Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/323830343a356562383a3a2f33322d3332203d3e20323632383636.roa
File:                     323830343a356562383a3a2f33322d3332203d3e20323632383636.roa (raw, json)
Hash identifier:          TtzqL6Y3WONWCEXdPQTUQqTyOZbIQIZqbWMh4JTwYeo=
Subject key identifier:   55:4B:BF:2E:C3:77:4A:E4:BF:9C:41:19:B2:9D:7D:B3:E2:3E:56:86
Certificate issuer:       /CN=E1420DF098810B8B6F41BD0334D08AD27E0BDC1C
Certificate serial:       299360FCC4580C9557B35CEFD7ED8ED1C46B2984
Authority key identifier: E1:42:0D:F0:98:81:0B:8B:6F:41:BD:03:34:D0:8A:D2:7E:0B:DC:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/323830343a356562383a3a2f33322d3332203d3e20323632383636.roa
Signing time:             Fri 12 Jan 2024 18:11:20 +0000
ROA not before:           Fri 12 Jan 2024 18:06:20 +0000
ROA not after:            Fri 10 Jan 2025 18:11:20 +0000
asID:                     262866
IP address blocks:        2804:5eb8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:93:60:fc:c4:58:0c:95:57:b3:5c:ef:d7:ed:8e:d1:c4:6b:29:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1420DF098810B8B6F41BD0334D08AD27E0BDC1C
        Validity
            Not Before: Jan 12 18:06:20 2024 GMT
            Not After : Jan 10 18:11:20 2025 GMT
        Subject: CN=554BBF2EC3774AE4BF9C4119B29D7DB3E23E5686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a6:5d:99:88:b8:8b:ff:f3:7b:fd:4d:f3:53:
                    11:6e:f0:12:96:b7:7a:e0:21:42:4e:5b:11:55:c9:
                    17:c1:e1:19:ef:18:7f:70:b3:d5:97:c9:96:e6:d3:
                    07:08:82:da:00:ba:37:1d:92:71:e1:7e:16:ec:3c:
                    11:1b:34:04:02:a9:d1:14:ba:1c:04:10:80:f4:36:
                    73:b5:95:22:36:dd:0e:51:d1:d7:10:b4:da:fb:a3:
                    7b:c5:97:7a:1e:ca:55:77:95:34:b5:e2:d9:c4:fb:
                    ed:29:f8:25:aa:84:11:b3:41:b7:4b:4d:2b:78:47:
                    68:f0:f3:c8:70:b1:cf:f2:2e:c6:29:a4:28:d1:6c:
                    f5:3a:2e:60:26:9b:6c:c5:ca:6a:4a:77:96:86:14:
                    c2:01:c2:89:c3:73:c3:38:72:40:75:e1:6c:d5:8c:
                    fb:3b:fc:9c:2b:8e:60:c3:dd:1d:19:90:c8:60:ca:
                    ef:00:78:bd:7c:fc:9b:87:d3:fd:70:4e:14:80:24:
                    6e:d7:55:da:0f:78:82:d8:4e:b0:68:fe:a9:89:fa:
                    11:1c:5b:af:8e:91:42:40:db:7a:87:5f:1d:1e:4e:
                    d4:b1:7e:48:d7:82:25:4a:5a:65:d7:c9:9d:f5:c4:
                    40:44:4c:00:d3:9b:71:63:d9:f7:eb:18:76:97:89:
                    45:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4B:BF:2E:C3:77:4A:E4:BF:9C:41:19:B2:9D:7D:B3:E2:3E:56:86
            X509v3 Authority Key Identifier:
                keyid:E1:42:0D:F0:98:81:0B:8B:6F:41:BD:03:34:D0:8A:D2:7E:0B:DC:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/323830343a356562383a3a2f33322d3332203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5eb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:42:59:0e:90:7a:83:94:14:a9:ee:f3:f5:95:23:24:47:5c:
         cd:51:8c:d1:1a:66:f2:c5:82:4d:58:ad:7e:ff:6a:c9:8f:80:
         a9:2c:cb:ca:ed:e1:c9:88:a9:80:5c:3e:49:df:78:bd:e4:af:
         15:b8:41:5c:06:65:a2:71:70:10:13:00:7d:16:58:b1:c6:65:
         22:72:bd:5a:f1:be:df:56:a8:44:9e:6c:a4:e0:7f:bb:22:f5:
         84:d1:6e:d6:d3:7c:e6:c2:dc:bc:b2:46:54:c4:72:b8:44:ef:
         b0:15:43:59:db:0e:fc:8f:f8:b8:80:1b:d3:1d:f5:a8:ed:19:
         cf:58:84:db:13:e0:2e:86:ef:01:6d:76:0d:61:bd:ad:2c:3e:
         e3:2c:1b:7e:0b:c7:0a:c7:a6:f5:10:c8:4a:8f:26:ed:8a:b4:
         0f:de:e1:4b:5a:ef:15:3a:c4:8f:3c:6e:69:cd:25:87:f7:b1:
         53:5b:e8:03:6b:47:2a:a2:8d:a9:81:90:df:e9:b9:d7:2d:d9:
         69:6b:b4:85:86:02:86:af:c3:56:51:79:ed:2d:57:36:d7:7a:
         08:f2:07:f7:0c:65:43:73:51:32:56:80:71:36:26:c5:dc:ce:
         1b:29:89:2b:38:36:57:9c:1b:12:b3:78:6f:af:3b:42:53:a3:
         e2:cc:c3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org