Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a3a2f33322d3332203d3e20323632343934.roa
File:                     323830343a6164383a3a2f33322d3332203d3e20323632343934.roa (raw, json)
Hash identifier:          SJxaXrgto4wqrCdGNNSFwLSNoC1S4lEv5XXYJ3TVJ7E=
Subject key identifier:   29:A5:13:59:C8:1B:1F:31:3F:A9:6C:81:2C:60:FE:E5:C4:32:9F:AC
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       02B605A9C6637E2BD3DAAC95228BFDA22259B15B
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a3a2f33322d3332203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 15:00:00 +0000
ROA not before:           Mon 09 Oct 2023 14:55:00 +0000
ROA not after:            Wed 09 Oct 2024 15:00:00 +0000
asID:                     262494
IP address blocks:        2804:ad8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b6:05:a9:c6:63:7e:2b:d3:da:ac:95:22:8b:fd:a2:22:59:b1:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 14:55:00 2023 GMT
            Not After : Oct  9 15:00:00 2024 GMT
        Subject: CN=3082010A0282010100E9E1193453627F93AC6EC2B41D065E823AAF153BBE1D8D654DDECA8A59828E176F14460B6BDDF7B649F7C1F3894C61967101CE0AECBFF99E01E73AB19C39FAA5CC23E34B50FF13EA0FDA9F4B06A5FEB691EB19020EEA2B05FF14AE4BE4A71D214F5AEA80770E41213DD2D194D98F60F78103912252D44D709316E5BC1E6E64BC645F44B3487873F6AE190F84BF5C86A3C99EF2B941602C82479A8DBABCD476BA2783D670CE2CEF6F231B08E710D602BF518A297937C3C8F9DD65CB9870C4F7541B90E8AC4FD297417F86FB1668246D6D06D3774CA0E2A5CF235B4AF9DF8E8B1B133A3AA11A85374661E9F16C6B40F9D9A1F72390DFF80BC8B4BC865E5060CF890203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e1:19:34:53:62:7f:93:ac:6e:c2:b4:1d:06:
                    5e:82:3a:af:15:3b:be:1d:8d:65:4d:de:ca:8a:59:
                    82:8e:17:6f:14:46:0b:6b:dd:f7:b6:49:f7:c1:f3:
                    89:4c:61:96:71:01:ce:0a:ec:bf:f9:9e:01:e7:3a:
                    b1:9c:39:fa:a5:cc:23:e3:4b:50:ff:13:ea:0f:da:
                    9f:4b:06:a5:fe:b6:91:eb:19:02:0e:ea:2b:05:ff:
                    14:ae:4b:e4:a7:1d:21:4f:5a:ea:80:77:0e:41:21:
                    3d:d2:d1:94:d9:8f:60:f7:81:03:91:22:52:d4:4d:
                    70:93:16:e5:bc:1e:6e:64:bc:64:5f:44:b3:48:78:
                    73:f6:ae:19:0f:84:bf:5c:86:a3:c9:9e:f2:b9:41:
                    60:2c:82:47:9a:8d:ba:bc:d4:76:ba:27:83:d6:70:
                    ce:2c:ef:6f:23:1b:08:e7:10:d6:02:bf:51:8a:29:
                    79:37:c3:c8:f9:dd:65:cb:98:70:c4:f7:54:1b:90:
                    e8:ac:4f:d2:97:41:7f:86:fb:16:68:24:6d:6d:06:
                    d3:77:4c:a0:e2:a5:cf:23:5b:4a:f9:df:8e:8b:1b:
                    13:3a:3a:a1:1a:85:37:46:61:e9:f1:6c:6b:40:f9:
                    d9:a1:f7:23:90:df:f8:0b:c8:b4:bc:86:5e:50:60:
                    cf:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A5:13:59:C8:1B:1F:31:3F:A9:6C:81:2C:60:FE:E5:C4:32:9F:AC
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a3a2f33322d3332203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:06:e1:a8:ba:ed:30:3e:66:f9:c6:5f:62:f9:9f:47:e8:9b:
         5d:26:e9:cb:bb:0e:ff:92:b0:86:77:a8:b4:0a:c5:d3:36:6e:
         00:93:af:7f:49:eb:34:5d:6c:39:21:fc:48:e0:79:87:70:1c:
         43:e5:5a:fa:04:ad:be:8a:1c:a2:05:cb:5e:41:1c:35:0a:c1:
         7c:a1:f6:e3:37:83:ad:af:0c:18:d3:0b:6d:3c:e1:d5:b2:d8:
         03:5f:87:8c:b5:6b:9f:93:d0:2d:74:24:f4:31:2b:1c:af:f9:
         91:b3:8c:f3:27:1a:08:a0:a1:ca:03:09:0a:93:2a:3f:4b:56:
         cc:dd:df:32:81:53:1f:f9:8f:ea:bb:2c:75:1a:5c:6f:1e:f0:
         eb:2d:40:07:ba:9e:27:a1:f1:3d:3c:43:3d:12:51:e8:45:6e:
         55:5d:5e:ed:d7:1d:a2:3e:5c:61:f1:f0:e6:7b:5c:3a:db:ee:
         b9:61:ab:61:0f:04:ac:cd:90:a5:62:81:1d:ef:13:8b:9c:39:
         fd:24:0a:94:b2:00:f1:90:50:8c:5d:4d:e9:db:af:e9:48:dc:
         f1:d7:e7:03:5a:e3:db:2e:b8:f3:8d:38:af:d5:2a:80:fc:41:
         b8:14:ad:5e:ea:b0:01:a3:af:ac:19:7b:18:d8:19:7f:53:01:
         ce:f6:f8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org