Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/1/323830343a6531303a3a2f33342d3334203d3e203532353430.roa
File:                     323830343a6531303a3a2f33342d3334203d3e203532353430.roa (raw, json)
Hash identifier:          rOrYlQBs3geVDX+Mnuc/vYZ6amoQiWWWA5Um3RnyknE=
Subject key identifier:   02:5C:34:FF:C2:4F:74:65:BA:1B:49:1A:8D:DF:4E:EB:8F:6F:89:4B
Certificate issuer:       /CN=8C004D33839E9718AC5A43521533E7535258D419
Certificate serial:       251E3C31AF0004A14E5A81F0ACF852BAFE9A801A
Authority key identifier: 8C:00:4D:33:83:9E:97:18:AC:5A:43:52:15:33:E7:53:52:58:D4:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C004D33839E9718AC5A43521533E7535258D419.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/1/323830343a6531303a3a2f33342d3334203d3e203532353430.roa
Signing time:             Mon 18 Mar 2024 21:16:53 +0000
ROA not before:           Mon 18 Mar 2024 21:11:53 +0000
ROA not after:            Mon 17 Mar 2025 21:16:53 +0000
asID:                     52540
IP address blocks:        2804:e10::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:1e:3c:31:af:00:04:a1:4e:5a:81:f0:ac:f8:52:ba:fe:9a:80:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C004D33839E9718AC5A43521533E7535258D419
        Validity
            Not Before: Mar 18 21:11:53 2024 GMT
            Not After : Mar 17 21:16:53 2025 GMT
        Subject: CN=025C34FFC24F7465BA1B491A8DDF4EEB8F6F894B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5d:15:43:8c:e6:04:37:dc:c7:50:04:29:7f:
                    0d:b6:77:f4:cf:4b:26:2f:ef:03:a4:19:82:36:d4:
                    7a:0a:5d:3d:92:eb:5f:50:12:62:c6:ed:fe:a0:af:
                    e0:c7:05:45:fc:65:c9:9b:85:2d:82:14:5d:ea:43:
                    d0:3d:9b:06:3d:43:50:db:c8:53:b1:2b:9d:76:81:
                    55:18:9b:ee:7f:5f:34:59:61:6f:f4:b9:5b:0b:bd:
                    45:0c:ee:b7:84:5f:9b:c3:7b:8c:b6:c8:53:28:39:
                    a3:89:dc:6e:c5:c1:7a:68:20:db:cb:45:a4:c1:1c:
                    4f:b5:98:89:29:79:6a:3e:2a:6e:24:32:68:ee:0a:
                    53:81:68:5f:ee:08:37:a1:c8:33:a8:4b:93:6c:ec:
                    1d:0d:0d:b1:39:26:7a:9b:fa:4c:a8:e3:45:08:a6:
                    73:a8:29:9c:18:d8:de:bf:2d:ae:c6:1f:66:29:0b:
                    75:2f:ca:93:88:9e:fb:56:7f:d1:6d:91:4b:21:b9:
                    41:1a:7a:03:d5:36:4c:1a:d7:ca:14:9c:83:15:ea:
                    d9:7c:17:71:a8:fb:2b:97:38:89:4f:89:89:79:a8:
                    5b:f1:f3:38:59:2b:73:59:ea:f1:4a:dd:a7:cd:58:
                    a2:c3:a4:1f:ce:91:df:d1:39:a5:ed:aa:2b:3b:17:
                    9f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5C:34:FF:C2:4F:74:65:BA:1B:49:1A:8D:DF:4E:EB:8F:6F:89:4B
            X509v3 Authority Key Identifier:
                keyid:8C:00:4D:33:83:9E:97:18:AC:5A:43:52:15:33:E7:53:52:58:D4:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/1/8C004D33839E9718AC5A43521533E7535258D419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C004D33839E9718AC5A43521533E7535258D419.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/1/323830343a6531303a3a2f33342d3334203d3e203532353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e10::/34

    Signature Algorithm: sha256WithRSAEncryption
         27:50:10:ad:17:b2:8d:86:02:8f:b7:b4:44:a4:2c:fe:14:d1:
         98:80:53:40:7d:ac:78:59:6d:db:fb:d7:d2:6d:33:38:56:e1:
         0d:05:9e:b9:ea:f5:cf:c3:e9:9b:b7:40:23:8e:26:49:9d:e9:
         ac:53:eb:da:43:a5:56:7a:6e:f7:ec:a6:1f:6c:62:b1:e8:fc:
         bf:8a:d9:4c:91:ea:c3:aa:91:0f:ef:0c:c6:ba:7d:8c:4c:e9:
         ea:63:3a:19:8e:1e:85:65:bd:1f:c1:23:c7:49:29:8d:28:c1:
         7b:19:32:f5:0c:49:ed:ec:8f:89:d6:0d:03:b2:2b:6c:4f:21:
         df:c5:e2:cc:bf:d0:c5:58:1d:e4:40:b0:f3:a6:f9:74:e4:c7:
         08:ca:48:f0:e1:4a:a8:86:09:e4:d0:df:1e:2e:ea:37:bb:08:
         9d:6b:b7:05:cc:54:7b:d9:23:de:01:46:23:4b:46:61:0d:d9:
         d5:9a:38:93:f3:2f:c7:8c:9f:a8:08:87:8e:2e:2f:cc:59:06:
         89:46:c1:fd:b5:07:7c:3e:3b:65:d4:29:89:f3:4f:91:0d:08:
         28:ad:0a:b4:93:df:91:ff:c3:56:7b:27:66:d5:57:b6:54:e5:
         51:5a:d0:6f:d4:49:71:c2:53:df:0d:20:d2:04:aa:f5:15:f3:
         8f:2a:8a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org