Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a3a2f33332d3333203d3e20323731343636.roa
File:                     323830343a376266383a3a2f33332d3333203d3e20323731343636.roa (raw, json)
Hash identifier:          NH+vXxdw0Th0HD6u9L2cwocmfaxVuibCmw0o7nl/Gro=
Subject key identifier:   85:4E:51:0C:E4:C3:B2:05:6D:80:F8:87:12:43:91:98:4A:5D:DF:C3
Certificate issuer:       /CN=00F57635F3A650812E4B7FA20D349EEC4B3C25E5
Certificate serial:       514B1C6427C33C64C4C2B6B0DC56E303C973D49A
Authority key identifier: 00:F5:76:35:F3:A6:50:81:2E:4B:7F:A2:0D:34:9E:EC:4B:3C:25:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00F57635F3A650812E4B7FA20D349EEC4B3C25E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a3a2f33332d3333203d3e20323731343636.roa
Signing time:             Wed 28 Feb 2024 20:15:50 +0000
ROA not before:           Wed 28 Feb 2024 20:10:50 +0000
ROA not after:            Wed 26 Feb 2025 20:15:50 +0000
asID:                     271466
IP address blocks:        2804:7bf8::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:4b:1c:64:27:c3:3c:64:c4:c2:b6:b0:dc:56:e3:03:c9:73:d4:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00F57635F3A650812E4B7FA20D349EEC4B3C25E5
        Validity
            Not Before: Feb 28 20:10:50 2024 GMT
            Not After : Feb 26 20:15:50 2025 GMT
        Subject: CN=854E510CE4C3B2056D80F887124391984A5DDFC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c5:01:4e:7e:26:63:1d:66:65:8a:5a:49:fc:
                    39:55:68:4f:6b:65:14:0f:22:12:18:44:6e:60:17:
                    69:20:67:3f:b1:19:c3:82:98:aa:45:81:f8:de:ce:
                    c1:ec:08:9f:18:07:dc:bd:94:b3:c7:41:97:ea:c2:
                    f2:66:e5:f7:38:98:79:d7:4c:a4:ee:68:dc:f1:7a:
                    3e:0d:e0:82:91:7e:3f:ff:b4:7d:87:0e:61:d5:85:
                    3c:53:fb:01:c1:0a:a5:a3:de:a0:8d:75:3f:55:f6:
                    c8:30:2e:72:24:36:4a:84:0a:1a:cb:65:e5:88:67:
                    c4:ff:41:c5:4d:3a:21:fa:c4:a5:2d:68:2f:64:1b:
                    5d:d6:ac:b1:5d:b4:31:2d:17:40:03:05:8c:ec:2a:
                    ee:a5:de:f2:01:3c:c2:7f:60:41:c7:54:db:cf:8a:
                    83:3f:8f:33:1c:9e:86:39:22:70:dc:c1:c7:41:03:
                    a2:8a:a1:27:d7:29:84:69:f6:ee:fd:91:cf:66:4a:
                    6a:c1:19:30:6d:44:16:94:2f:6a:5a:dd:50:db:08:
                    65:1f:fd:33:d1:ba:ce:88:ad:eb:da:c0:ff:2c:37:
                    c8:0b:d6:d4:bf:f6:47:2f:02:32:84:2d:56:be:02:
                    2a:17:a8:9e:fd:69:4c:1e:3c:7d:62:91:32:45:af:
                    52:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4E:51:0C:E4:C3:B2:05:6D:80:F8:87:12:43:91:98:4A:5D:DF:C3
            X509v3 Authority Key Identifier:
                keyid:00:F5:76:35:F3:A6:50:81:2E:4B:7F:A2:0D:34:9E:EC:4B:3C:25:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/00F57635F3A650812E4B7FA20D349EEC4B3C25E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00F57635F3A650812E4B7FA20D349EEC4B3C25E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a3a2f33332d3333203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bf8::/33

    Signature Algorithm: sha256WithRSAEncryption
         b1:e3:f4:eb:2a:14:e5:36:06:4c:33:b4:7b:03:99:64:b5:f8:
         0c:66:e4:aa:00:ff:cf:75:84:92:64:8c:b5:75:c7:d5:b5:eb:
         40:bb:56:3f:a2:7d:ee:76:9d:17:77:05:17:ad:ad:a9:ef:79:
         e2:02:3d:15:82:96:39:a1:f5:b7:b1:b0:4a:9c:b7:2e:6f:cb:
         89:5c:a4:52:1e:a6:12:0e:04:17:bd:a1:1e:87:2d:5d:31:91:
         70:7e:5b:36:7c:1e:c1:61:2f:c8:f8:73:ab:46:72:7a:8b:a8:
         83:4f:d0:9f:2f:cf:fa:85:79:f3:07:8a:24:55:b8:41:44:26:
         1e:60:59:8c:c2:3f:5a:de:00:c3:79:09:f7:15:45:b0:f0:91:
         0c:d5:07:39:ac:e6:8c:57:bf:6f:7b:7a:fc:41:f3:da:c5:a4:
         5c:cd:4e:ef:5e:b8:1e:f5:56:43:d2:db:3d:47:ab:f9:23:0b:
         f3:67:08:4d:ba:da:6c:72:76:0b:90:5d:71:cb:d9:90:c0:67:
         0d:ee:8e:52:c6:48:5e:fa:57:9f:a1:f2:9a:47:c9:f0:e2:1c:
         68:86:52:9e:76:9a:7c:37:9b:6d:a2:04:77:50:90:5a:75:63:
         13:b8:a8:cd:95:5a:9b:a7:17:f1:75:1f:20:91:29:ae:3e:ce:
         d1:a0:3d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org