Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a343330303a3a2f34312d3431203d3e20323632343934.roa
File:                     323830343a6164383a343330303a3a2f34312d3431203d3e20323632343934.roa (raw, json)
Hash identifier:          ctCD+PN/mFf7txRwVwYv97EYNaqYJR3mUz+cyfp6E84=
Subject key identifier:   3F:C5:DD:82:C3:45:53:C1:1E:F9:4A:E8:D9:AC:4E:BC:72:B4:34:45
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       12D22CE24283956C0B4CEE77AB04C733B4E5F7F7
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a343330303a3a2f34312d3431203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 15:00:01 +0000
ROA not before:           Mon 09 Oct 2023 14:55:01 +0000
ROA not after:            Wed 09 Oct 2024 15:00:01 +0000
asID:                     262494
IP address blocks:        2804:ad8:4300::/41 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d2:2c:e2:42:83:95:6c:0b:4c:ee:77:ab:04:c7:33:b4:e5:f7:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 14:55:01 2023 GMT
            Not After : Oct  9 15:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c0:fb:bd:f0:19:d9:46:7a:37:e1:d9:d8:1d:
                    c6:f8:91:3f:1a:ee:d0:a9:ce:72:4f:39:5c:8f:d7:
                    e3:8a:d8:3a:6b:a5:8a:71:b6:b0:7e:64:0d:ff:41:
                    fe:ae:75:fd:92:b6:5d:a1:39:83:26:ff:39:f9:6b:
                    3c:8a:64:06:17:24:e8:99:23:86:27:d7:54:27:26:
                    c4:e6:94:66:67:0c:ac:98:c4:95:ca:d8:c1:15:8f:
                    81:d6:d9:5f:1a:fe:aa:ff:68:58:85:70:1c:4c:1f:
                    a1:4b:c9:85:7e:8c:dd:0f:f4:21:40:fc:51:e1:cd:
                    02:89:5d:9e:92:00:55:20:20:18:03:b8:ee:92:c4:
                    ba:36:71:89:b6:d2:18:8c:e3:75:69:ea:2a:ac:1d:
                    57:88:41:07:fa:26:21:3a:27:30:e4:97:ce:82:05:
                    ea:8e:78:43:64:70:3f:d8:eb:16:b0:a5:03:fb:f1:
                    c4:3e:df:b2:d4:c9:f8:79:24:b0:a8:a7:30:66:23:
                    c9:51:38:94:24:f4:1e:39:db:1e:72:0a:21:6b:b6:
                    59:b1:49:dd:1a:ac:f4:bc:1a:a6:3b:1e:8d:59:08:
                    d7:f5:89:dd:47:82:9f:a3:aa:d4:21:9d:c9:17:ca:
                    0f:2d:d0:27:bc:1a:a1:4d:ac:6d:51:fc:47:05:c5:
                    5c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C5:DD:82:C3:45:53:C1:1E:F9:4A:E8:D9:AC:4E:BC:72:B4:34:45
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a343330303a3a2f34312d3431203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:4300::/41

    Signature Algorithm: sha256WithRSAEncryption
         18:fb:11:af:c3:ef:e8:c1:14:c5:22:ea:83:63:3f:c7:9c:97:
         61:09:95:e6:25:0e:cd:b3:ce:76:af:7d:68:6a:dd:cc:d2:03:
         a9:b4:ef:04:cf:88:6e:a1:0b:50:3c:8f:7f:1f:c8:e8:58:7d:
         60:85:84:d0:14:f4:29:6f:cc:88:51:d7:32:e9:d6:83:73:26:
         08:66:77:2c:49:6e:0e:9d:c2:ee:a2:00:35:01:86:18:05:08:
         4e:52:c8:c6:c5:da:7a:45:7b:87:e1:58:35:fa:08:71:b9:c9:
         14:ba:aa:40:06:0a:81:b9:5e:0f:48:c8:ab:ba:18:86:3d:a4:
         23:bd:93:e9:f1:0d:5b:1b:04:a7:87:9d:79:f0:98:8a:af:0d:
         8a:af:c1:0b:e3:3f:7e:2e:16:af:06:bb:a1:10:40:7c:a7:98:
         9b:8d:5a:18:3b:02:52:e9:55:e3:10:6c:1f:72:ee:70:f9:8b:
         08:7e:35:0e:22:5f:1b:28:ac:a7:d1:29:fe:7e:55:b1:01:21:
         2e:be:04:07:b4:59:c1:83:b2:f2:02:8b:b2:e2:66:45:0a:36:
         52:d6:e7:86:3a:3f:c0:7b:c5:ae:1c:0a:e1:f5:f3:72:2c:3e:
         f3:00:ca:89:48:0e:b4:66:c5:0a:f3:03:69:49:ba:c9:75:02:
         e0:a0:eb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org