Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/0/323830343a346138633a3a2f33322d3334203d3e20323637323438.roa
File:                     323830343a346138633a3a2f33322d3334203d3e20323637323438.roa (raw, json)
Hash identifier:          RifcFuyCFO1msVweF426iH1vHG1elAfv5lwkrNl0fHg=
Subject key identifier:   93:11:40:E9:29:94:43:C7:CB:3C:00:83:06:2B:54:73:8F:B7:4F:63
Certificate issuer:       /CN=E502ED5CB55AE0AC34A390CE8A820F3F3A9947AF
Certificate serial:       2EC095ABF0AA9A541C850867C8F2ACC6DCC17F4B
Authority key identifier: E5:02:ED:5C:B5:5A:E0:AC:34:A3:90:CE:8A:82:0F:3F:3A:99:47:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E502ED5CB55AE0AC34A390CE8A820F3F3A9947AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/0/323830343a346138633a3a2f33322d3334203d3e20323637323438.roa
Signing time:             Wed 01 Nov 2023 15:00:00 +0000
ROA not before:           Wed 01 Nov 2023 14:55:00 +0000
ROA not after:            Wed 30 Oct 2024 15:00:00 +0000
asID:                     267248
IP address blocks:        2804:4a8c::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c0:95:ab:f0:aa:9a:54:1c:85:08:67:c8:f2:ac:c6:dc:c1:7f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E502ED5CB55AE0AC34A390CE8A820F3F3A9947AF
        Validity
            Not Before: Nov  1 14:55:00 2023 GMT
            Not After : Oct 30 15:00:00 2024 GMT
        Subject: CN=931140E9299443C7CB3C0083062B54738FB74F63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:43:0e:0b:a0:2d:36:12:64:a6:ab:d8:4d:a5:
                    4f:10:a1:fc:8f:03:e1:89:cb:6e:28:f5:62:e0:28:
                    36:d3:40:68:7a:f4:cd:fc:1b:d8:ec:e3:00:55:29:
                    5a:07:9b:6b:04:5a:04:26:7d:47:ef:38:48:fa:b9:
                    82:54:65:5f:25:0f:cf:3e:af:e2:7c:99:ca:ee:08:
                    26:cd:0c:7b:8d:9e:ab:9b:3b:2d:3e:96:64:c4:f6:
                    c4:2b:b6:66:0c:03:12:73:9a:74:29:17:e2:59:d4:
                    9b:0f:76:1a:32:a8:67:a6:98:03:dd:fa:0e:6d:c2:
                    d6:e4:f9:ea:90:a4:b7:fb:e6:88:52:4d:4f:e5:ab:
                    2a:82:d5:77:09:02:80:b4:d4:30:3c:fe:3b:ac:2f:
                    5f:67:fe:17:2b:37:1b:ee:a8:47:5d:66:83:da:ab:
                    ef:b7:78:dd:3c:11:78:63:ed:68:ee:8f:f8:b8:91:
                    8b:d7:3e:9c:d9:c7:3b:a1:93:2e:41:81:ef:99:7b:
                    b1:12:dd:7c:8f:1e:58:1f:a0:72:d6:17:d6:0e:f9:
                    f7:0e:dd:f4:d2:c0:e8:11:2a:5b:aa:c9:19:28:90:
                    a3:e8:ac:73:d1:01:da:10:2d:fa:d3:86:f3:ae:2f:
                    eb:71:99:01:c8:9d:0f:a4:26:50:8c:92:b1:3e:c4:
                    09:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:11:40:E9:29:94:43:C7:CB:3C:00:83:06:2B:54:73:8F:B7:4F:63
            X509v3 Authority Key Identifier:
                keyid:E5:02:ED:5C:B5:5A:E0:AC:34:A3:90:CE:8A:82:0F:3F:3A:99:47:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/0/E502ED5CB55AE0AC34A390CE8A820F3F3A9947AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E502ED5CB55AE0AC34A390CE8A820F3F3A9947AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/0/323830343a346138633a3a2f33322d3334203d3e20323637323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:17:99:37:2c:02:d5:a8:2b:f5:f1:cc:f8:4d:ad:eb:d5:9c:
         75:5c:7b:7d:5e:5f:87:80:b2:09:4b:e1:f5:e4:17:47:f8:7c:
         48:c8:6e:7e:57:a7:24:ce:be:e4:0e:b0:41:f3:42:fb:ed:4b:
         d1:8c:37:96:52:43:0d:4d:f1:05:ff:fc:4b:ee:bd:27:15:60:
         40:aa:16:d0:ea:f6:11:1e:4f:fe:7f:c2:9c:1e:09:02:c7:91:
         71:b2:bc:b7:69:82:7f:28:33:ed:09:e1:c6:f9:ad:e2:c5:a2:
         18:dd:68:04:36:c0:15:8b:fc:a9:7a:10:b2:ba:d8:c4:a1:29:
         7e:90:f5:bc:d0:2f:df:b0:96:48:be:e3:f4:df:db:b2:36:c6:
         bb:cd:37:b1:7e:44:68:b4:76:fd:62:6c:0a:62:c5:36:9d:11:
         80:04:51:07:69:db:29:3e:cb:4a:cf:ad:b4:47:3d:25:f6:bb:
         ae:fd:7d:ae:86:72:1a:54:03:8c:c0:8c:79:a7:b2:ca:12:9d:
         51:0a:85:78:4f:29:ca:63:31:be:80:a0:aa:5d:d7:f8:2b:9e:
         a5:67:63:c6:85:e7:0d:56:77:bf:57:82:11:9d:76:63:52:b4:
         88:04:cc:74:de:97:a4:7d:22:fb:34:ea:2b:b6:8b:28:e8:f0:
         5b:d4:1a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org