed 13 Mar 2024 20:03:53 +0000
asID:                     53153
IP address blocks:        2804:738::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:30:a1:62:1d:8e:59:f9:86:5c:f9:ab:03:fd:15:c7:f5:00:1b:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17A68DA7CE4974FE82917110852855A6036A6AAF
        Validity
            Not Before: Mar 15 19:58:53 2023 GMT
            Not After : Mar 13 20:03:53 2024 GMT
        Subject: CN=CF9F86F98FDEC2D5EF6F420F6AF80245428FE8CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:42:b8:bd:75:f1:7c:c8:6b:6a:34:42:4a:69:
                    70:63:86:6e:d3:bd:74:e7:e9:40:e5:32:fd:f1:d8:
                    4f:a9:fa:83:a3:88:5b:4e:b7:f4:8b:2a:04:4a:e0:
                    04:5f:ec:64:d3:d6:b9:51:1f:6b:3f:d9:ce:d6:f9:
                    0f:5c:3f:74:33:6d:ea:20:a2:1f:d1:a0:6a:72:87:
                    c6:54:4d:cd:60:e2:e1:b1:02:08:fa:c5:c8:2b:00:
                    63:c2:72:0e:23:18:f6:89:f2:df:d4:4d:ed:88:e5:
                    4f:6a:8a:e4:37:28:56:51:fd:19:19:ff:43:e6:ee:
                    0f:50:35:1d:0e:09:98:32:8a:46:34:fd:0f:b1:ae:
                    9f:e3:ef:9d:23:6e:8b:74:1f:99:18:a8:a7:ee:2f:
                    8b:14:6f:b0:b9:00:9c:34:10:a9:9c:61:ae:80:c0:
                    a4:e2:c3:e7:8d:05:1a:ee:79:bf:27:aa:14:3b:f4:
                    24:b1:e4:53:d7:36:34:ff:54:4f:49:c0:89:e0:e0:
                    09:ea:94:38:35:ac:91:17:7b:3e:ce:51:3d:91:03:
                    23:dc:a4:f4:47:11:b9:07:5c:80:53:99:41:cc:37:
                    77:a0:6c:6d:d0:99:8f:15:74:ad:c9:ab:71:93:29:
                    18:8a:cb:8b:51:92:37:c5:c6:22:0e:6c:1a:af:46:
                    20:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9F:86:F9:8F:DE:C2:D5:EF:6F:42:0F:6A:F8:02:45:42:8F:E8:CD
            X509v3 Authority Key Identifier:
                keyid:17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/17A68DA7CE4974FE82917110852855A6036A6AAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/323830343a3733383a3a2f33322d3332203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:738::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:17:c3:ad:28:6e:f8:e9:4f:3f:6e:ff:48:93:44:41:6f:46:
         66:93:fb:dc:31:55:74:10:bf:55:6a:07:23:fb:2d:c5:00:22:
         21:e3:13:4e:cb:7f:0c:91:b7:20:3f:19:ba:e8:91:bd:23:82:
         ff:e6:03:f8:aa:bf:ff:c0:e8:f3:31:f7:52:2a:a5:e8:fb:25:
         50:d2:14:5c:ff:0b:b9:63:af:43:e9:17:c4:b2:8e:70:a1:eb:
         a6:6f:da:81:55:dd:60:c9:b0:c2:b5:5d:52:cf:67:81:ec:88:
         6b:b5:a1:3c:6d:88:64:6f:0e:25:33:3d:1a:7c:76:e9:32:a1:
         a8:e5:ac:eb:d4:b2:c1:d0:12:43:3f:40:3c:0a:fd:b6:fb:3d:
         7c:66:cb:1e:20:ce:08:ea:da:84:25:e6:de:6d:b0:07:bc:cc:
         df:d8:a6:85:4f:e3:be:60:bc:b2:b1:0b:31:51:1f:fc:9e:50:
         7b:1d:84:36:0b:60:ae:f3:06:4a:93:2a:21:ff:89:56:f4:b0:
         49:39:a6:3a:7a:f9:6d:88:5b:f6:d3:4b:49:6a:ed:d5:0e:d1:
         bd:b4:02:ec:fb:b4:26:29:19:e2:b3:65:5e:21:a3:f9:24:e3:
         09:aa:dd:fb:a8:ef:75:41:f1:b2:79:3e:43:73:b9:13:59:49:
         8a:cd:1e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org