Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a323030303a3a2f33362d3336203d3e20323637393432.roa
File:                     323830343a353539303a323030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier:          uc3Fq2DkkFNT469Kvf6oUhkD9AZbwYxoc31QM53r/V0=
Subject key identifier:   66:F4:47:37:4F:4C:03:91:FA:2C:1E:75:12:BC:4F:A5:D0:84:CA:1D
Certificate issuer:       /CN=AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73
Certificate serial:       49DC0B445E7A3241BE0F472B2820369361832368
Authority key identifier: AF:BE:5F:9D:8B:8C:17:D6:EB:A4:E6:94:F3:6F:C1:E7:9F:50:FF:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a323030303a3a2f33362d3336203d3e20323637393432.roa
Signing time:             Mon 19 Feb 2024 20:57:45 +0000
ROA not before:           Mon 19 Feb 2024 20:52:45 +0000
ROA not after:            Mon 17 Feb 2025 20:57:45 +0000
asID:                     267942
IP address blocks:        2804:5590:2000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:dc:0b:44:5e:7a:32:41:be:0f:47:2b:28:20:36:93:61:83:23:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73
        Validity
            Not Before: Feb 19 20:52:45 2024 GMT
            Not After : Feb 17 20:57:45 2025 GMT
        Subject: CN=66F447374F4C0391FA2C1E7512BC4FA5D084CA1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:08:be:21:e1:45:d8:c3:5a:d9:97:e3:a3:78:
                    4a:22:08:57:af:40:80:8e:80:2b:8a:ef:2c:65:6c:
                    2c:f0:4b:c2:ec:99:a8:97:f8:af:c3:24:64:ca:43:
                    77:1d:f3:de:36:0e:4c:d8:9f:6b:1a:08:d5:cc:6a:
                    47:20:0e:41:5d:52:57:99:f7:2d:06:93:f5:70:b1:
                    0f:47:d2:d0:3d:c1:79:b3:c1:75:1d:42:cd:80:26:
                    de:a3:d1:f5:ac:91:45:f2:83:94:3b:bf:f6:2e:38:
                    48:ed:78:02:63:85:95:f4:f0:79:15:d2:dd:27:37:
                    0c:20:df:b4:9a:78:96:84:ef:66:aa:82:e9:5b:6b:
                    c6:14:58:1f:eb:25:89:b7:97:0e:55:bf:ac:79:f5:
                    0d:50:d2:62:e1:b6:90:a4:d9:2c:35:c0:4c:25:c2:
                    4d:34:9a:1e:84:a3:3f:90:72:3d:df:39:46:9b:df:
                    bb:e7:d6:0f:09:42:6f:fb:5d:bd:c3:96:aa:d6:b0:
                    a2:88:5e:59:39:f5:f3:9d:7d:43:e1:92:4b:4f:1e:
                    86:78:63:9d:0f:f0:20:e1:f3:0f:a5:c0:f7:ed:d4:
                    f5:ad:79:f4:65:c6:db:60:4f:dc:8e:2e:dd:6a:4f:
                    3b:7c:a7:5f:5f:9d:4e:18:e8:f2:8c:a6:95:f9:ed:
                    98:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F4:47:37:4F:4C:03:91:FA:2C:1E:75:12:BC:4F:A5:D0:84:CA:1D
            X509v3 Authority Key Identifier:
                keyid:AF:BE:5F:9D:8B:8C:17:D6:EB:A4:E6:94:F3:6F:C1:E7:9F:50:FF:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a323030303a3a2f33362d3336203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5590:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9f:43:c4:36:3d:23:d1:97:b9:99:7f:a4:66:cf:a4:a5:d2:2d:
         b7:dd:e9:2c:d8:c0:e1:f1:6e:01:b4:bc:06:bc:03:c0:29:a2:
         c7:b9:07:a9:ab:ed:fb:f0:d6:a4:ad:30:6e:38:3c:89:50:f8:
         e8:16:b4:be:13:c6:89:d4:61:b9:ca:b6:29:b5:23:cc:af:b4:
         46:14:d2:33:21:7b:cb:10:2e:b1:20:8d:5f:47:ab:2a:bf:ab:
         58:8d:51:d8:cc:4d:43:68:95:ac:78:36:05:ee:8d:ee:ea:f3:
         38:b2:1a:f6:fd:72:19:cf:4d:5a:ac:ce:d4:e6:26:72:38:a9:
         f5:a0:c3:a9:90:b8:49:aa:bc:c3:04:85:be:3c:ec:15:3e:dc:
         6f:1a:2b:5b:e2:31:d6:b9:54:cc:ee:6f:de:6f:25:d9:f4:c0:
         0f:ad:6b:54:cf:c0:b9:f3:00:50:af:46:a8:de:ce:f0:32:c2:
         a5:f8:a5:63:ad:50:67:72:f8:20:1c:12:72:ae:66:b9:14:02:
         26:11:3f:ed:d4:b4:83:83:47:d5:1c:c1:26:e0:2d:b0:16:40:
         5b:14:28:f3:00:d8:6d:9a:4a:bb:c3:e1:d5:c5:ba:88:ea:f4:
         d1:e9:ec:e2:e7:e9:88:00:22:e7:7d:71:12:0f:b0:0c:2a:cb:
         d8:b6:d1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:51 2024 by rpki-client on console-ams.rpki-client.org