Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/323830343a353130303a333030303a3a2f34302d3430203d3e20323638343234.roa
File:                     323830343a353130303a333030303a3a2f34302d3430203d3e20323638343234.roa (raw, json)
Hash identifier:          Tk1RPdzyZBw3k00++vshmM8LljZLIYgP/Yc7GSdWgGg=
Subject key identifier:   87:A8:E0:5C:BF:BF:7C:0D:2A:10:15:A7:BC:BF:4E:EC:67:E9:BD:98
Certificate issuer:       /CN=E429F35E74597C6DE39F18CE6F1303823FC75955
Certificate serial:       2EF06587452C0EA7B3C5D4EC22D90950F03EEC3A
Authority key identifier: E4:29:F3:5E:74:59:7C:6D:E3:9F:18:CE:6F:13:03:82:3F:C7:59:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E429F35E74597C6DE39F18CE6F1303823FC75955.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/323830343a353130303a333030303a3a2f34302d3430203d3e20323638343234.roa
Signing time:             Mon 04 Mar 2024 19:34:22 +0000
ROA not before:           Mon 04 Mar 2024 19:29:22 +0000
ROA not after:            Mon 03 Mar 2025 19:34:22 +0000
asID:                     268424
IP address blocks:        2804:5100:3000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f0:65:87:45:2c:0e:a7:b3:c5:d4:ec:22:d9:09:50:f0:3e:ec:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E429F35E74597C6DE39F18CE6F1303823FC75955
        Validity
            Not Before: Mar  4 19:29:22 2024 GMT
            Not After : Mar  3 19:34:22 2025 GMT
        Subject: CN=87A8E05CBFBF7C0D2A1015A7BCBF4EEC67E9BD98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dd:57:b2:50:ab:56:48:73:10:08:d9:db:36:
                    e3:6f:58:f6:85:56:0c:ec:6f:a7:76:c7:5d:38:7c:
                    d3:04:aa:b3:25:eb:dc:2a:ac:70:8d:03:4f:96:d9:
                    a3:5b:d7:3e:b3:ae:86:d8:b0:0b:7a:2e:0c:48:87:
                    f4:55:74:87:02:c3:74:b6:5f:0a:8f:bd:b9:0c:89:
                    e8:3d:0c:1e:c9:9e:83:9d:70:3d:de:7b:c9:1b:98:
                    22:fa:23:15:94:85:f9:53:c3:2a:a5:b8:30:25:42:
                    30:83:7f:6c:36:37:90:ae:24:e2:16:c0:d1:9e:99:
                    26:02:43:21:9f:ee:a7:54:29:f4:83:06:de:dc:f7:
                    33:87:ed:db:26:98:14:61:41:7f:90:08:15:f6:00:
                    50:e5:ca:c4:4d:bd:59:2f:a7:41:f1:c2:c9:a5:44:
                    c7:d0:11:79:85:0d:04:76:65:d2:67:03:7e:ae:a5:
                    09:1c:db:44:99:41:a8:82:c4:65:a3:2b:35:b9:53:
                    87:82:30:31:fd:b5:92:5a:56:c7:d4:91:13:b9:73:
                    9f:31:0c:0a:9c:91:40:6e:84:94:9a:74:66:5a:50:
                    c5:81:98:09:4a:c9:d4:b7:26:c0:0c:21:f5:59:07:
                    bb:58:6b:6b:96:9d:63:81:0a:16:3c:a4:90:1a:55:
                    57:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A8:E0:5C:BF:BF:7C:0D:2A:10:15:A7:BC:BF:4E:EC:67:E9:BD:98
            X509v3 Authority Key Identifier:
                keyid:E4:29:F3:5E:74:59:7C:6D:E3:9F:18:CE:6F:13:03:82:3F:C7:59:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/E429F35E74597C6DE39F18CE6F1303823FC75955.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E429F35E74597C6DE39F18CE6F1303823FC75955.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/323830343a353130303a333030303a3a2f34302d3430203d3e20323638343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5100:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         0a:20:cc:b7:50:eb:29:7a:49:65:ab:dc:9b:2f:14:50:02:b8:
         af:85:b0:6d:30:c9:da:73:17:09:f3:ba:6f:9a:c8:5d:e9:34:
         86:9a:2c:3f:a2:6c:96:23:ad:59:4e:15:8a:c0:0c:44:1c:b6:
         10:a5:38:38:2f:61:01:09:16:29:ed:66:ab:cd:f0:4b:d0:9a:
         64:d3:64:6f:3c:4b:79:7c:3d:90:0e:89:43:6f:2f:4b:d1:59:
         cd:b6:ed:3f:d2:ff:db:13:5b:01:15:9b:cc:8d:db:01:ed:f5:
         a3:93:06:9e:0f:34:53:2a:17:0e:7e:b5:16:ca:a2:0b:a9:fb:
         86:f0:22:11:ab:13:fa:73:4d:75:67:f4:c4:87:8f:18:5b:d7:
         55:3b:a0:07:9d:f5:51:1c:0b:d7:6f:26:39:03:96:20:b7:fb:
         02:69:b1:4b:88:7e:7d:89:a6:7a:b0:8e:3a:63:6e:d9:9e:24:
         60:e0:82:65:92:cf:13:c6:ac:b2:16:4e:38:7e:4c:d8:85:8c:
         48:f1:6c:c4:6f:db:93:24:62:77:5b:7e:68:f8:e8:da:be:32:
         4d:e0:08:4d:ec:38:fd:96:b1:c8:ea:62:38:38:82:d1:bb:25:
         71:da:e9:4c:2b:49:b3:bc:2b:c0:63:37:c9:36:c7:c8:45:1e:
         be:c0:b9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org