Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/0/323830343a376465343a3a2f33322d3438203d3e20323731353839.roa
File:                     323830343a376465343a3a2f33322d3438203d3e20323731353839.roa (raw, json)
Hash identifier:          A2Wzhj0TzZPJiMMIL57uoue1k9SGzuIIZpNHWhct6ng=
Subject key identifier:   A0:29:B1:30:43:04:E3:1B:34:40:74:52:C1:BB:FA:85:09:23:DD:BA
Certificate issuer:       /CN=2CC0C73BB0ACC7A9747F8E96224D537CBA2CAE69
Certificate serial:       75CA9E9A853D2EA45C4A968695AED62A0AEE7B71
Authority key identifier: 2C:C0:C7:3B:B0:AC:C7:A9:74:7F:8E:96:22:4D:53:7C:BA:2C:AE:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CC0C73BB0ACC7A9747F8E96224D537CBA2CAE69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/0/323830343a376465343a3a2f33322d3438203d3e20323731353839.roa
Signing time:             Thu 28 Mar 2024 15:55:11 +0000
ROA not before:           Thu 28 Mar 2024 15:50:11 +0000
ROA not after:            Thu 27 Mar 2025 15:55:11 +0000
asID:                     271589
IP address blocks:        2804:7de4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ca:9e:9a:85:3d:2e:a4:5c:4a:96:86:95:ae:d6:2a:0a:ee:7b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CC0C73BB0ACC7A9747F8E96224D537CBA2CAE69
        Validity
            Not Before: Mar 28 15:50:11 2024 GMT
            Not After : Mar 27 15:55:11 2025 GMT
        Subject: CN=A029B1304304E31B34407452C1BBFA850923DDBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:53:ba:55:ee:da:b9:0a:73:6c:1c:c6:8c:f3:
                    af:3d:c2:eb:b4:67:eb:c0:f4:12:59:00:4f:c4:b4:
                    ed:c7:9b:bc:8d:f4:b9:b4:3d:12:15:de:85:c0:8e:
                    9e:22:1e:11:3d:67:6d:71:01:cd:99:21:ff:a7:55:
                    af:f4:4e:f4:dc:e5:38:49:2b:a9:c4:70:d7:5f:96:
                    23:45:56:1d:1b:55:e3:be:7e:09:23:6e:3b:c6:4f:
                    0c:b7:66:31:88:29:24:2c:3a:15:ab:54:bf:83:ec:
                    3d:94:20:e5:0b:16:16:ca:38:a4:6f:62:0d:fa:8e:
                    35:f4:f7:12:bb:3b:91:cb:20:92:bb:d0:4f:f7:6e:
                    86:3a:ef:94:29:a9:f9:d4:e3:0d:ef:6c:72:80:cb:
                    e9:dc:3a:40:51:8e:61:83:a2:a9:e9:9a:b6:b8:7c:
                    4d:b7:9b:4f:05:f7:93:52:6e:a0:92:1a:94:3a:48:
                    84:ce:01:89:11:e8:7d:77:81:c9:cf:83:0d:b2:aa:
                    97:2d:94:75:76:72:73:8d:b2:d2:0a:d2:b4:b6:25:
                    9c:07:5a:21:e2:4d:ac:27:58:f7:d1:6c:9d:93:63:
                    15:6f:b4:f8:71:7e:c5:f1:60:5e:e9:45:32:08:6d:
                    7e:8e:fa:13:f6:21:04:fa:be:98:41:6f:51:9e:ef:
                    00:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:29:B1:30:43:04:E3:1B:34:40:74:52:C1:BB:FA:85:09:23:DD:BA
            X509v3 Authority Key Identifier:
                keyid:2C:C0:C7:3B:B0:AC:C7:A9:74:7F:8E:96:22:4D:53:7C:BA:2C:AE:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/0/2CC0C73BB0ACC7A9747F8E96224D537CBA2CAE69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CC0C73BB0ACC7A9747F8E96224D537CBA2CAE69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/0/323830343a376465343a3a2f33322d3438203d3e20323731353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7de4::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:22:25:e1:4a:09:cf:15:79:37:ae:42:9b:a7:67:4c:49:ea:
         92:eb:8a:4e:e5:2d:60:dc:ba:e4:53:63:9f:6a:f9:b9:ee:e3:
         8b:ff:fd:69:95:fa:db:07:b3:6a:38:67:7d:b7:57:f7:55:f5:
         01:fd:b7:b2:12:75:25:f5:ce:32:9b:1d:97:d5:11:df:fe:ef:
         1a:26:89:d9:cc:91:32:02:16:92:2d:69:36:11:85:37:7a:d7:
         63:44:6f:ed:f4:37:95:00:b3:33:fd:72:d0:5b:02:f1:fc:88:
         7d:1f:9d:40:ae:fe:60:37:4d:92:a8:e3:39:e6:5b:c2:a2:ed:
         2a:be:2d:16:be:e4:c7:e2:0f:c3:f4:b3:49:8c:a7:13:73:8c:
         fb:94:87:70:f8:1d:3f:68:3e:07:5c:ad:2d:1e:b7:79:17:73:
         90:97:71:d1:34:9a:f7:e9:94:0f:34:53:34:cb:60:4b:cb:08:
         7e:d3:fa:63:c3:60:fa:56:3f:3c:0f:ae:3d:41:39:a7:52:03:
         5a:bb:6c:fa:96:f8:97:d7:36:b8:d6:50:59:87:0c:1a:1c:97:
         53:62:54:95:e2:d5:c2:2d:fb:65:98:9b:ec:1e:b2:00:2d:9d:
         88:7b:3d:7d:b3:44:1b:fd:65:8f:9e:88:16:2a:3d:38:4a:66:
         02:0c:f3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org