Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nvxQgRJP5Pt1JxoGCbQw5AkB2yr6VEcfKt6KKKU54XD/0/323830343a363562343a3a2f33322d313238203d3e20323639353039.roa
File:                     323830343a363562343a3a2f33322d313238203d3e20323639353039.roa (raw, json)
Hash identifier:          a5M88I5xVILRaC/5msFWJXA1Lo2oeGYZD7xTVDD0KaY=
Subject key identifier:   BC:1A:67:17:62:1F:D7:56:BE:62:8B:2C:F9:A4:74:0D:A1:AA:C2:BF
Certificate issuer:       /CN=A241D017C20F338021199DDB6542CF566A53BB03
Certificate serial:       4C59879E4F48BAE5B66CFE92478F247C89EC6083
Authority key identifier: A2:41:D0:17:C2:0F:33:80:21:19:9D:DB:65:42:CF:56:6A:53:BB:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A241D017C20F338021199DDB6542CF566A53BB03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nvxQgRJP5Pt1JxoGCbQw5AkB2yr6VEcfKt6KKKU54XD/0/323830343a363562343a3a2f33322d313238203d3e20323639353039.roa
Signing time:             Thu 10 Nov 2022 19:04:16 +0000
ROA not before:           Thu 10 Nov 2022 18:59:16 +0000
ROA not after:            Thu 09 Nov 2023 19:04:16 +0000
asID:                     269509
IP address blocks:        2804:65b4::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:59:87:9e:4f:48:ba:e5:b6:6c:fe:92:47:8f:24:7c:89:ec:60:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A241D017C20F338021199DDB6542CF566A53BB03
        Validity
            Not Before: Nov 10 18:59:16 2022 GMT
            Not After : Nov  9 19:04:16 2023 GMT
        Subject: CN=BC1A6717621FD756BE628B2CF9A4740DA1AAC2BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9a:17:84:b5:ea:37:6f:57:aa:f1:f8:3d:5a:
                    0d:a3:ce:5e:94:cf:d3:f7:35:11:8d:b8:44:54:f5:
                    4d:bc:ce:dd:7b:20:d8:cc:e5:f5:06:d6:92:59:1a:
                    43:6a:95:1c:2b:39:a0:b4:14:8d:9c:6f:be:25:9e:
                    7a:31:e1:fd:e5:f1:a2:70:95:49:d9:62:d4:32:a2:
                    0b:9b:e2:55:df:c7:64:1f:85:d6:cf:f6:33:3b:ac:
                    c3:6f:9a:ef:7d:db:90:73:fd:68:6c:fc:f2:f2:3f:
                    f1:ab:a4:5c:3a:d9:bf:85:43:97:ff:0e:7d:45:e5:
                    ba:25:18:b8:c4:d9:02:e8:e2:9d:e7:0e:f4:cd:a9:
                    8c:cb:2c:5c:5d:41:4c:2a:b4:44:02:00:cd:4b:c9:
                    30:78:d7:c4:54:5a:e7:3f:ea:11:a3:6a:38:75:86:
                    4a:9a:f7:50:7a:be:dc:bc:5c:14:53:04:98:0a:17:
                    4f:fc:0d:2c:15:05:82:2d:cf:ce:5f:cb:11:b5:59:
                    e0:bc:31:a1:7c:1e:7e:e0:77:e2:6a:7f:69:2d:20:
                    5d:64:8b:82:1d:ad:ee:f2:9e:9b:e8:69:ff:10:00:
                    78:8c:90:ad:2b:2a:ce:45:5e:72:54:f8:af:51:a0:
                    61:7e:e7:0e:3b:dc:83:17:9a:17:41:61:ad:a6:1b:
                    9b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1A:67:17:62:1F:D7:56:BE:62:8B:2C:F9:A4:74:0D:A1:AA:C2:BF
            X509v3 Authority Key Identifier:
                keyid:A2:41:D0:17:C2:0F:33:80:21:19:9D:DB:65:42:CF:56:6A:53:BB:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nvxQgRJP5Pt1JxoGCbQw5AkB2yr6VEcfKt6KKKU54XD/0/A241D017C20F338021199DDB6542CF566A53BB03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A241D017C20F338021199DDB6542CF566A53BB03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nvxQgRJP5Pt1JxoGCbQw5AkB2yr6VEcfKt6KKKU54XD/0/323830343a363562343a3a2f33322d313238203d3e20323639353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:bb:3c:57:fd:5a:c5:d8:53:92:fe:c6:92:12:18:e6:ba:fe:
         48:c2:db:90:98:fc:a4:98:7a:51:54:18:cf:c0:12:b0:b6:5a:
         bc:19:9d:1e:a3:c0:42:f9:40:8f:ff:b6:fc:31:fe:ec:27:ad:
         24:55:5a:34:94:1c:9d:ed:07:28:99:84:ef:d6:7f:61:1c:7d:
         c1:37:d2:2a:87:8f:c6:78:4c:d3:62:8a:82:8d:50:60:da:52:
         9e:91:ad:4d:57:4d:4f:1e:9e:b1:8d:86:99:86:4d:41:05:b1:
         58:e5:ce:f4:e3:47:ad:06:c9:1e:e8:1c:cd:53:df:c3:27:46:
         71:c6:dd:a3:60:47:55:83:19:62:4e:e9:c0:db:c0:b5:29:5b:
         7b:7d:f4:34:4b:d5:93:2e:e4:6a:09:11:39:bd:7d:b1:31:6e:
         cb:30:db:e2:a9:92:83:66:96:bd:e9:a7:c0:93:cc:90:cc:4d:
         16:ec:33:4d:9d:bc:22:36:e1:e4:34:89:f0:33:a6:86:45:09:
         52:71:b3:d3:ee:0d:28:55:53:7d:ad:6f:17:c5:81:d4:16:bc:
         78:8d:08:08:f7:74:37:7c:cc:62:69:10:6a:f1:9f:23:8b:aa:
         10:67:8b:fd:c8:fa:7f:6d:27:c9:bf:87:f3:1f:7a:21:0e:1a:
         81:c7:33:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org