Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/323830343a363538303a383030303a3a2f33332d3333203d3e20323639343935.roa
File:                     323830343a363538303a383030303a3a2f33332d3333203d3e20323639343935.roa (raw, json)
Hash identifier:          YXCgYrG5iS1MFG2zKulb/yvPV9LYpCGfobEfvZYQxSM=
Subject key identifier:   C2:90:C8:18:31:ED:EB:66:D4:EF:C9:0E:2A:24:64:1D:CB:33:A4:23
Certificate issuer:       /CN=9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB
Certificate serial:       5A813DB2FFF3D6D5524CDF2FD3AE0B42B45E51B9
Authority key identifier: 9F:E3:B7:F3:F1:B2:F9:BC:01:D0:2D:F1:2E:5D:31:AA:14:E0:60:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/323830343a363538303a383030303a3a2f33332d3333203d3e20323639343935.roa
Signing time:             Tue 23 Jan 2024 01:44:12 +0000
ROA not before:           Tue 23 Jan 2024 01:39:12 +0000
ROA not after:            Tue 21 Jan 2025 01:44:12 +0000
asID:                     269495
IP address blocks:        2804:6580:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:81:3d:b2:ff:f3:d6:d5:52:4c:df:2f:d3:ae:0b:42:b4:5e:51:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB
        Validity
            Not Before: Jan 23 01:39:12 2024 GMT
            Not After : Jan 21 01:44:12 2025 GMT
        Subject: CN=C290C81831EDEB66D4EFC90E2A24641DCB33A423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:47:17:0e:6f:ce:4a:c5:96:78:33:c5:59:bf:
                    0b:40:a9:b1:c1:ba:3b:a8:a4:42:25:6f:ea:3e:b1:
                    bc:07:bc:78:d8:47:6d:0c:15:44:61:9b:c1:9f:a0:
                    41:74:1d:bf:34:88:83:00:5a:b5:ee:15:db:ae:db:
                    f4:75:02:28:a3:35:10:b7:fb:79:bb:8b:8e:6b:7b:
                    be:a3:7a:bf:ad:cd:75:cd:b8:cb:f5:c5:76:c2:bc:
                    e5:20:99:f9:0d:56:ee:ac:ac:c3:f2:77:c9:43:18:
                    82:4c:fd:39:15:47:ba:ab:cb:3b:dc:a9:d3:67:63:
                    97:d2:f7:ed:ee:6c:c1:db:33:9c:77:db:a5:83:b9:
                    41:8b:27:d9:a5:f8:0b:25:e5:05:55:21:27:42:be:
                    5c:72:fa:cc:e2:fb:04:c1:14:f6:c3:35:ac:ab:02:
                    d1:58:6d:87:b7:9b:1c:88:2d:7a:d1:2d:be:1b:30:
                    1d:35:f4:a3:27:21:0b:ec:cf:c2:66:e8:31:6c:89:
                    8f:7b:c5:8d:dc:78:7c:a8:3a:55:fd:44:f6:03:f4:
                    a6:1d:8f:68:d2:29:1f:85:6a:95:78:4b:aa:97:a0:
                    74:15:45:5b:bd:f5:46:d5:07:b8:7a:9f:db:b1:79:
                    c5:09:3e:31:f8:ba:d1:04:c8:88:77:f0:35:4d:e2:
                    f0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:90:C8:18:31:ED:EB:66:D4:EF:C9:0E:2A:24:64:1D:CB:33:A4:23
            X509v3 Authority Key Identifier:
                keyid:9F:E3:B7:F3:F1:B2:F9:BC:01:D0:2D:F1:2E:5D:31:AA:14:E0:60:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/323830343a363538303a383030303a3a2f33332d3333203d3e20323639343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6580:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         38:e5:15:23:2a:66:35:79:48:22:ba:be:76:fe:eb:6b:76:77:
         e1:94:fa:b0:a9:f0:75:90:25:36:66:25:74:15:42:1c:6e:30:
         23:a4:96:c1:65:f2:fb:ad:15:19:e8:81:e6:a2:36:e9:da:f9:
         af:be:53:5b:7f:d4:6f:5f:1b:01:e7:a0:29:11:89:01:72:07:
         06:0f:9b:78:fc:4b:a6:f7:00:7a:e1:f5:f1:6d:4f:26:fb:39:
         a7:03:55:28:d2:76:ef:f0:5a:81:1e:b0:7e:8d:59:eb:31:45:
         e5:d9:f8:54:7d:6f:6b:3f:10:41:6f:96:d3:98:0b:09:94:8c:
         0a:2b:75:cf:98:d5:3b:f9:33:64:a0:1f:3f:18:21:a0:01:df:
         c0:2b:8e:1e:f2:e2:17:69:b8:c3:fc:62:45:cb:33:81:b2:86:
         f7:5a:0f:67:c3:3e:16:8e:38:36:73:3e:b3:dd:9a:60:40:a1:
         06:b5:ad:a7:f3:78:2a:38:42:fe:86:2f:06:97:9c:c0:92:c9:
         df:41:3d:a0:4f:eb:ca:5b:0b:b6:7f:8f:a5:e7:7a:ff:43:2b:
         25:e8:76:5d:9d:47:a2:d4:a1:37:dc:1c:ce:e1:44:d0:5b:5a:
         3f:7f:ef:42:89:ea:84:1b:a3:f5:e7:a8:c6:86:c8:08:4b:7e:
         a5:d3:07:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org