Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a343637383a633030303a3a2f33342d3334203d3e20323632343934.roa
File:                     323830343a343637383a633030303a3a2f33342d3334203d3e20323632343934.roa (raw, json)
Hash identifier:          NdnbOmrZdph5iX5o6eM1g70ins4zOLEHnsgJdvCIJDY=
Subject key identifier:   65:5A:AA:DC:EC:3E:EE:AA:AA:02:59:CE:6D:DE:CE:55:48:91:8F:24
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       49AE1CBE12CD8E00C3EA1416C7A73317F7C83F65
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a343637383a633030303a3a2f33342d3334203d3e20323632343934.roa
Signing time:             Sat 24 Feb 2024 08:55:10 +0000
ROA not before:           Sat 24 Feb 2024 08:50:10 +0000
ROA not after:            Mon 24 Feb 2025 08:55:10 +0000
asID:                     262494
IP address blocks:        2804:4678:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ae:1c:be:12:cd:8e:00:c3:ea:14:16:c7:a7:33:17:f7:c8:3f:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Feb 24 08:50:10 2024 GMT
            Not After : Feb 24 08:55:10 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6f:22:67:3b:b7:1c:4f:e9:a8:8e:56:0f:df:
                    93:e8:73:d5:ff:c7:32:70:20:e8:53:73:a8:86:bf:
                    1c:12:08:22:6a:1c:10:27:96:b2:33:f5:55:bf:de:
                    d5:fd:31:29:08:3f:f2:06:59:63:f3:68:34:69:49:
                    97:bb:32:3f:d2:a4:a4:52:75:d6:fe:a3:c5:23:89:
                    de:50:f6:61:0d:a1:5d:0a:c9:4a:a4:cb:86:e7:ba:
                    20:81:4b:90:ee:dc:4e:02:ff:0e:8b:4b:91:5f:61:
                    f9:90:0e:ee:b3:1e:cf:1f:5f:e4:85:1a:3f:66:76:
                    9e:83:0b:d6:1a:68:d0:25:16:72:11:e6:bb:95:ad:
                    b8:02:71:6a:f0:95:a8:15:03:c1:03:ac:33:de:6a:
                    52:bc:70:ca:18:32:ed:82:b6:3f:9a:24:28:db:b3:
                    ca:5a:19:e2:0c:a6:cf:78:1e:10:6b:e4:eb:3b:15:
                    4c:33:af:d0:4d:a6:4d:92:5c:63:01:8b:2a:29:60:
                    71:15:7f:0e:d5:40:6a:f6:6b:cb:31:9f:02:39:64:
                    2d:ac:f2:cc:3a:98:b0:52:36:9f:de:47:aa:4a:43:
                    5c:4a:3a:df:b7:22:5d:0d:a6:f7:de:91:8e:1a:17:
                    df:35:96:31:00:83:05:cb:8e:bd:8f:d3:37:41:18:
                    14:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5A:AA:DC:EC:3E:EE:AA:AA:02:59:CE:6D:DE:CE:55:48:91:8F:24
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a343637383a633030303a3a2f33342d3334203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4678:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         68:4f:55:56:ae:9b:21:65:38:02:d9:33:a1:01:54:1d:3e:ea:
         c1:d8:5f:69:30:aa:44:5c:b7:b6:1e:3a:8f:e3:c2:07:16:12:
         5b:7f:49:d4:ae:9d:55:2a:28:ea:c7:a6:f6:29:a6:d7:f5:1b:
         8b:53:5b:b1:9f:12:fe:4a:59:62:d5:4c:58:c0:a2:07:ac:5c:
         ff:b8:f5:59:bc:cd:11:48:2c:fe:f8:81:cb:1a:92:30:ae:16:
         05:64:bd:a8:e8:b4:96:b9:64:5d:04:48:63:f2:67:39:6b:3b:
         27:fe:5c:7b:96:df:c0:ea:cb:9e:5f:f6:99:aa:07:24:46:e0:
         fc:d2:69:cb:2f:50:cd:19:36:03:b0:d2:76:94:9f:b1:0a:8f:
         14:eb:fb:3d:ce:3e:51:ab:7e:3b:ef:54:ab:f5:cd:10:2b:95:
         42:ba:bf:a7:ef:e1:30:ec:ce:a7:78:bf:09:46:e9:35:f2:e4:
         03:a8:31:86:77:2d:99:34:f4:45:be:ca:80:c9:16:50:93:71:
         00:97:6a:bb:83:d9:15:aa:8d:52:14:4e:25:af:fa:1b:f1:f4:
         a2:2f:2f:13:4d:59:18:83:bb:b9:12:46:41:6b:69:98:1a:c7:
         0b:15:2f:63:0c:4d:c4:9d:e5:ae:3f:70:f9:7d:26:d4:b5:27:
         4d:78:47:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org