Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5H1FT2my4MpiREG6xUNNuLKvFEVZvx51gz3JhGurhYWi/0/323830343a323332633a3a2f33322d3438203d3e20323634313436.roa
File:                     323830343a323332633a3a2f33322d3438203d3e20323634313436.roa (raw, json)
Hash identifier:          GiK3Dt3pjnusVD2Q4jOLcQ3XHxsUjRbNa5qt5fk7p7k=
Subject key identifier:   4C:58:0F:30:FE:58:48:0D:7C:CE:B5:8E:56:7A:C6:07:7E:64:DE:8C
Certificate issuer:       /CN=03CB08C60808A4C85337447A986A83078CD3CC42
Certificate serial:       2929C14A3361BEDF461817F3DDD21A0956E279BB
Authority key identifier: 03:CB:08:C6:08:08:A4:C8:53:37:44:7A:98:6A:83:07:8C:D3:CC:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03CB08C60808A4C85337447A986A83078CD3CC42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5H1FT2my4MpiREG6xUNNuLKvFEVZvx51gz3JhGurhYWi/0/323830343a323332633a3a2f33322d3438203d3e20323634313436.roa
Signing time:             Thu 22 Feb 2024 17:49:21 +0000
ROA not before:           Thu 22 Feb 2024 17:44:21 +0000
ROA not after:            Thu 20 Feb 2025 17:49:21 +0000
asID:                     264146
IP address blocks:        2804:232c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:29:c1:4a:33:61:be:df:46:18:17:f3:dd:d2:1a:09:56:e2:79:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03CB08C60808A4C85337447A986A83078CD3CC42
        Validity
            Not Before: Feb 22 17:44:21 2024 GMT
            Not After : Feb 20 17:49:21 2025 GMT
        Subject: CN=4C580F30FE58480D7CCEB58E567AC6077E64DE8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d3:fb:c6:0a:ac:d7:57:db:0f:3f:34:91:5f:
                    a4:d2:fb:c7:28:87:b5:b5:dd:1d:f8:58:d8:20:92:
                    12:0f:9d:16:7f:c5:18:b8:93:05:4d:a4:01:a3:45:
                    33:a8:a0:4e:6b:ef:16:12:2d:d7:5b:18:47:7e:0a:
                    2a:b9:1c:c2:07:9e:13:33:21:74:c6:18:14:2c:9c:
                    45:e2:98:aa:e3:db:85:db:c7:07:b1:15:04:e2:a9:
                    9d:0c:5b:25:d0:f7:fd:81:9a:ec:d2:d9:7b:ab:d8:
                    81:5e:8b:a3:12:4b:70:0a:dd:a9:4e:c9:06:65:13:
                    8c:4f:9d:21:2f:84:f3:62:15:c1:57:ba:e7:8f:f9:
                    af:3d:2a:54:17:75:f9:9b:d3:ab:bd:3f:51:65:d2:
                    b6:ad:1d:c8:0b:ac:41:d3:b9:a0:5a:7d:12:cc:37:
                    cf:4d:68:f7:f2:02:c1:e4:65:f2:1c:17:d9:41:c6:
                    c0:7a:7f:64:37:7a:17:71:1a:72:bb:b0:c3:a8:5f:
                    e5:25:2a:3d:ef:3e:ac:83:86:f7:3f:4c:8c:5d:83:
                    f3:4d:dc:1b:2e:00:63:3f:ea:f6:49:1e:23:a2:17:
                    cf:b0:07:b8:6a:52:1c:56:53:96:96:63:45:c2:5e:
                    7a:a9:e4:66:e6:5b:93:15:6d:65:b0:f9:31:b4:11:
                    fc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:58:0F:30:FE:58:48:0D:7C:CE:B5:8E:56:7A:C6:07:7E:64:DE:8C
            X509v3 Authority Key Identifier:
                keyid:03:CB:08:C6:08:08:A4:C8:53:37:44:7A:98:6A:83:07:8C:D3:CC:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5H1FT2my4MpiREG6xUNNuLKvFEVZvx51gz3JhGurhYWi/0/03CB08C60808A4C85337447A986A83078CD3CC42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03CB08C60808A4C85337447A986A83078CD3CC42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5H1FT2my4MpiREG6xUNNuLKvFEVZvx51gz3JhGurhYWi/0/323830343a323332633a3a2f33322d3438203d3e20323634313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:232c::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:b5:82:f2:4a:47:f5:79:d4:25:16:eb:78:f3:cf:b7:1e:48:
         a6:34:2a:ea:1d:5c:40:b9:c4:5e:d8:18:9d:4b:01:73:c2:f8:
         7c:13:84:f1:9a:92:c8:14:24:46:00:98:7e:66:36:af:50:57:
         04:97:e0:ef:bd:b4:77:2a:3b:40:b3:0e:f1:e7:d0:d0:65:0e:
         99:93:03:f1:d9:76:e0:d0:8a:61:39:9b:55:d2:50:0e:05:8b:
         8a:9e:53:0c:1e:fa:f9:6c:0e:cb:bd:59:26:62:eb:2a:fa:2e:
         f3:4e:04:52:16:3e:ea:6e:5e:ed:b5:fb:17:30:5b:7f:7c:26:
         b8:e8:b2:04:5d:97:cf:24:8c:1a:e2:f7:2a:99:85:b6:64:ef:
         b7:82:54:41:47:06:64:c4:ce:0a:bd:93:3b:3e:95:2e:c4:1c:
         02:24:35:a3:07:94:8b:90:bb:15:e0:c6:c3:2b:54:42:aa:83:
         e6:71:4d:fd:2e:dc:a6:1d:35:ad:d3:61:60:3e:d3:ec:11:21:
         1b:16:c4:67:94:1c:87:af:8f:b1:35:ba:b0:c6:d4:81:69:81:
         eb:36:35:fd:00:28:6a:1c:92:e2:77:6b:6a:7b:bc:fd:af:70:
         9e:01:1d:78:6c:37:9a:65:99:8a:3a:6a:ff:56:ba:e7:6c:db:
         33:eb:c4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org