Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/323830343a366262343a393030303a3a2f33362d3336203d3e20323730343138.roa
File:                     323830343a366262343a393030303a3a2f33362d3336203d3e20323730343138.roa (raw, json)
Hash identifier:          cpOjH9+Jv+2+LHQ+pgjuvaC1tdwpX4F/U5DLbFzejho=
Subject key identifier:   9D:FB:10:A4:93:78:6F:A7:28:2F:C9:FF:C4:4E:6B:7B:FC:43:C3:0C
Certificate issuer:       /CN=24E0959AB7772BF66753580C3F4588BD984B000C
Certificate serial:       500167B2DAEF61F7950553026EE83C192C4BFB89
Authority key identifier: 24:E0:95:9A:B7:77:2B:F6:67:53:58:0C:3F:45:88:BD:98:4B:00:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24E0959AB7772BF66753580C3F4588BD984B000C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/323830343a366262343a393030303a3a2f33362d3336203d3e20323730343138.roa
Signing time:             Fri 01 Mar 2024 17:54:46 +0000
ROA not before:           Fri 01 Mar 2024 17:49:46 +0000
ROA not after:            Fri 28 Feb 2025 17:54:46 +0000
asID:                     270418
IP address blocks:        2804:6bb4:9000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:01:67:b2:da:ef:61:f7:95:05:53:02:6e:e8:3c:19:2c:4b:fb:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24E0959AB7772BF66753580C3F4588BD984B000C
        Validity
            Not Before: Mar  1 17:49:46 2024 GMT
            Not After : Feb 28 17:54:46 2025 GMT
        Subject: CN=9DFB10A493786FA7282FC9FFC44E6B7BFC43C30C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:37:f5:f7:db:35:17:81:5a:fe:9e:63:9a:86:
                    c7:13:fa:f3:24:94:57:dc:3a:f5:69:62:02:32:f6:
                    56:bc:e5:82:75:e4:e2:42:2d:0b:c8:ea:24:d5:79:
                    c6:74:c4:f9:61:60:5b:c1:ee:20:de:35:b1:37:30:
                    f1:fa:99:19:c3:6c:d4:ff:64:1d:93:6d:27:6c:db:
                    97:87:0d:02:98:8d:6c:5b:39:0b:7c:24:f2:7a:5b:
                    dc:87:39:b1:13:c8:2d:80:53:8c:33:67:eb:fd:4d:
                    e0:b6:5d:72:58:76:88:45:e6:27:a9:02:54:4a:66:
                    ff:24:99:0c:dc:ac:d1:7c:7c:7c:b7:f8:31:24:99:
                    8d:99:c6:9c:4d:76:f2:19:3d:d3:3b:41:d8:f5:cf:
                    cd:08:62:c6:1c:04:d4:7c:7e:8c:af:4c:3e:5a:99:
                    6d:81:f1:11:3b:dc:96:96:98:58:d7:11:b4:93:14:
                    58:a3:13:61:27:0d:20:ca:1d:28:37:b7:bc:91:58:
                    a1:fd:c4:e4:e3:dc:de:5a:52:fc:e9:35:55:cd:36:
                    ab:a3:7a:1f:01:a0:e2:81:0b:fd:1a:be:f4:7b:72:
                    7b:12:27:82:6d:7d:00:d6:33:55:7c:a4:63:57:d5:
                    31:af:0a:31:68:bb:5f:b7:8a:29:6b:0f:f1:cf:86:
                    af:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FB:10:A4:93:78:6F:A7:28:2F:C9:FF:C4:4E:6B:7B:FC:43:C3:0C
            X509v3 Authority Key Identifier:
                keyid:24:E0:95:9A:B7:77:2B:F6:67:53:58:0C:3F:45:88:BD:98:4B:00:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/24E0959AB7772BF66753580C3F4588BD984B000C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24E0959AB7772BF66753580C3F4588BD984B000C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/323830343a366262343a393030303a3a2f33362d3336203d3e20323730343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bb4:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         15:a7:9e:e2:34:f1:97:3c:48:13:21:23:db:f7:2e:3a:15:46:
         99:3e:7f:51:8a:23:46:89:72:34:bc:c2:f7:38:15:d1:7a:46:
         5f:d7:73:a3:f1:5e:db:5a:ab:ff:c3:ee:63:76:33:6c:2e:8b:
         a8:5c:de:6a:04:ad:d7:aa:3f:9a:c2:a8:3b:7a:a7:fc:41:b2:
         13:7e:70:95:76:3a:32:41:43:b5:c1:52:f3:4d:1c:7d:06:d3:
         a7:48:93:29:14:14:96:81:52:c7:d9:c7:10:f7:af:7a:7e:2f:
         f1:89:08:07:46:72:c7:f1:a8:4e:ae:7e:ef:09:47:c0:68:f4:
         48:22:fc:e3:b4:da:17:2d:1c:8b:a3:0b:e1:93:09:e4:37:52:
         35:3d:92:6d:40:01:3c:82:ca:7e:e0:ea:b8:7e:af:43:06:98:
         8d:8c:0d:a4:84:eb:7c:28:27:9d:c4:bc:5b:4b:b8:bc:a9:70:
         8e:43:5e:28:62:36:a3:69:73:9f:4c:9c:69:0f:0c:36:fa:c9:
         9a:3f:2e:b2:8f:9e:a9:2f:cd:47:a9:d5:11:fe:b4:73:c0:25:
         9d:16:d9:41:aa:a3:6a:08:53:39:ff:92:ab:85:3a:68:24:81:
         72:29:27:f4:43:a9:2b:af:96:2f:56:b6:89:67:72:02:94:36:
         08:42:00:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org