Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/1/323830343a333933633a3a2f3332203d3e20323636303230.roa
File:                     323830343a333933633a3a2f3332203d3e20323636303230.roa (raw, json)
Hash identifier:          DQd3pkfoKYcH9DjU8O1PNeXjTpr/bMfUXUBi2Vc9Xd8=
Subject key identifier:   FC:80:FD:5C:7F:64:F7:05:51:BE:1E:95:88:3E:F3:72:50:74:57:D9
Certificate issuer:       /CN=5149D310606046FDF83A78E8E9D89374FD1D0EF3
Certificate serial:       1CE9F0E6A5FBED829DA6A6BB55982EB6A6F35A73
Authority key identifier: 51:49:D3:10:60:60:46:FD:F8:3A:78:E8:E9:D8:93:74:FD:1D:0E:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5149D310606046FDF83A78E8E9D89374FD1D0EF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/1/323830343a333933633a3a2f3332203d3e20323636303230.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     266020
IP address blocks:        2804:393c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e9:f0:e6:a5:fb:ed:82:9d:a6:a6:bb:55:98:2e:b6:a6:f3:5a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5149D310606046FDF83A78E8E9D89374FD1D0EF3
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:26:ef:bb:e9:90:72:ad:c9:a2:ef:dd:14:76:
                    33:61:f6:64:60:6d:e5:66:57:9d:8e:f9:4f:de:d1:
                    59:cb:3b:f5:06:8a:6b:39:a2:21:70:86:38:38:b1:
                    fb:ef:e5:20:14:25:1e:a0:c0:5d:1e:a8:fd:e8:54:
                    88:90:e2:ba:70:ec:08:3e:5a:e7:4b:09:f4:93:a6:
                    4c:da:e1:e8:da:75:44:3a:6a:6b:8f:ea:69:bd:43:
                    b3:9b:69:ee:bd:10:da:f9:6f:0f:5c:80:8c:d4:86:
                    1d:6a:6e:54:7b:cf:f1:1c:c9:84:73:7a:0a:c5:61:
                    a9:a0:2a:51:7e:21:a8:dd:98:10:d9:57:fa:fe:12:
                    46:46:bd:34:0d:46:e0:5b:6c:05:85:89:e6:ea:11:
                    f3:20:56:04:46:ab:ac:8d:5a:b8:1e:a2:7e:36:ca:
                    62:2a:06:6f:c5:c2:71:d7:84:8c:2b:bc:bb:d8:a2:
                    27:65:fc:bd:c6:70:65:6e:bd:96:a1:ac:d0:ec:64:
                    e3:6e:45:53:02:24:ad:f3:ce:7d:08:80:c7:ce:54:
                    57:4e:9a:fc:14:75:e3:33:50:ba:8d:00:63:b9:67:
                    5a:27:a6:3d:2e:bb:96:ea:3f:0d:de:58:9b:6c:2f:
                    4d:d6:43:3d:ba:45:e0:1b:17:8e:ef:79:f6:1a:2c:
                    9a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:80:FD:5C:7F:64:F7:05:51:BE:1E:95:88:3E:F3:72:50:74:57:D9
            X509v3 Authority Key Identifier:
                keyid:51:49:D3:10:60:60:46:FD:F8:3A:78:E8:E9:D8:93:74:FD:1D:0E:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/1/5149D310606046FDF83A78E8E9D89374FD1D0EF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5149D310606046FDF83A78E8E9D89374FD1D0EF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/1/323830343a333933633a3a2f3332203d3e20323636303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:393c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:61:1c:c8:f3:b6:34:9b:59:a6:89:d5:ef:92:a7:6d:64:a6:
         bd:0d:39:4f:0c:80:f2:4c:27:77:f9:2b:f7:d4:1e:15:29:59:
         2e:5b:3f:3d:4b:2b:e8:31:2a:b6:cf:f0:8c:1a:93:a9:7d:9d:
         ce:a4:c7:59:4b:29:76:13:33:5d:a7:67:4e:65:c4:45:07:a1:
         e3:93:c3:88:e5:f7:ee:e1:64:0d:54:41:10:59:96:59:7f:28:
         7b:87:06:c7:25:c2:08:5c:50:f6:63:d6:9f:53:5a:6b:49:8c:
         98:f6:9b:27:da:c7:0e:3a:10:dc:0f:8c:7a:91:02:82:da:46:
         57:e7:39:9d:42:e7:73:6e:90:b0:75:eb:52:59:14:fe:6e:77:
         c3:8b:aa:0c:65:65:83:b8:c7:e5:73:c9:51:72:b7:3a:eb:cb:
         de:76:1e:96:6a:7c:0e:b3:5b:2a:9c:46:00:28:4d:d9:cd:5e:
         ac:42:a6:dc:6b:f4:49:7c:ca:3f:91:8c:24:0f:10:43:e6:d8:
         5f:77:a6:1a:43:e0:03:1f:0b:c8:7d:25:3b:5f:bb:ce:eb:3c:
         69:f4:75:2c:ba:c4:27:35:74:de:c8:77:ce:33:13:88:68:b6:
         dd:1a:49:99:a2:c6:e8:16:a6:23:af:e4:49:5d:d7:ec:7f:f5:
         24:d8:6a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org