Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a343030303a3a2f33362d3336203d3e20323637393432.roa
File:                     323830343a353539303a343030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier:          84fJTH3gGDsLDLZ449+LWskM/1C9gGsbkogTKrhnpQg=
Subject key identifier:   2F:2F:4A:82:A5:65:D9:C1:D5:95:83:BD:96:01:55:55:C2:7A:E3:2A
Certificate issuer:       /CN=AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73
Certificate serial:       6957740D1DEC6BFD31EFDBAF295D530D7EAA71ED
Authority key identifier: AF:BE:5F:9D:8B:8C:17:D6:EB:A4:E6:94:F3:6F:C1:E7:9F:50:FF:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a343030303a3a2f33362d3336203d3e20323637393432.roa
Signing time:             Mon 19 Feb 2024 20:57:57 +0000
ROA not before:           Mon 19 Feb 2024 20:52:57 +0000
ROA not after:            Mon 17 Feb 2025 20:57:57 +0000
asID:                     267942
IP address blocks:        2804:5590:4000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:57:74:0d:1d:ec:6b:fd:31:ef:db:af:29:5d:53:0d:7e:aa:71:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73
        Validity
            Not Before: Feb 19 20:52:57 2024 GMT
            Not After : Feb 17 20:57:57 2025 GMT
        Subject: CN=2F2F4A82A565D9C1D59583BD96015555C27AE32A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c8:e6:f5:20:e5:6e:59:fa:66:70:e5:7d:95:
                    c1:1a:51:4a:18:29:05:c7:13:37:c2:eb:9e:d2:49:
                    50:d7:b6:57:8c:f0:d8:f5:d5:db:d1:5e:87:75:29:
                    2f:f7:23:e3:cd:47:82:e4:00:ed:25:6f:9f:be:31:
                    bf:c5:a6:c2:43:a3:ba:e9:1e:c5:1b:da:cc:f5:86:
                    d5:5a:24:fb:47:71:fe:48:49:4a:6b:97:56:f2:82:
                    72:e1:fa:4d:bc:61:22:a6:c0:f9:bd:df:69:eb:71:
                    a5:c4:b9:a3:aa:8e:bb:21:6b:77:04:5d:3f:25:f5:
                    9f:62:26:83:27:12:71:95:73:01:2a:a7:86:1a:17:
                    53:ad:41:d3:4c:84:83:b6:fd:a6:b3:e6:59:85:85:
                    44:96:4a:5a:1e:53:e9:d1:ae:91:c0:95:13:65:06:
                    0f:8c:6c:bf:7f:90:7d:46:2d:f1:4e:03:8b:5b:47:
                    81:39:52:57:0f:15:2e:26:f1:6f:4e:13:81:b0:e4:
                    9e:4b:f8:62:76:e8:6b:de:72:c1:14:6b:4d:0b:c1:
                    0b:aa:c2:04:59:76:d7:82:5d:02:ba:7c:9d:75:81:
                    7a:d0:b4:0e:da:11:7e:ed:38:23:9b:52:f5:81:04:
                    d2:4a:13:15:0e:01:b4:2c:a5:88:b3:ef:ca:16:a6:
                    76:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2F:4A:82:A5:65:D9:C1:D5:95:83:BD:96:01:55:55:C2:7A:E3:2A
            X509v3 Authority Key Identifier:
                keyid:AF:BE:5F:9D:8B:8C:17:D6:EB:A4:E6:94:F3:6F:C1:E7:9F:50:FF:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a343030303a3a2f33362d3336203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5590:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a1:89:f3:3d:f6:56:c5:6b:9e:b5:e9:4d:e8:94:77:5d:3d:64:
         9c:18:70:f5:f5:f7:0b:02:7c:9c:94:93:5e:29:8f:fc:0e:80:
         2f:40:ab:19:81:01:04:3f:32:2a:0f:d6:c9:c3:a1:ba:0f:b9:
         33:9b:2a:c6:f2:f2:20:b0:42:91:00:ab:d5:90:ae:4f:02:3e:
         c9:f3:c3:20:97:7d:e7:1c:ee:81:64:d4:26:e1:98:80:05:8e:
         05:6a:7a:b0:9f:ba:61:7d:ef:33:da:39:6d:a1:9f:5b:38:75:
         d1:c5:ad:bc:5a:39:6f:bf:3d:99:fd:03:d2:28:cb:0e:c2:28:
         69:7c:58:a8:2f:ec:4c:8e:d3:80:72:56:14:26:07:a3:b6:77:
         41:b3:e1:98:44:43:94:d4:3a:5c:16:47:17:6b:7a:a3:a1:88:
         77:7e:3d:21:90:12:1e:5a:5a:85:f7:da:c0:2e:a4:d3:45:25:
         be:11:2c:9b:4b:25:8f:dd:0f:1d:be:1c:12:15:91:e8:fa:e4:
         16:a3:b4:63:7b:28:0d:d4:c1:44:1f:73:e0:7a:27:a8:cc:04:
         59:85:3a:fa:48:39:74:10:2f:24:f1:5d:3b:cc:02:4c:f2:9c:
         1c:7d:e0:87:0d:75:a5:b3:3c:43:bb:8a:07:dd:00:5d:81:71:
         a6:ab:1f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org