Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a316432313a3a2f34382d3438203d3e203631363738.roa
File:                     323830343a316364343a316432313a3a2f34382d3438203d3e203631363738.roa (raw, json)
Hash identifier:          +LsE7A4dMmYlZ1aKF5v/csqBWKvKEN6J8ySzRIsjpko=
Subject key identifier:   AD:39:A2:58:2C:CB:EA:4C:41:52:88:02:05:F4:95:FF:C3:D6:9C:FC
Certificate issuer:       /CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Certificate serial:       12B54A5E55CC8861FE2D2FA09CA2529A8E911D44
Authority key identifier: 5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a316432313a3a2f34382d3438203d3e203631363738.roa
Signing time:             Tue 24 Oct 2023 12:43:41 +0000
ROA not before:           Tue 24 Oct 2023 12:38:41 +0000
ROA not after:            Tue 22 Oct 2024 12:43:41 +0000
asID:                     61678
IP address blocks:        2804:1cd4:1d21::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b5:4a:5e:55:cc:88:61:fe:2d:2f:a0:9c:a2:52:9a:8e:91:1d:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
        Validity
            Not Before: Oct 24 12:38:41 2023 GMT
            Not After : Oct 22 12:43:41 2024 GMT
        Subject: CN=AD39A2582CCBEA4C4152880205F495FFC3D69CFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1c:8f:c0:bf:03:cf:cb:5b:ed:8a:b6:37:1d:
                    b7:43:7c:7e:83:c9:cd:05:a2:b0:6f:32:b8:cb:a9:
                    4d:a6:8d:80:1b:79:14:54:cd:09:20:26:22:e1:0a:
                    03:03:e7:1f:35:6b:a4:dc:db:8a:29:00:b5:50:d0:
                    5b:eb:fa:22:c2:25:8a:71:0f:55:73:6d:a8:c2:bc:
                    ee:96:db:55:90:b6:d6:5f:3a:63:b9:34:97:24:a2:
                    21:ae:20:6e:69:fb:e3:74:c0:a8:e2:a3:55:b0:13:
                    ff:ef:d8:9f:f2:82:e8:4a:80:8e:6f:70:66:d6:5b:
                    8a:4f:51:a5:17:d1:f0:f5:ab:ea:2f:97:59:af:95:
                    a2:2e:71:c4:5f:83:37:44:9f:7a:ac:c9:77:59:c8:
                    56:f2:65:14:ad:6e:b2:61:b3:ea:88:29:f7:42:0d:
                    ed:8d:f1:90:df:ce:fc:33:97:aa:3b:1f:55:fe:58:
                    bc:be:9b:7a:09:0f:db:5e:48:79:19:e5:04:1e:37:
                    5a:83:b3:72:68:ee:72:d0:f8:b2:d0:da:2c:c6:9c:
                    53:40:e2:57:a0:d5:ee:86:ca:16:e1:c1:e1:56:62:
                    43:1d:55:2d:55:89:20:cd:e6:e9:e4:f3:42:bf:cd:
                    e8:af:91:a2:a1:79:0a:57:a4:49:56:ea:e1:e4:9e:
                    7a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:39:A2:58:2C:CB:EA:4C:41:52:88:02:05:F4:95:FF:C3:D6:9C:FC
            X509v3 Authority Key Identifier:
                keyid:5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a316432313a3a2f34382d3438203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd4:1d21::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:c6:f7:b6:22:99:ad:e8:9b:b7:64:05:62:52:18:72:89:2e:
         6d:9e:4a:de:b6:b0:d6:3e:c6:2f:78:43:42:d8:a1:c8:e9:68:
         de:16:09:5a:dd:31:eb:33:a2:8c:48:cd:36:8d:a5:50:5a:d6:
         22:44:65:70:15:63:12:13:5a:33:cb:5b:fa:2c:c1:77:8e:7a:
         22:6a:35:e5:86:06:7d:71:d4:94:c7:ad:a3:b8:05:d2:c4:40:
         ea:ed:77:45:69:16:82:f2:55:52:2c:0a:a6:19:c2:38:f4:21:
         48:0b:10:d2:f6:67:4c:3e:f4:8d:dc:21:cc:4e:f6:65:5d:f8:
         14:b7:9d:d7:f2:55:6c:22:fd:86:21:7e:2b:b3:12:fb:bb:e5:
         20:1d:d5:0f:5c:55:d5:b4:84:df:17:a9:44:b5:75:4e:8e:0e:
         b4:5e:52:cf:8b:71:48:94:f1:ba:76:98:59:15:24:a1:71:9f:
         af:e3:05:ec:7a:e1:cf:f0:ec:a3:be:f2:64:e3:21:31:52:a5:
         dc:58:1b:b6:7f:df:d5:7d:8e:69:49:c0:b6:8e:20:c5:bf:d5:
         4f:1c:38:99:59:c2:55:a9:e6:23:57:16:58:1b:61:93:cc:af:
         1c:20:95:de:c2:db:b9:62:ff:f2:c2:44:1d:36:fa:3b:78:d6:
         66:73:f5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org