Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a3a2f33362d3336203d3e20323637393432.roa
File:                     323830343a353539303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier:          NMipfRE+D/M2lojRjCRRTSuvesEhrjqjiBVnDE9s3rE=
Subject key identifier:   71:DE:B3:C6:D7:45:A4:47:D3:92:40:14:D2:ED:59:45:E1:90:FE:80
Certificate issuer:       /CN=AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73
Certificate serial:       6462725FBCEB42D689475DAF7A3C45A947503D4A
Authority key identifier: AF:BE:5F:9D:8B:8C:17:D6:EB:A4:E6:94:F3:6F:C1:E7:9F:50:FF:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a3a2f33362d3336203d3e20323637393432.roa
Signing time:             Mon 19 Feb 2024 20:57:35 +0000
ROA not before:           Mon 19 Feb 2024 20:52:35 +0000
ROA not after:            Mon 17 Feb 2025 20:57:35 +0000
asID:                     267942
IP address blocks:        2804:5590::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:62:72:5f:bc:eb:42:d6:89:47:5d:af:7a:3c:45:a9:47:50:3d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73
        Validity
            Not Before: Feb 19 20:52:35 2024 GMT
            Not After : Feb 17 20:57:35 2025 GMT
        Subject: CN=71DEB3C6D745A447D3924014D2ED5945E190FE80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:35:bb:70:a3:6c:8d:be:1c:34:40:f1:a2:b1:
                    d2:cf:df:db:af:eb:e8:d6:3c:0c:68:bc:49:ea:15:
                    25:d3:76:7c:91:d4:89:06:1b:0c:3d:85:54:23:29:
                    ec:15:65:e8:2a:65:5b:a2:9c:8b:07:f8:90:a0:70:
                    55:5a:cf:f5:c0:2e:9c:9f:8b:4f:0b:a0:8e:5c:8f:
                    e0:a6:b5:47:47:2f:a4:36:d7:71:47:9b:63:c5:ee:
                    fd:6e:59:ed:31:8a:4a:2d:e2:f7:f2:8a:dd:dc:c3:
                    ae:23:e9:07:4c:2d:b5:f5:d6:9d:ec:7e:c7:49:6b:
                    28:c9:e7:5a:1b:7e:bc:14:12:11:4a:f1:db:38:27:
                    ce:e8:ae:08:cb:d3:5d:59:7e:0d:d6:fa:8a:54:5e:
                    17:d6:c0:6b:d7:e0:c7:c2:7f:9b:ea:0f:2f:fd:0a:
                    07:1a:6b:74:0a:fa:c7:aa:eb:e0:d2:bd:9f:63:ff:
                    56:56:eb:55:fb:cd:3c:e0:f5:7f:28:56:ed:6d:a6:
                    c0:de:87:d8:43:c9:11:e3:bd:29:6a:e6:69:a9:f8:
                    2b:7a:ba:27:77:7e:bb:d7:51:08:74:c9:b6:de:d4:
                    81:38:a6:ca:70:7f:7e:c7:3d:41:a3:a1:e4:6e:21:
                    8a:64:79:fd:a0:87:35:53:aa:38:9c:a4:df:ef:c3:
                    fd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DE:B3:C6:D7:45:A4:47:D3:92:40:14:D2:ED:59:45:E1:90:FE:80
            X509v3 Authority Key Identifier:
                keyid:AF:BE:5F:9D:8B:8C:17:D6:EB:A4:E6:94:F3:6F:C1:E7:9F:50:FF:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a3a2f33362d3336203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5590::/36

    Signature Algorithm: sha256WithRSAEncryption
         53:5a:c9:e4:04:15:50:f2:27:15:76:48:c7:47:6b:95:43:4b:
         9a:80:2b:94:ba:15:8e:55:08:16:04:06:8c:4f:a2:72:43:8a:
         10:a8:de:40:df:b2:de:7e:22:8d:3c:2d:88:03:89:f7:52:2f:
         0e:f5:06:03:98:80:c0:c1:bd:84:ec:95:b2:f1:bb:85:cd:7f:
         38:01:70:02:d0:3b:57:db:04:ce:9e:e2:76:ca:a4:f0:92:a0:
         99:ff:c9:44:05:66:34:be:ac:e1:5c:0b:50:39:37:cf:ca:a2:
         90:46:7d:0f:03:91:40:7e:b0:43:45:5f:31:58:22:43:21:53:
         85:77:5b:c2:9e:b3:9b:ce:f7:20:94:fd:a4:04:88:87:17:b0:
         58:15:69:c9:29:5a:2a:ef:68:f9:75:a0:c5:53:a0:37:a6:0a:
         53:32:fc:32:7e:69:bb:e7:6b:d1:f4:35:31:87:4d:17:bc:5f:
         37:46:03:58:25:09:4c:cb:e3:95:46:92:39:eb:97:f5:a1:95:
         89:13:c0:40:95:57:ae:3e:41:60:25:68:8a:6a:7c:b5:e7:fc:
         45:a9:1a:6b:54:41:13:8d:a7:5b:cb:d2:ec:1e:20:82:91:8c:
         df:89:1c:f0:c1:d3:c2:e7:56:fe:e8:8c:01:ae:21:56:95:dc:
         ba:2c:04:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:51 2024 by rpki-client on console-ams.rpki-client.org