Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/1/323830343a323936303a3a2f33322d3332203d3e20323634303131.roa
File:                     323830343a323936303a3a2f33322d3332203d3e20323634303131.roa (raw, json)
Hash identifier:          WmU7MdARFBAQtujB/fHVcsxW/vWd7oY+SwYRBaB5nhM=
Subject key identifier:   E5:78:EC:57:1C:41:A8:AC:BE:D5:88:80:63:92:40:5B:94:BA:FF:EE
Certificate issuer:       /CN=24389FBFAD47987825171CB046C103C7BBF77E5E
Certificate serial:       5B1BAC372D90467F74CC2C80912C505F0275A479
Authority key identifier: 24:38:9F:BF:AD:47:98:78:25:17:1C:B0:46:C1:03:C7:BB:F7:7E:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24389FBFAD47987825171CB046C103C7BBF77E5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/1/323830343a323936303a3a2f33322d3332203d3e20323634303131.roa
Signing time:             Thu 04 Apr 2024 07:59:28 +0000
ROA not before:           Thu 04 Apr 2024 07:54:28 +0000
ROA not after:            Thu 03 Apr 2025 07:59:28 +0000
asID:                     264011
IP address blocks:        2804:2960::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:1b:ac:37:2d:90:46:7f:74:cc:2c:80:91:2c:50:5f:02:75:a4:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24389FBFAD47987825171CB046C103C7BBF77E5E
        Validity
            Not Before: Apr  4 07:54:28 2024 GMT
            Not After : Apr  3 07:59:28 2025 GMT
        Subject: CN=E578EC571C41A8ACBED588806392405B94BAFFEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:07:ef:84:69:88:13:2a:11:3a:c3:d2:f5:12:
                    15:00:e9:32:04:d7:73:ad:69:99:9d:f6:0d:69:21:
                    b9:75:1c:20:5f:05:43:27:86:46:a8:17:d8:ec:da:
                    f4:b8:98:62:db:91:57:82:21:7f:f3:d6:82:70:09:
                    b3:37:59:e8:d1:d6:cb:54:01:f1:aa:18:81:fb:e7:
                    24:ed:17:29:cd:30:6d:c2:75:c4:02:a4:29:5c:f5:
                    ff:2f:35:73:b7:25:77:ac:62:81:74:d9:65:d5:af:
                    73:73:55:42:3d:60:83:6a:05:bc:29:aa:96:39:62:
                    3e:0d:00:be:cf:f2:7f:8c:6c:1a:67:bb:2b:cc:23:
                    da:64:07:59:d3:79:c3:4d:fb:02:c7:7b:e6:e5:be:
                    44:f8:1e:88:ee:aa:ef:90:a2:ce:93:cc:db:12:ac:
                    c6:cd:d4:b5:dc:87:ca:fa:20:c4:fb:e5:7d:bf:33:
                    9c:af:1b:e3:7f:1c:0f:da:11:17:0a:af:43:f7:27:
                    34:e2:8c:1a:3c:be:59:46:34:b1:04:78:05:2d:82:
                    8f:39:a6:f3:ee:fc:24:8c:be:48:6b:5f:aa:fc:de:
                    78:9e:79:96:b8:df:00:2c:b7:37:cf:97:85:95:ca:
                    c8:0c:21:93:5e:0a:0f:6c:56:c0:0c:09:57:c6:4b:
                    df:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:78:EC:57:1C:41:A8:AC:BE:D5:88:80:63:92:40:5B:94:BA:FF:EE
            X509v3 Authority Key Identifier:
                keyid:24:38:9F:BF:AD:47:98:78:25:17:1C:B0:46:C1:03:C7:BB:F7:7E:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/1/24389FBFAD47987825171CB046C103C7BBF77E5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24389FBFAD47987825171CB046C103C7BBF77E5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/1/323830343a323936303a3a2f33322d3332203d3e20323634303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2960::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:e2:02:94:03:19:49:9a:70:e1:a8:d3:98:19:e0:3d:6e:d4:
         82:12:49:59:82:e2:80:b3:74:a0:f8:7f:85:e1:c4:fa:ed:15:
         c5:5b:5d:39:f5:bc:fb:d7:f5:3e:91:f5:c3:bf:0d:f2:57:45:
         b4:f0:9b:1e:de:31:46:84:c5:cc:34:a4:8d:70:49:4f:60:27:
         41:ea:75:f9:91:cf:b6:0f:f8:3d:e3:3f:c8:25:3d:5f:b7:c1:
         bb:0f:13:09:ef:df:4c:d8:a6:03:1f:3d:12:05:99:ed:e3:d0:
         53:97:fb:b2:17:fa:13:f6:20:e8:d0:4e:f8:22:20:df:36:ac:
         28:e0:ab:5f:b2:6a:4e:ae:76:52:09:9b:79:45:3e:6c:50:91:
         91:a5:5b:28:36:dd:f7:dc:cf:df:d7:19:26:c5:d3:39:84:29:
         ec:6f:78:be:18:e0:e8:ec:f3:0f:7c:91:d8:a7:ca:a3:50:6e:
         57:de:bd:88:55:ae:0a:af:2a:07:6f:9b:e8:92:9d:4b:c3:e7:
         55:a0:87:a3:74:29:71:5c:f7:d3:39:32:5b:ab:5b:03:ec:7c:
         d1:fc:69:48:90:83:f9:97:20:7b:d3:44:2a:e2:90:f0:4f:04:
         e5:9f:a0:9b:3e:bd:45:88:c5:41:58:09:e6:18:1f:c9:70:fd:
         b1:03:00:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 20:18:16 2024 by rpki-client on console-fra.rpki-client.org