Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3H2oaUkSYJ6y2aZYr8g3S5bE7LsQbDpQeRFd2XFYMgdg/0/323830343a6466633a3a2f33322d313238203d3e20323633303432.roa
File:                     323830343a6466633a3a2f33322d313238203d3e20323633303432.roa (raw, json)
Hash identifier:          uD4YOZU9Ip0emV7qR+OAtPRsYUJJ43bHIq7qjwBdkxQ=
Subject key identifier:   36:5C:CE:15:4B:10:28:29:AE:E3:A7:7C:00:AB:A5:96:62:63:AB:62
Certificate issuer:       /CN=90524BFE16E4163C4B4EB6424540F3989155006C
Certificate serial:       4758839F85CF868D97008430E890440CFEC155B8
Authority key identifier: 90:52:4B:FE:16:E4:16:3C:4B:4E:B6:42:45:40:F3:98:91:55:00:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90524BFE16E4163C4B4EB6424540F3989155006C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3H2oaUkSYJ6y2aZYr8g3S5bE7LsQbDpQeRFd2XFYMgdg/0/323830343a6466633a3a2f33322d313238203d3e20323633303432.roa
Signing time:             Mon 03 Apr 2023 19:16:08 +0000
ROA not before:           Mon 03 Apr 2023 19:11:08 +0000
ROA not after:            Mon 01 Apr 2024 19:16:08 +0000
asID:                     263042
IP address blocks:        2804:dfc::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:58:83:9f:85:cf:86:8d:97:00:84:30:e8:90:44:0c:fe:c1:55:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90524BFE16E4163C4B4EB6424540F3989155006C
        Validity
            Not Before: Apr  3 19:11:08 2023 GMT
            Not After : Apr  1 19:16:08 2024 GMT
        Subject: CN=365CCE154B102829AEE3A77C00ABA5966263AB62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fb:dd:ec:6a:9a:78:22:ac:07:c0:9c:bf:73:
                    3a:d6:96:20:88:1c:3c:9c:da:e9:92:61:61:ff:76:
                    43:ae:9e:c2:0f:df:51:f6:30:f1:71:b2:c2:ef:c3:
                    f7:e0:98:48:2e:39:a3:4d:65:ac:f1:84:40:e8:f7:
                    81:8b:bc:70:1c:a9:ba:89:12:ed:5e:c9:a1:5c:3e:
                    76:46:43:f7:63:99:3c:7e:54:b0:b2:a4:69:aa:83:
                    7b:69:a1:07:18:bd:2c:5e:93:8b:7e:c3:d6:7e:73:
                    31:91:9f:6a:35:ca:f4:96:49:ba:bc:30:7e:31:ec:
                    c8:9a:9e:8b:95:77:a8:10:8e:d2:3b:ce:ff:b1:dc:
                    ae:fd:9a:2c:30:c5:08:3e:30:d4:53:68:da:5b:7b:
                    69:7e:bc:5a:15:21:a4:ea:c1:65:59:ae:1e:f4:ca:
                    8d:aa:3c:06:bc:9b:67:9e:b0:91:2e:5b:1d:53:f9:
                    d7:48:dc:97:06:01:13:66:7c:6b:f0:46:c4:46:00:
                    40:6e:63:ce:73:f6:5b:a5:87:f3:c0:0b:9f:7d:da:
                    1f:53:e4:a7:ac:c2:ab:6d:80:c6:48:cb:70:50:58:
                    55:51:1c:a1:87:ec:52:b1:5b:b9:1d:78:42:3b:7b:
                    57:b6:f3:65:87:5a:ec:c4:a5:ae:4e:f5:60:e4:be:
                    72:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5C:CE:15:4B:10:28:29:AE:E3:A7:7C:00:AB:A5:96:62:63:AB:62
            X509v3 Authority Key Identifier:
                keyid:90:52:4B:FE:16:E4:16:3C:4B:4E:B6:42:45:40:F3:98:91:55:00:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3H2oaUkSYJ6y2aZYr8g3S5bE7LsQbDpQeRFd2XFYMgdg/0/90524BFE16E4163C4B4EB6424540F3989155006C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90524BFE16E4163C4B4EB6424540F3989155006C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3H2oaUkSYJ6y2aZYr8g3S5bE7LsQbDpQeRFd2XFYMgdg/0/323830343a6466633a3a2f33322d313238203d3e20323633303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dfc::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:36:29:65:74:a2:d2:44:04:ea:63:c4:5d:09:04:15:46:f2:
         7b:5b:e7:48:ad:fa:cb:8b:d0:90:72:4f:83:6c:6d:f4:ea:22:
         23:6e:04:6c:f4:87:9d:1b:6c:57:46:b5:b1:25:50:bc:39:75:
         69:91:58:3a:d8:31:3a:ba:10:44:d6:3e:23:5f:59:58:3e:30:
         0f:b4:9e:f6:15:8b:9d:a3:c9:77:e8:0a:4d:bb:3f:64:cf:91:
         34:aa:36:d3:34:a0:3f:b2:a2:40:a9:0c:e1:58:be:0c:aa:23:
         1d:54:8f:65:52:95:ef:24:9a:55:6a:8f:c2:16:a9:c0:66:79:
         6c:43:4f:5e:90:fe:e2:12:13:74:f0:3f:3b:f9:5e:61:82:a5:
         ab:a9:aa:6c:ff:3e:0c:4e:14:b5:8e:f8:30:1d:27:99:e2:df:
         d8:ed:7f:d7:16:4c:55:b7:ff:13:cf:6a:f6:b3:a8:47:93:e7:
         b4:0a:90:82:d4:9a:5e:74:30:b5:37:18:0d:0b:6a:3c:74:a2:
         36:b4:35:49:ff:c0:fd:b3:a1:1f:cd:97:b1:64:99:a6:ba:19:
         52:13:80:8a:69:24:3d:cc:86:1e:f6:91:8f:ee:e7:ec:b4:19:
         f2:1d:e5:e0:88:cb:c5:de:c5:2a:01:79:d6:cd:86:b7:63:80:
         0e:c6:4e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org