Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a313030303a3a2f33362d3336203d3e20323637393432.roa
File:                     323830343a353539303a313030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier:          8NeNIcmev5qAblLjht9x0jkD0LX1Tf7ENQ/SF/hm3kg=
Subject key identifier:   99:86:2F:FC:93:3A:9E:19:4F:7F:7A:13:D7:65:91:AF:91:B2:AC:0E
Certificate issuer:       /CN=AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73
Certificate serial:       5FC414414546FF29B13CA9F24B009C283E46A0EC
Authority key identifier: AF:BE:5F:9D:8B:8C:17:D6:EB:A4:E6:94:F3:6F:C1:E7:9F:50:FF:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a313030303a3a2f33362d3336203d3e20323637393432.roa
Signing time:             Mon 19 Feb 2024 20:57:39 +0000
ROA not before:           Mon 19 Feb 2024 20:52:39 +0000
ROA not after:            Mon 17 Feb 2025 20:57:39 +0000
asID:                     267942
IP address blocks:        2804:5590:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c4:14:41:45:46:ff:29:b1:3c:a9:f2:4b:00:9c:28:3e:46:a0:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73
        Validity
            Not Before: Feb 19 20:52:39 2024 GMT
            Not After : Feb 17 20:57:39 2025 GMT
        Subject: CN=99862FFC933A9E194F7F7A13D76591AF91B2AC0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b5:0a:5f:f9:13:0b:12:e3:33:99:f2:b3:91:
                    02:a6:ae:a8:25:ff:59:6b:a5:27:bf:c7:61:fe:42:
                    f6:23:8c:85:91:01:9b:73:a0:c8:6e:85:99:83:a4:
                    fa:6f:53:7c:3d:46:97:42:01:ef:45:80:0f:55:c8:
                    1c:a6:c0:3c:0e:e3:93:ba:1c:d2:99:55:72:98:85:
                    62:67:f9:fa:d4:f1:bc:a1:6f:98:b1:35:84:45:70:
                    e2:00:64:91:bb:56:2c:26:6c:a5:bd:c8:b4:f8:b6:
                    e8:b7:ba:b5:6e:67:d4:b5:ae:4f:4e:d8:99:8e:e0:
                    94:b7:3d:9d:f5:1d:56:0e:07:58:2d:c8:d7:1f:24:
                    34:f2:bb:41:12:f7:24:27:29:53:1a:11:07:55:4f:
                    16:37:38:cf:f4:5a:7a:ec:38:bc:12:05:a8:38:ca:
                    d3:c5:01:27:95:3d:f4:f8:b9:4c:e8:62:59:5c:f3:
                    07:e2:3e:2b:1e:fb:3e:29:40:1a:c6:fa:02:92:a5:
                    26:27:cb:0d:b8:2d:d4:ee:79:54:32:34:9c:bf:76:
                    d2:13:bb:1a:24:c2:96:45:83:3f:fa:5a:e9:a7:29:
                    52:a8:ea:c5:62:9b:38:0d:36:76:ae:6a:b6:a3:11:
                    ab:02:ea:5a:8b:fd:57:88:8a:86:9e:4d:0a:24:e1:
                    f2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:86:2F:FC:93:3A:9E:19:4F:7F:7A:13:D7:65:91:AF:91:B2:AC:0E
            X509v3 Authority Key Identifier:
                keyid:AF:BE:5F:9D:8B:8C:17:D6:EB:A4:E6:94:F3:6F:C1:E7:9F:50:FF:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a313030303a3a2f33362d3336203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5590:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         50:50:60:dc:17:96:05:83:88:f4:fb:68:53:30:ff:99:0d:c8:
         ee:27:ba:06:ee:98:fa:4c:42:c8:0b:39:bf:d7:c4:b1:06:13:
         50:0a:00:62:2c:c4:71:a0:43:1c:1a:43:9e:e3:83:68:75:78:
         19:3f:23:d0:5f:40:8f:55:f8:35:76:cb:8d:91:19:2d:d6:57:
         be:4d:00:cd:7a:d9:40:18:ae:45:ee:c9:fa:6a:76:91:aa:10:
         54:a1:8f:11:67:d1:0f:4e:78:00:d6:cc:6f:7d:38:d1:af:ce:
         1a:f0:f3:63:db:61:41:58:7f:bb:f6:a1:03:de:35:14:18:c0:
         57:9d:94:2f:72:f2:b8:e1:87:f3:b3:b9:5e:63:2d:96:57:0d:
         78:2e:9f:4d:6a:31:60:90:33:4c:08:d1:7e:bc:20:59:42:b0:
         df:e3:b2:99:12:6e:07:40:60:51:54:a4:d2:b3:9c:27:79:2f:
         dd:58:67:93:25:9e:36:1d:b3:bf:80:b9:04:bd:49:c8:ea:22:
         cb:e9:e7:81:75:4d:5c:78:b9:40:e4:05:fa:9c:0a:c1:a8:43:
         7d:aa:fb:3c:e8:7b:71:1d:ff:c9:12:76:74:1d:31:22:32:fc:
         02:56:15:22:0d:a4:f0:65:18:a5:bc:14:44:4e:74:49:7b:55:
         04:37:57:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:02 2024 by rpki-client on console-ams.rpki-client.org