Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/0/323830343a356630303a666330303a3a2f33382d3338203d3e20323639303730.roa
File:                     323830343a356630303a666330303a3a2f33382d3338203d3e20323639303730.roa (raw, json)
Hash identifier:          lnuCLJ2WU6E0uQyZsHq1uvFEEXTmdku0ZdD+EFWy/fM=
Subject key identifier:   D2:57:60:83:B1:06:2D:D5:58:3A:55:51:91:DC:09:A8:37:CB:E2:39
Certificate issuer:       /CN=502248B719FD13C9281385732A8072536E8D0577
Certificate serial:       2448197AFB270D66893AFEFF38CA9AF513FD24A7
Authority key identifier: 50:22:48:B7:19:FD:13:C9:28:13:85:73:2A:80:72:53:6E:8D:05:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/502248B719FD13C9281385732A8072536E8D0577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/0/323830343a356630303a666330303a3a2f33382d3338203d3e20323639303730.roa
Signing time:             Fri 21 Jul 2023 11:10:56 +0000
ROA not before:           Fri 21 Jul 2023 11:05:56 +0000
ROA not after:            Fri 19 Jul 2024 11:10:56 +0000
asID:                     269070
IP address blocks:        2804:5f00:fc00::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:48:19:7a:fb:27:0d:66:89:3a:fe:ff:38:ca:9a:f5:13:fd:24:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502248B719FD13C9281385732A8072536E8D0577
        Validity
            Not Before: Jul 21 11:05:56 2023 GMT
            Not After : Jul 19 11:10:56 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:65:fc:50:c2:62:a9:9b:31:e3:e5:8a:fe:b1:
                    ea:ce:10:e3:d5:b3:b4:43:9d:db:09:c0:c2:43:72:
                    77:fa:f7:ee:bc:f9:80:d3:11:5f:63:2b:95:ed:39:
                    03:2b:2e:98:e6:d7:60:e2:1a:5b:4e:4a:f0:cc:87:
                    fd:7a:f4:20:08:75:4c:dd:dd:40:62:41:7a:68:81:
                    33:2a:b0:51:f3:53:f9:56:4d:67:59:1e:94:6d:00:
                    a1:26:1d:65:1d:4a:30:75:63:22:02:44:a7:0d:cd:
                    15:87:81:24:86:23:db:cd:23:fc:57:a0:83:c5:be:
                    04:ff:e5:ff:54:8a:75:63:6d:5c:4e:8b:34:66:a5:
                    f8:5a:f9:ba:0f:29:f9:1a:96:fc:e5:48:cc:42:f1:
                    63:7e:56:12:14:6c:03:56:8d:9a:94:01:d7:0d:58:
                    f6:15:b8:28:01:8f:7c:02:a2:df:8c:44:a2:6d:24:
                    55:3d:92:5d:6f:3f:fe:67:24:f1:3f:44:8a:5b:c0:
                    74:28:1d:81:7d:6e:12:38:45:8f:2d:36:3e:1a:f4:
                    09:6a:1c:25:33:1f:18:1f:60:b3:1a:a0:ef:db:65:
                    99:35:f0:f6:96:d1:83:32:b5:ff:9f:58:4a:da:b1:
                    c4:74:27:b3:79:dc:bc:2d:92:f6:9c:63:e8:70:53:
                    24:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:57:60:83:B1:06:2D:D5:58:3A:55:51:91:DC:09:A8:37:CB:E2:39
            X509v3 Authority Key Identifier:
                keyid:50:22:48:B7:19:FD:13:C9:28:13:85:73:2A:80:72:53:6E:8D:05:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/0/502248B719FD13C9281385732A8072536E8D0577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/502248B719FD13C9281385732A8072536E8D0577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/0/323830343a356630303a666330303a3a2f33382d3338203d3e20323639303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f00:fc00::/38

    Signature Algorithm: sha256WithRSAEncryption
         16:79:44:81:be:71:bb:de:49:a1:fd:df:5e:dc:4e:2e:e8:8e:
         c1:f7:77:e2:1a:c4:fc:d7:12:16:d8:31:38:f0:01:69:52:f2:
         1b:01:de:e2:de:77:a4:aa:f6:e1:fa:6c:d1:48:11:f4:83:da:
         ec:65:3e:89:ad:c8:ee:f9:f1:39:c9:10:e7:5d:3a:2d:4b:23:
         34:a6:fd:c1:e0:8b:58:d4:25:03:05:3b:69:95:11:5a:d3:93:
         0e:89:08:a3:58:fd:d1:75:43:93:d4:cb:1f:9d:27:92:77:b1:
         83:d7:f7:fa:92:08:fd:78:70:72:6c:bc:2a:c3:a0:ea:ad:68:
         27:fc:15:5d:b3:ea:ad:61:1a:06:4c:8b:6f:fe:5e:ac:4f:35:
         19:0f:93:ac:c7:7a:a4:a7:67:ac:94:56:30:c4:2f:3d:f2:c2:
         86:26:37:f7:02:04:be:b6:1b:bd:da:fb:44:aa:db:e3:e3:ec:
         2e:5e:54:72:64:05:82:5f:d3:fe:4a:67:78:31:a8:b4:22:78:
         5a:3d:29:90:f1:d6:a7:6d:93:85:ed:90:40:69:ac:12:68:6d:
         db:f6:ee:ba:83:02:55:ff:3a:0f:c9:aa:5a:f7:20:a2:b1:e5:
         2e:06:a1:b2:3f:0a:d0:e0:f7:65:af:91:60:ed:42:fd:48:a5:
         ca:98:72:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-ams.rpki-client.org