Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a613030303a3a2f33362d3336203d3e20323637393432.roa
File:                     323830343a353539303a613030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier:          FmIO1rOzRgnhI7/1SA1TTJZKycgHG/JYURZQCeqJcVc=
Subject key identifier:   C7:5C:3E:46:53:03:88:7B:8A:61:9C:CF:D0:AA:01:7B:EC:A1:4E:9D
Certificate issuer:       /CN=AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73
Certificate serial:       07757DC3A5709D292692491B4D91D1BBA8F2E737
Authority key identifier: AF:BE:5F:9D:8B:8C:17:D6:EB:A4:E6:94:F3:6F:C1:E7:9F:50:FF:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a613030303a3a2f33362d3336203d3e20323637393432.roa
Signing time:             Mon 19 Feb 2024 20:58:20 +0000
ROA not before:           Mon 19 Feb 2024 20:53:20 +0000
ROA not after:            Mon 17 Feb 2025 20:58:20 +0000
asID:                     267942
IP address blocks:        2804:5590:a000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:75:7d:c3:a5:70:9d:29:26:92:49:1b:4d:91:d1:bb:a8:f2:e7:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73
        Validity
            Not Before: Feb 19 20:53:20 2024 GMT
            Not After : Feb 17 20:58:20 2025 GMT
        Subject: CN=C75C3E465303887B8A619CCFD0AA017BECA14E9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6e:09:c9:1f:fa:a6:a3:55:ee:39:05:43:c2:
                    96:cc:82:01:c8:43:d4:94:8b:68:0d:bc:e0:2f:ad:
                    a2:dc:13:aa:c1:f2:75:dd:e3:0b:cc:0d:c7:eb:e0:
                    1b:4e:46:c7:f8:e2:da:09:19:4a:60:1f:4f:f8:0f:
                    6b:37:cd:db:51:48:2b:61:e8:28:40:aa:e3:d6:1e:
                    d1:c2:e0:42:a3:95:30:91:f9:bc:3e:9b:66:59:d8:
                    71:bd:52:a7:77:d0:a3:7b:27:74:c0:cb:cf:06:7a:
                    f3:b3:a4:bb:f7:73:6e:5c:60:bd:50:1a:4b:e3:c2:
                    48:a1:6a:18:6a:ca:df:3d:b6:21:bd:90:5e:59:20:
                    cf:02:d4:83:f7:83:8a:a4:c8:e1:d7:0a:b4:df:87:
                    72:c7:79:80:aa:6b:1c:88:57:32:4d:29:f2:bb:ab:
                    94:b5:7d:93:06:4c:e6:74:1a:28:e0:ec:67:f3:04:
                    b0:a2:38:6f:af:87:bb:95:ff:68:57:c4:fb:8b:6a:
                    dc:ec:d0:bd:78:60:e2:4e:f5:4e:28:cb:5c:af:af:
                    d7:31:f6:46:f1:26:d4:d1:68:56:a4:d3:78:1e:b8:
                    35:d5:e6:13:a8:b1:44:f8:d9:9d:91:6c:aa:18:d2:
                    a6:47:03:ba:4a:8b:ed:ab:e9:33:c1:07:35:4c:aa:
                    c8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:5C:3E:46:53:03:88:7B:8A:61:9C:CF:D0:AA:01:7B:EC:A1:4E:9D
            X509v3 Authority Key Identifier:
                keyid:AF:BE:5F:9D:8B:8C:17:D6:EB:A4:E6:94:F3:6F:C1:E7:9F:50:FF:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a613030303a3a2f33362d3336203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5590:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8c:fd:15:52:04:7e:e6:d6:75:8e:f3:e7:81:9a:7b:0c:e9:f7:
         eb:c5:c1:cf:d0:a0:52:51:55:ca:a4:e7:da:e9:f8:bd:c1:c7:
         8e:e7:9c:2c:d4:a5:f4:cc:76:d8:ba:ce:63:84:11:a3:b7:cc:
         30:41:e1:09:d8:37:2d:2c:44:b5:47:d0:92:52:77:3f:b3:49:
         75:9a:f1:93:cd:be:30:83:83:e9:ec:f6:b7:a8:82:43:1c:ea:
         3e:ba:1b:4e:55:70:48:0e:23:97:2d:71:a6:90:e1:06:f4:c1:
         8e:f5:f2:ad:ef:6b:ca:9c:d1:3b:fa:b5:01:3c:ed:4e:14:eb:
         27:b2:06:52:76:1f:9c:ac:d4:3a:6f:c4:bc:5b:d6:8f:93:e6:
         e8:49:81:27:e3:f4:f1:7c:57:b0:94:d3:42:f3:49:ce:35:ab:
         c1:f4:c3:c3:3a:fc:5a:22:08:81:1d:18:23:57:f0:51:7a:7e:
         a9:ab:bd:12:7e:c8:cf:86:db:c9:5c:52:9f:e0:43:cb:78:de:
         a1:cb:17:14:9c:b3:66:f6:f5:66:10:21:48:da:18:35:0a:85:
         a3:19:5c:1d:6c:87:7c:2e:f5:9d:2c:f1:ac:ac:93:c2:f4:4f:
         73:47:ef:e6:ff:9e:50:db:8c:66:a0:eb:af:37:d1:08:0f:b9:
         95:ae:c5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:02 2024 by rpki-client on console-ams.rpki-client.org