Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/323830343a323839303a3a2f33322d3634203d3e203533313831.roa
File:                     323830343a323839303a3a2f33322d3634203d3e203533313831.roa (raw, json)
Hash identifier:          Mm2AXpRD1sc9gAAMZjz16AAWz61LitQQviE4q0Vfbfo=
Subject key identifier:   82:AB:11:69:BB:20:4D:24:8F:B1:F2:F9:0D:71:3E:C9:C6:1B:08:6E
Certificate issuer:       /CN=8DF5F3E70EB9D6971638464E557907A395C47FAD
Certificate serial:       47B066EA276544112E44752097F29AC21B5D1524
Authority key identifier: 8D:F5:F3:E7:0E:B9:D6:97:16:38:46:4E:55:79:07:A3:95:C4:7F:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DF5F3E70EB9D6971638464E557907A395C47FAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/323830343a323839303a3a2f33322d3634203d3e203533313831.roa
Signing time:             Sat 11 Mar 2023 00:57:31 +0000
ROA not before:           Sat 11 Mar 2023 00:52:31 +0000
ROA not after:            Sat 09 Mar 2024 00:57:31 +0000
asID:                     53181
IP address blocks:        2804:2890::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b0:66:ea:27:65:44:11:2e:44:75:20:97:f2:9a:c2:1b:5d:15:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DF5F3E70EB9D6971638464E557907A395C47FAD
        Validity
            Not Before: Mar 11 00:52:31 2023 GMT
            Not After : Mar  9 00:57:31 2024 GMT
        Subject: CN=82AB1169BB204D248FB1F2F90D713EC9C61B086E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:14:a0:85:23:d1:6a:3a:ba:61:d7:41:85:55:
                    f7:f7:f9:fe:5c:43:a4:d5:d3:be:7e:bf:c7:1b:42:
                    fd:8e:aa:14:a3:0e:53:8d:ea:05:74:9c:36:c2:00:
                    7b:f9:db:07:2a:51:7b:cf:e5:16:f3:76:bf:59:69:
                    54:80:6a:2f:43:b7:79:b0:27:8a:be:85:90:b9:ad:
                    3e:55:96:ec:b1:cc:b5:a2:83:0b:35:99:bc:ec:e2:
                    b3:b0:3e:03:dc:90:69:4a:43:e7:19:61:1a:56:bc:
                    d2:0e:66:e5:a7:75:63:30:a7:d6:e2:ab:52:88:45:
                    78:f7:5b:f4:d0:e7:d3:d7:f1:ef:8c:c5:c3:7f:df:
                    80:38:6f:29:ae:63:66:05:3f:94:30:59:ce:54:f9:
                    9d:67:81:93:b5:04:da:ca:59:ff:5a:24:9c:24:ca:
                    c9:dc:f8:7d:9b:3e:ac:ba:e3:8f:08:01:e5:33:0c:
                    bc:33:1c:69:fe:fd:76:58:a8:05:b0:b6:3a:46:45:
                    5e:c9:8c:0e:36:25:4a:9d:9e:79:53:ec:a9:28:ab:
                    bc:c4:ac:a6:8c:b2:df:4c:29:23:3d:55:35:4d:be:
                    34:de:b0:bc:bd:8a:87:8a:fc:b8:6f:c3:84:be:e3:
                    78:a8:2f:a5:fa:26:f0:ae:02:5e:4d:0f:e4:e7:14:
                    1b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AB:11:69:BB:20:4D:24:8F:B1:F2:F9:0D:71:3E:C9:C6:1B:08:6E
            X509v3 Authority Key Identifier:
                keyid:8D:F5:F3:E7:0E:B9:D6:97:16:38:46:4E:55:79:07:A3:95:C4:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/8DF5F3E70EB9D6971638464E557907A395C47FAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DF5F3E70EB9D6971638464E557907A395C47FAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/323830343a323839303a3a2f33322d3634203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2890::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:85:b0:1f:98:e9:35:28:8f:2a:07:d2:47:a1:86:0d:1e:e2:
         96:fb:d4:a2:b5:67:df:98:49:69:19:96:a3:1a:4f:c1:af:46:
         6b:e7:9f:ac:13:33:5f:32:68:8a:0f:8b:11:51:cb:3a:bd:ba:
         43:d3:6e:d5:e6:ce:e0:ee:4c:a2:b0:31:50:db:79:a0:e3:56:
         c8:2c:c3:8f:fa:5f:7c:7a:56:47:e9:80:c2:b0:81:7c:73:df:
         41:4b:17:c2:b8:44:5e:4d:aa:42:a2:0c:dc:2f:44:83:5f:cc:
         2c:e7:0c:46:95:ab:54:27:63:3f:9d:e3:33:57:29:0b:46:21:
         14:10:5f:44:9a:d7:97:06:b0:26:0d:49:4e:05:cb:c0:2b:62:
         0b:9c:68:a6:46:f8:a8:cd:de:a9:7e:5a:bb:d0:6e:6e:91:54:
         cc:05:df:c5:e6:87:7f:b4:a6:94:67:55:2d:89:f2:e4:55:77:
         6f:f9:f1:3a:34:34:43:59:66:32:fe:21:f6:3a:b5:cf:6d:73:
         69:2c:38:cf:90:6c:0e:42:f6:d1:72:54:5d:70:e3:c6:5e:90:
         cd:4a:b6:2a:1c:19:86:3a:2a:96:ab:78:64:5b:a4:3a:6c:b5:
         74:1b:86:a6:bd:1e:d5:82:4e:99:b6:9a:d9:62:23:b5:83:f5:
         14:c5:73:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org