Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a343138303a3a2f34312d3431203d3e20323632343934.roa
File:                     323830343a6164383a343138303a3a2f34312d3431203d3e20323632343934.roa (raw, json)
Hash identifier:          zW3xi+7MB+cU1/wkAYhuegM/2Cw0WzTv/1RDC7Yl8q0=
Subject key identifier:   DE:BF:BA:C4:E8:B7:3F:2B:6A:95:6A:B0:F8:F5:35:1F:23:0B:62:93
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       0AA32AD10C054D5EAEA3E3E85528BC68984BFBAB
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a343138303a3a2f34312d3431203d3e20323632343934.roa
Signing time:             Sat 24 Feb 2024 01:14:14 +0000
ROA not before:           Sat 24 Feb 2024 01:09:14 +0000
ROA not after:            Mon 24 Feb 2025 01:14:14 +0000
asID:                     262494
IP address blocks:        2804:ad8:4180::/41 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a3:2a:d1:0c:05:4d:5e:ae:a3:e3:e8:55:28:bc:68:98:4b:fb:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Feb 24 01:09:14 2024 GMT
            Not After : Feb 24 01:14:14 2025 GMT
        Subject: CN=3082010A0282010100BF2E94E6B02A5C57918FD3A1F510A08EC87CA538C594440863AFC4D16576DE6FA9D8155A689BD8318455B7E372441DDE4F18EAC483861F83AF2D71251557425E4C3307D9ECC8B025534F696AC9B1DF341ABFA5E3CEF02694DDC3B7D344C8144440224656550D4C05B2CF4F832D629FA014F990467CE820E9AB36FD426F46629D2036D7920865ABDEB466D8A8E7C85E1CC41358244DB02EBB918F15C66773EB04784683FD28B1EE4A9491EBDDF8D125A05D725D172F33F19EADE457FA30C324AEA23CD60307500D8877A4FCD478297F18C0A22A21E454AFE9DFE0CB209FFF13F19597E3A8174C94CC7E9C32407885F1509C2BFCFDAC167AC672921D89040627E30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2e:94:e6:b0:2a:5c:57:91:8f:d3:a1:f5:10:
                    a0:8e:c8:7c:a5:38:c5:94:44:08:63:af:c4:d1:65:
                    76:de:6f:a9:d8:15:5a:68:9b:d8:31:84:55:b7:e3:
                    72:44:1d:de:4f:18:ea:c4:83:86:1f:83:af:2d:71:
                    25:15:57:42:5e:4c:33:07:d9:ec:c8:b0:25:53:4f:
                    69:6a:c9:b1:df:34:1a:bf:a5:e3:ce:f0:26:94:dd:
                    c3:b7:d3:44:c8:14:44:40:22:46:56:55:0d:4c:05:
                    b2:cf:4f:83:2d:62:9f:a0:14:f9:90:46:7c:e8:20:
                    e9:ab:36:fd:42:6f:46:62:9d:20:36:d7:92:08:65:
                    ab:de:b4:66:d8:a8:e7:c8:5e:1c:c4:13:58:24:4d:
                    b0:2e:bb:91:8f:15:c6:67:73:eb:04:78:46:83:fd:
                    28:b1:ee:4a:94:91:eb:dd:f8:d1:25:a0:5d:72:5d:
                    17:2f:33:f1:9e:ad:e4:57:fa:30:c3:24:ae:a2:3c:
                    d6:03:07:50:0d:88:77:a4:fc:d4:78:29:7f:18:c0:
                    a2:2a:21:e4:54:af:e9:df:e0:cb:20:9f:ff:13:f1:
                    95:97:e3:a8:17:4c:94:cc:7e:9c:32:40:78:85:f1:
                    50:9c:2b:fc:fd:ac:16:7a:c6:72:92:1d:89:04:06:
                    27:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BF:BA:C4:E8:B7:3F:2B:6A:95:6A:B0:F8:F5:35:1F:23:0B:62:93
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a343138303a3a2f34312d3431203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:4180::/41

    Signature Algorithm: sha256WithRSAEncryption
         03:78:89:5f:52:97:26:2f:e9:c7:43:1e:86:00:63:be:09:d6:
         e3:a6:ab:b1:fb:f2:79:e4:2f:ef:1a:b9:76:06:fa:d3:64:4e:
         8c:c0:39:9a:de:68:a3:72:33:9e:e7:8b:06:3c:02:f6:8c:7e:
         d7:23:ea:1e:17:a7:52:28:4b:fc:b5:df:bb:af:3a:90:6e:3c:
         31:01:bd:81:42:27:bb:1b:4a:65:77:7b:47:3f:7f:97:b9:80:
         4e:d9:82:b0:13:e9:e7:cb:b7:7c:2e:17:5c:84:ab:0b:88:6d:
         0e:d8:57:16:b7:a4:ff:10:68:95:78:63:6a:68:37:56:57:de:
         e0:0a:13:50:8b:2a:ca:51:25:76:36:36:50:0e:8b:87:b0:96:
         d3:ca:78:96:c6:c6:a7:f4:2a:d6:4a:9e:a8:b2:8f:cd:33:05:
         7d:21:ca:e5:eb:e3:4b:80:45:e9:dd:c1:c3:07:b9:f7:14:c3:
         73:7d:f7:02:c5:87:61:b9:41:91:35:65:22:81:8a:93:e0:e8:
         53:6c:4f:c9:6c:7c:72:4a:47:de:93:25:56:2c:30:fe:62:e9:
         a6:fa:7d:0a:f2:00:5d:e9:14:90:47:ac:20:c7:0e:33:ee:21:
         9c:c4:e3:8e:ec:a8:2e:da:68:bc:3c:9f:22:7d:18:db:35:eb:
         f5:26:80:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org