Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/323830343a6438303a3a2f33322d3438203d3e203532363335.roa
File:                     323830343a6438303a3a2f33322d3438203d3e203532363335.roa (raw, json)
Hash identifier:          OUtMocKpqTsuU9z5ENkBvvlBYUvLMDThrENeI7ysn9U=
Subject key identifier:   EC:D7:D9:29:D1:ED:75:A7:06:49:63:A8:E4:49:33:F4:EC:E1:73:F5
Certificate issuer:       /CN=63ED338701F5B4BCE8EF3D9881EE5EF1299FD237
Certificate serial:       055EB87C2A21AD15C6EB2F43967FEA895848B9D4
Authority key identifier: 63:ED:33:87:01:F5:B4:BC:E8:EF:3D:98:81:EE:5E:F1:29:9F:D2:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/323830343a6438303a3a2f33322d3438203d3e203532363335.roa
Signing time:             Thu 21 Mar 2024 15:00:00 +0000
ROA not before:           Thu 21 Mar 2024 14:55:00 +0000
ROA not after:            Thu 20 Mar 2025 15:00:00 +0000
asID:                     52635
IP address blocks:        2804:d80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:5e:b8:7c:2a:21:ad:15:c6:eb:2f:43:96:7f:ea:89:58:48:b9:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63ED338701F5B4BCE8EF3D9881EE5EF1299FD237
        Validity
            Not Before: Mar 21 14:55:00 2024 GMT
            Not After : Mar 20 15:00:00 2025 GMT
        Subject: CN=ECD7D929D1ED75A7064963A8E44933F4ECE173F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e3:3f:59:a4:99:4f:ab:53:23:15:ab:6e:7b:
                    90:b6:42:02:91:61:16:69:58:8c:44:35:ad:db:86:
                    29:56:eb:ec:b3:5a:63:5c:aa:0c:c6:ac:82:99:97:
                    c3:a8:0d:9d:93:51:2b:86:35:3e:09:67:35:52:3b:
                    b5:4b:94:9c:90:77:5f:f4:47:0d:c9:c4:51:58:d2:
                    3b:9c:86:bc:10:f2:66:fd:be:36:56:38:71:56:a1:
                    4a:bc:ad:9a:0d:a7:c9:68:46:74:a4:86:66:f9:ed:
                    cb:fc:ce:45:56:97:ba:16:52:55:5f:62:fa:e0:0f:
                    ba:a2:a5:83:ad:21:69:65:73:d3:50:97:77:42:db:
                    76:55:a6:80:88:dd:64:3e:a3:5c:87:1a:d5:71:3f:
                    4a:32:56:82:68:3b:46:fa:f8:8f:5b:e1:8e:d0:87:
                    cb:63:c8:e6:7f:36:a7:a5:23:5d:a7:55:46:6b:f0:
                    8a:4a:b2:a1:95:33:d5:ab:41:2f:b3:b1:74:41:7d:
                    ef:d7:40:77:8b:60:ed:4d:af:0f:16:8d:52:ea:34:
                    6c:b4:59:dd:1c:50:e3:81:f4:aa:e8:0d:35:17:93:
                    a6:71:42:95:30:7f:72:7b:72:8d:d2:e7:37:da:9e:
                    2c:55:e0:fc:28:bf:1a:d1:87:60:b5:dc:e5:a1:b0:
                    26:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D7:D9:29:D1:ED:75:A7:06:49:63:A8:E4:49:33:F4:EC:E1:73:F5
            X509v3 Authority Key Identifier:
                keyid:63:ED:33:87:01:F5:B4:BC:E8:EF:3D:98:81:EE:5E:F1:29:9F:D2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/323830343a6438303a3a2f33322d3438203d3e203532363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:97:d8:8f:da:73:af:1b:62:64:d9:85:f8:b5:d9:7b:f9:72:
         ac:9a:52:75:11:1e:e4:72:f7:ac:19:40:b1:45:7b:24:5f:31:
         41:41:6b:74:50:47:38:d6:6c:b1:17:d2:58:3b:a2:46:b4:5f:
         d0:a0:53:e1:90:a8:b3:97:3e:bb:86:ab:07:f3:80:7b:43:42:
         6d:91:26:c6:45:9e:14:ab:ae:00:f8:62:4c:97:63:f7:fb:7b:
         e4:3b:3d:65:c0:35:09:8c:bb:b5:60:08:59:8d:7f:6e:8f:98:
         12:48:ca:6d:53:2a:b5:a1:eb:b9:2d:22:1a:cd:4a:84:d3:36:
         03:b0:e6:20:85:f6:e7:19:b4:17:cf:97:74:6d:8a:94:0a:74:
         50:c9:3a:7c:9d:5e:1d:18:5e:37:c0:e6:6d:2d:84:d1:77:6d:
         ef:93:e6:19:6a:e3:65:fc:8a:b6:cd:d7:1c:ac:db:07:fb:e5:
         7b:45:14:8c:e7:82:44:d7:f8:db:4c:9f:a6:cc:a5:47:fa:c5:
         c6:6b:05:19:c9:85:a2:4a:6e:11:7f:81:26:24:a3:8e:cf:87:
         4e:66:31:58:f6:e2:14:1a:a1:69:38:e4:64:e0:a2:1c:6c:46:
         ab:6d:62:b3:09:5a:d9:47:41:de:b9:19:09:3e:91:f1:ac:a6:
         f2:c3:12:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org