Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/323830343a386263633a3a2f33322d3438203d3e20323733373630.roa
File:                     323830343a386263633a3a2f33322d3438203d3e20323733373630.roa (raw, json)
Hash identifier:          alXz5tLfS06nh1pQ8J0DkNFWEr6rel2CZ0QkxqJIfd4=
Subject key identifier:   DB:BD:A3:C2:B8:69:80:E5:89:02:E7:AD:99:28:8C:0E:E9:1F:F0:9D
Certificate issuer:       /CN=A5889F35659E742837BEE520B02DAF77462D8041
Certificate serial:       4B446A5EE28379DCEBDA9400B3C8FCA6F6C39037
Authority key identifier: A5:88:9F:35:65:9E:74:28:37:BE:E5:20:B0:2D:AF:77:46:2D:80:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5889F35659E742837BEE520B02DAF77462D8041.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/323830343a386263633a3a2f33322d3438203d3e20323733373630.roa
Signing time:             Mon 18 Sep 2023 12:54:17 +0000
ROA not before:           Mon 18 Sep 2023 12:49:17 +0000
ROA not after:            Mon 16 Sep 2024 12:54:17 +0000
asID:                     273760
IP address blocks:        2804:8bcc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:44:6a:5e:e2:83:79:dc:eb:da:94:00:b3:c8:fc:a6:f6:c3:90:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5889F35659E742837BEE520B02DAF77462D8041
        Validity
            Not Before: Sep 18 12:49:17 2023 GMT
            Not After : Sep 16 12:54:17 2024 GMT
        Subject: CN=DBBDA3C2B86980E58902E7AD99288C0EE91FF09D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4b:b2:57:71:f1:a7:22:bd:d8:18:f4:14:0e:
                    1c:7d:2d:2a:05:af:f4:3f:fc:83:7e:57:5e:3f:b0:
                    99:75:4a:50:6f:6e:60:54:85:fb:de:5b:ed:20:96:
                    3e:39:8a:a3:c0:7c:be:2e:41:71:8b:af:0e:38:e3:
                    17:3b:40:62:ff:9b:af:c8:22:ae:5f:4d:40:b5:e8:
                    88:05:13:36:9a:a8:6c:c9:32:94:b0:d1:36:4c:47:
                    0e:2c:a0:a4:06:71:c9:0c:92:74:39:d1:29:69:ee:
                    9b:f9:fd:0c:89:85:0f:31:f3:13:2a:cb:79:d5:9b:
                    89:9b:a5:4d:55:7c:a4:6f:fe:e0:50:fd:c7:5c:b2:
                    21:cf:48:0f:88:50:7a:10:bc:85:c2:14:1e:22:b9:
                    bd:3d:e7:2d:20:9f:9a:81:8f:16:45:19:f6:97:4e:
                    55:52:69:84:db:bc:5c:ad:19:fd:6b:75:08:f6:54:
                    f5:4a:20:2a:97:98:d2:94:b5:39:07:0c:c1:00:ed:
                    82:6d:0c:0b:e9:ca:89:ba:01:94:12:57:fb:c1:4d:
                    19:45:dd:19:65:70:d3:54:72:3b:18:39:c8:0c:33:
                    a0:87:62:af:41:d6:47:14:6c:54:07:2b:30:f8:0b:
                    ba:44:f4:5e:b0:29:70:31:c0:ba:68:67:32:05:7f:
                    03:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BD:A3:C2:B8:69:80:E5:89:02:E7:AD:99:28:8C:0E:E9:1F:F0:9D
            X509v3 Authority Key Identifier:
                keyid:A5:88:9F:35:65:9E:74:28:37:BE:E5:20:B0:2D:AF:77:46:2D:80:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/A5889F35659E742837BEE520B02DAF77462D8041.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5889F35659E742837BEE520B02DAF77462D8041.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/323830343a386263633a3a2f33322d3438203d3e20323733373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8bcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:6b:f3:6a:70:8d:31:2e:8c:a9:36:3d:f3:72:e6:46:de:e6:
         14:65:a3:c9:06:27:9f:4e:4b:22:b8:3e:ea:c8:fe:39:54:51:
         25:84:b5:dc:60:33:d8:47:51:d7:64:dd:85:66:6e:87:30:87:
         d0:43:d7:6c:03:8b:4c:ef:05:ef:4e:c1:c1:1e:4d:02:8d:c0:
         7d:4f:71:86:d7:d1:96:f7:0e:c6:bf:cc:b8:ab:78:3c:35:ae:
         c9:d0:ff:f6:c7:31:06:87:25:ff:6f:47:40:35:ce:95:86:5e:
         af:02:28:0d:34:ce:e7:7e:e6:7d:46:b2:ad:58:01:e2:fb:c8:
         05:2e:ba:35:6f:9b:d4:33:3f:4b:c1:7c:b4:0e:34:62:97:46:
         76:c9:b3:19:a1:06:f1:c6:f0:bd:bb:3c:fb:cb:8d:03:d5:05:
         02:43:02:1b:ae:e0:df:3a:21:dd:11:4b:2a:4c:b1:ad:da:5e:
         3c:c2:1b:a0:91:47:82:c3:0c:6b:06:8a:57:a3:40:32:f0:7f:
         e1:f5:03:cc:e7:78:92:73:7f:15:09:b0:e4:85:36:e5:38:2c:
         cd:cb:79:45:9b:b0:74:3e:7f:3b:04:23:fe:9e:c3:8c:ba:f5:
         d9:62:43:a0:d6:28:a5:54:05:2c:18:17:71:23:d9:fb:83:08:
         16:d1:c3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org