Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/323830343a326465383a3230323a3a2f34382d3438203d3e20323635333131.roa
File:                     323830343a326465383a3230323a3a2f34382d3438203d3e20323635333131.roa (raw, json)
Hash identifier:          xxuNUYd+Vx8ZfEwjqXYOMIzu4uQfWdmMvT/oCeA4VoY=
Subject key identifier:   52:97:2C:A9:D3:CE:EA:D2:13:8D:92:5E:CC:09:75:33:B3:66:1C:EF
Certificate issuer:       /CN=14DAB675B77AC194533C86DBFBAF31C52FE203FB
Certificate serial:       445339714F9B7EDCB989213EBF8157479A14C76A
Authority key identifier: 14:DA:B6:75:B7:7A:C1:94:53:3C:86:DB:FB:AF:31:C5:2F:E2:03:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14DAB675B77AC194533C86DBFBAF31C52FE203FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/323830343a326465383a3230323a3a2f34382d3438203d3e20323635333131.roa
Signing time:             Wed 14 Feb 2024 11:43:02 +0000
ROA not before:           Wed 14 Feb 2024 11:38:02 +0000
ROA not after:            Wed 12 Feb 2025 11:43:02 +0000
asID:                     265311
IP address blocks:        2804:2de8:202::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:53:39:71:4f:9b:7e:dc:b9:89:21:3e:bf:81:57:47:9a:14:c7:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14DAB675B77AC194533C86DBFBAF31C52FE203FB
        Validity
            Not Before: Feb 14 11:38:02 2024 GMT
            Not After : Feb 12 11:43:02 2025 GMT
        Subject: CN=52972CA9D3CEEAD2138D925ECC097533B3661CEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:44:80:2c:98:e9:0d:59:c4:cd:6f:0b:e5:39:
                    1e:09:7b:ec:a1:e8:26:c4:85:7c:f8:6a:09:79:a6:
                    f2:17:cc:4e:1d:3c:56:e4:5b:78:6b:10:6f:fd:5f:
                    68:58:da:1e:aa:a4:9f:7a:29:59:d5:7e:e0:b1:10:
                    38:6e:6e:cf:85:b1:0a:15:77:51:83:34:6d:49:73:
                    d3:a1:8b:26:3f:26:7a:b6:8a:6a:55:1f:88:3c:7d:
                    a2:a0:86:6e:4b:56:b4:bb:8f:fb:7b:0c:4b:b1:d7:
                    cd:60:fa:18:f1:eb:3b:08:36:49:05:28:ed:b3:97:
                    34:d1:96:25:55:2d:55:c7:34:9f:65:45:b0:77:81:
                    40:8e:16:65:c4:03:dd:5c:e5:39:8f:96:38:fd:b2:
                    77:1e:0f:23:43:8d:73:f3:ec:51:16:13:5a:6a:00:
                    bc:6d:44:d6:ce:bd:38:93:c0:b6:c4:b4:85:98:7e:
                    ff:3f:26:99:83:3b:6b:cd:75:38:f4:cd:ff:5a:2a:
                    8e:3f:cf:5c:16:7c:18:0b:80:1e:7b:9d:68:47:b1:
                    37:4f:73:80:f7:a1:3e:c8:41:64:3f:bc:a0:f4:78:
                    af:a7:db:c6:d5:23:37:69:48:d8:e5:ac:d0:b4:cd:
                    9c:ed:25:3a:7b:fb:1f:2b:7b:8e:33:4c:e1:39:c4:
                    cf:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:97:2C:A9:D3:CE:EA:D2:13:8D:92:5E:CC:09:75:33:B3:66:1C:EF
            X509v3 Authority Key Identifier:
                keyid:14:DA:B6:75:B7:7A:C1:94:53:3C:86:DB:FB:AF:31:C5:2F:E2:03:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/14DAB675B77AC194533C86DBFBAF31C52FE203FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14DAB675B77AC194533C86DBFBAF31C52FE203FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/323830343a326465383a3230323a3a2f34382d3438203d3e20323635333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2de8:202::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:04:8a:bc:4a:ac:6a:ca:a2:2e:8a:a6:65:f4:e3:90:a8:26:
         97:74:ce:dd:a0:1b:10:31:a5:84:3a:1f:e8:21:e2:8c:b9:5f:
         7c:80:03:37:95:17:e5:20:06:3c:34:f4:66:44:eb:c0:47:12:
         66:c1:43:c3:eb:9f:e8:00:be:0f:b4:71:e0:41:c9:d8:e3:da:
         8a:f7:cf:da:9c:15:73:0b:dd:93:6c:f1:28:5f:23:da:e9:27:
         20:43:47:4f:c1:f6:9b:54:bf:82:93:13:6c:6c:5d:6f:6b:c8:
         34:47:3b:fa:f9:47:57:66:18:f6:de:45:0e:19:42:c9:9c:07:
         ac:56:0d:21:9c:6a:04:55:a7:d3:ff:ec:85:57:69:c1:1a:0c:
         67:0d:cd:92:5c:4c:3e:b7:cd:e3:70:63:6e:b4:1f:e7:54:9b:
         5a:f2:d3:b5:c4:89:62:38:20:b6:ba:2e:31:74:16:ba:56:00:
         6b:69:8a:d1:42:f5:a3:91:2d:2e:3e:97:2d:d4:da:1b:ea:2c:
         f1:c6:b1:ff:08:65:47:85:b9:8a:b3:c0:85:a3:af:5a:0e:27:
         94:1c:cb:74:0f:e3:20:2b:4d:15:81:96:e0:1b:c1:4d:7b:d4:
         d3:2b:e0:f6:4c:39:2d:d6:ce:7a:37:79:10:b1:d6:cf:6f:cb:
         d5:0d:1a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-ams.rpki-client.org