Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a333030303a3a2f33362d3336203d3e20323637393432.roa
File:                     323830343a353539303a333030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier:          VK62FC9gHo+ujI42h27B9XTUw1iXD8c6g5rueDsGMzs=
Subject key identifier:   53:6D:E8:D1:6C:71:6B:E9:F2:5C:54:1F:F4:B1:F8:47:D2:F3:A0:47
Certificate issuer:       /CN=AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73
Certificate serial:       154CB30327969305946E547AA54EEC73BC5B617A
Authority key identifier: AF:BE:5F:9D:8B:8C:17:D6:EB:A4:E6:94:F3:6F:C1:E7:9F:50:FF:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a333030303a3a2f33362d3336203d3e20323637393432.roa
Signing time:             Mon 19 Feb 2024 20:57:53 +0000
ROA not before:           Mon 19 Feb 2024 20:52:53 +0000
ROA not after:            Mon 17 Feb 2025 20:57:53 +0000
asID:                     267942
IP address blocks:        2804:5590:3000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:4c:b3:03:27:96:93:05:94:6e:54:7a:a5:4e:ec:73:bc:5b:61:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73
        Validity
            Not Before: Feb 19 20:52:53 2024 GMT
            Not After : Feb 17 20:57:53 2025 GMT
        Subject: CN=536DE8D16C716BE9F25C541FF4B1F847D2F3A047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:11:c5:6d:42:bd:b2:b7:ea:e3:36:79:63:e0:
                    99:03:4f:3e:84:6f:76:86:6f:64:69:8f:55:a6:b5:
                    a5:00:ee:7a:82:76:bf:2b:a7:e0:de:04:4c:7a:85:
                    90:fc:48:1f:37:e9:ea:df:91:71:fa:8e:4a:61:e8:
                    96:86:73:1d:33:58:15:7b:16:5b:ea:68:3a:05:e5:
                    93:ed:dd:37:21:cb:67:c4:00:78:95:7a:a4:f4:4b:
                    70:a3:78:8e:41:a7:e0:5a:e8:8e:a7:1b:1e:99:7c:
                    ac:2a:67:95:97:25:c8:31:05:43:4e:2b:ec:0a:7c:
                    10:24:25:6a:b8:41:f3:d7:c9:ff:5f:0e:24:e7:e7:
                    54:18:6d:4f:e2:e8:e0:91:81:0e:33:27:c8:c5:4c:
                    0c:23:fc:f7:92:69:be:03:a2:44:ea:0b:66:4a:ce:
                    6e:ea:5e:b5:22:a6:85:04:98:f0:90:6d:f2:08:8f:
                    a2:95:65:cb:3a:1e:72:57:07:78:f9:1f:58:7e:7e:
                    05:38:b9:ed:dc:38:2d:e9:97:5b:5e:62:b8:3d:63:
                    90:a7:ba:cd:7f:ee:8b:11:bf:aa:7d:3d:29:a5:a4:
                    a8:d7:28:f2:3b:ef:1d:83:9a:2f:72:8a:ab:28:2a:
                    91:11:39:b1:fc:f3:2d:70:58:92:01:a6:02:b9:dc:
                    07:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6D:E8:D1:6C:71:6B:E9:F2:5C:54:1F:F4:B1:F8:47:D2:F3:A0:47
            X509v3 Authority Key Identifier:
                keyid:AF:BE:5F:9D:8B:8C:17:D6:EB:A4:E6:94:F3:6F:C1:E7:9F:50:FF:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a333030303a3a2f33362d3336203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5590:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         55:1c:27:cb:bc:e9:0e:bf:b6:37:ba:84:b7:db:d8:a5:75:e9:
         40:96:02:a1:bd:88:55:29:97:69:04:b8:f5:78:ef:d8:c0:3c:
         de:02:fa:f0:40:ab:a5:57:51:4e:00:c7:dc:92:f4:89:1b:0a:
         9e:54:31:90:d8:9d:47:12:dd:f9:92:e2:5e:ae:bb:fb:4f:83:
         7b:a4:6b:af:03:ba:ae:90:bc:f1:16:06:eb:41:c2:83:26:3e:
         ec:59:a5:bb:37:f0:51:ed:93:1b:1e:9a:c9:2d:cf:a6:47:31:
         34:b8:fd:27:85:06:7d:2f:81:0a:29:47:ac:f8:df:02:b3:26:
         ff:be:29:36:87:6a:83:df:a3:ad:5c:d9:fd:d9:6c:70:55:06:
         d6:37:57:93:9a:90:f7:0e:50:4d:93:c9:d4:09:be:ef:dd:50:
         59:94:81:c2:a9:dd:ce:a3:8b:fa:05:ed:90:61:6d:f7:d2:a8:
         f1:e5:78:36:53:96:76:2c:70:82:d7:7b:9a:19:e4:1d:9b:bb:
         2d:cd:4e:ba:c0:4f:aa:50:8a:69:09:b8:0e:cd:d3:bd:e2:67:
         3a:85:55:da:b9:b4:fa:30:c3:c6:68:a1:a1:49:fd:56:73:82:
         f5:8d:e2:21:61:3b:21:04:f7:e4:22:72:36:7e:30:3b:d6:c8:
         e7:49:f1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:02 2024 by rpki-client on console-ams.rpki-client.org