Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2xpVYk4YpnqjBjnANNybdtFBvEk5LfXqKTSRDuNX64p7/0/323830343a323962633a3a2f33322d3334203d3e20323634303331.roa
File:                     323830343a323962633a3a2f33322d3334203d3e20323634303331.roa (raw, json)
Hash identifier:          gjs+d3CnMFfTnC6b8MVSez0eV3ppUcKY/soJACltrxQ=
Subject key identifier:   33:A7:C0:62:87:C5:D9:47:97:84:CC:52:53:68:FE:35:48:25:1D:69
Certificate issuer:       /CN=59A5495B65ACE881D3EE118313D2BA4822F2F3E4
Certificate serial:       456AEF8B62D2515B7EA874B246EA0A86C4FD1163
Authority key identifier: 59:A5:49:5B:65:AC:E8:81:D3:EE:11:83:13:D2:BA:48:22:F2:F3:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59A5495B65ACE881D3EE118313D2BA4822F2F3E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2xpVYk4YpnqjBjnANNybdtFBvEk5LfXqKTSRDuNX64p7/0/323830343a323962633a3a2f33322d3334203d3e20323634303331.roa
Signing time:             Wed 13 Sep 2023 12:00:00 +0000
ROA not before:           Wed 13 Sep 2023 11:55:00 +0000
ROA not after:            Wed 11 Sep 2024 12:00:00 +0000
asID:                     264031
IP address blocks:        2804:29bc::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:6a:ef:8b:62:d2:51:5b:7e:a8:74:b2:46:ea:0a:86:c4:fd:11:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59A5495B65ACE881D3EE118313D2BA4822F2F3E4
        Validity
            Not Before: Sep 13 11:55:00 2023 GMT
            Not After : Sep 11 12:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:07:5d:c4:c2:d2:09:df:e0:18:f9:0f:82:d5:
                    31:b5:2f:a9:f8:d6:34:04:ad:f8:5b:7e:8b:66:d9:
                    bc:07:8c:a8:30:5a:8d:f1:b1:2c:a9:29:a5:fc:95:
                    ba:c7:84:c5:e6:b8:99:53:52:db:e5:5d:0f:fc:7b:
                    89:69:6b:9e:ec:fc:74:7d:5b:35:91:30:97:ec:00:
                    b2:4f:d3:1a:5c:78:e0:35:8d:96:c3:f6:fb:dc:8e:
                    41:cd:77:c4:db:ef:24:ff:98:ba:13:72:a3:e3:7b:
                    f6:fe:6b:03:0f:17:6f:b2:ba:d4:30:aa:18:a1:9e:
                    70:87:c3:83:72:3e:68:91:1f:1a:a7:dd:41:a8:78:
                    ef:02:b8:52:93:ed:c3:f2:be:03:ad:33:04:d5:8d:
                    00:00:ad:9c:17:48:b1:78:df:bc:26:8f:3c:36:7b:
                    ef:3c:d3:df:5f:68:17:9b:ce:55:d5:4e:eb:2a:30:
                    e7:05:07:4d:56:06:e3:de:2b:2a:78:a1:e4:1c:e9:
                    d3:ea:45:4b:a4:ff:a2:43:d3:4c:36:af:5b:af:c5:
                    22:1d:1f:47:5e:f2:60:30:07:f4:b7:67:3c:cd:c8:
                    81:13:40:97:94:54:bf:86:ff:e7:59:8a:4d:3c:38:
                    98:cd:d3:30:9e:8b:fe:5c:49:cd:a6:2d:38:37:9c:
                    ae:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A7:C0:62:87:C5:D9:47:97:84:CC:52:53:68:FE:35:48:25:1D:69
            X509v3 Authority Key Identifier:
                keyid:59:A5:49:5B:65:AC:E8:81:D3:EE:11:83:13:D2:BA:48:22:F2:F3:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2xpVYk4YpnqjBjnANNybdtFBvEk5LfXqKTSRDuNX64p7/0/59A5495B65ACE881D3EE118313D2BA4822F2F3E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59A5495B65ACE881D3EE118313D2BA4822F2F3E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2xpVYk4YpnqjBjnANNybdtFBvEk5LfXqKTSRDuNX64p7/0/323830343a323962633a3a2f33322d3334203d3e20323634303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:29bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:2f:55:94:3a:43:62:66:af:1c:2a:42:c4:5d:e2:fa:70:7c:
         df:81:c5:22:ff:ab:5c:c4:b6:59:21:15:c1:2e:43:a9:c6:27:
         f5:21:85:37:f3:fe:65:a9:a2:f8:95:07:06:91:11:35:3b:ed:
         5b:7c:27:39:4b:0b:65:77:f7:05:41:54:74:04:da:74:52:b5:
         4b:da:8d:40:f5:52:cb:6e:56:2d:ac:29:76:31:4b:ef:bf:4d:
         7a:81:96:c6:af:4d:80:58:4d:11:7d:a4:4e:a8:70:9d:ce:af:
         13:ef:e7:94:99:ce:38:90:04:c1:cc:c7:38:50:56:2c:53:84:
         44:77:eb:70:60:82:fd:a2:2e:d1:9a:52:49:ad:f9:f9:30:da:
         46:0e:82:48:b9:5e:a2:e4:f8:6b:a3:cb:63:d7:a4:20:08:bf:
         18:fc:1c:2b:62:8c:d5:83:bf:6a:1e:73:df:6a:8c:09:4f:42:
         a2:67:69:9e:14:5e:c8:e2:68:df:f4:09:30:89:ec:2d:98:25:
         2c:40:3f:36:94:bf:72:f5:fb:d7:1a:9d:ae:c7:4f:a5:15:ea:
         06:b1:84:5c:7e:98:41:3c:64:11:d2:ad:fe:da:05:9d:08:c5:
         34:91:85:75:d1:ab:c6:bc:24:2c:67:2f:d5:45:43:a1:76:cf:
         54:2d:ed:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org