Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5KmGb7ewX6qGJx4DVsub4UA5MPzhnKCzZwRAJcHQXtWh/0/323830343a336365303a3a2f33322d3438203d3e20323636323430.roa
File:                     323830343a336365303a3a2f33322d3438203d3e20323636323430.roa (raw, json)
Hash identifier:          VBbLDO0wGFn2lJRtTanCFiQ7NQAm0kqOaSHHd2QvNHE=
Subject key identifier:   40:06:33:06:86:25:F4:9D:C9:31:00:4F:6E:18:51:4B:02:5C:3F:EB
Certificate issuer:       /CN=81E42B1CBE562AD0450D7F0F66931ED951752ECD
Certificate serial:       2AFFE52E7CF799D130EFACD6277683C9C049D999
Authority key identifier: 81:E4:2B:1C:BE:56:2A:D0:45:0D:7F:0F:66:93:1E:D9:51:75:2E:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81E42B1CBE562AD0450D7F0F66931ED951752ECD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5KmGb7ewX6qGJx4DVsub4UA5MPzhnKCzZwRAJcHQXtWh/0/323830343a336365303a3a2f33322d3438203d3e20323636323430.roa
Signing time:             Wed 27 Dec 2023 19:50:43 +0000
ROA not before:           Wed 27 Dec 2023 19:45:43 +0000
ROA not after:            Wed 25 Dec 2024 19:50:43 +0000
asID:                     266240
IP address blocks:        2804:3ce0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ff:e5:2e:7c:f7:99:d1:30:ef:ac:d6:27:76:83:c9:c0:49:d9:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81E42B1CBE562AD0450D7F0F66931ED951752ECD
        Validity
            Not Before: Dec 27 19:45:43 2023 GMT
            Not After : Dec 25 19:50:43 2024 GMT
        Subject: CN=400633068625F49DC931004F6E18514B025C3FEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:64:48:b2:de:bd:6f:75:fc:ba:a1:08:22:ba:
                    c8:f6:a3:c4:b9:02:8b:35:21:c1:ab:82:0c:8c:07:
                    7c:ca:c0:a1:6a:42:23:79:2f:b7:3c:d2:03:a6:87:
                    52:3a:e9:a3:8a:3a:b2:16:e0:7f:54:b6:30:24:9a:
                    5d:9e:56:df:16:de:16:93:a8:37:ab:b0:58:27:ca:
                    77:cb:c5:c8:32:f7:63:5a:42:3f:86:9b:b5:3f:cb:
                    ba:ae:a4:2b:fb:ce:34:84:93:4b:14:2f:24:54:a2:
                    6d:26:aa:f6:49:0c:69:3f:e9:0d:ff:a5:9d:55:4f:
                    6e:a4:cc:b9:77:d6:d1:18:b6:1a:13:a9:ca:2c:bf:
                    fe:72:42:9a:70:88:ba:14:25:44:cd:89:35:f0:d2:
                    93:0f:67:66:34:ed:53:72:42:0c:c4:c2:ac:d5:a9:
                    42:4b:32:4a:38:68:42:a8:3c:d7:1c:e4:9d:1a:ab:
                    e6:c1:ba:d2:db:65:e7:2d:e5:d9:62:b2:1c:6c:df:
                    08:cc:c7:72:1e:4b:66:56:ed:52:23:20:d0:a2:5c:
                    7b:ca:d5:58:55:0e:d4:d4:b0:a4:4e:0b:75:5c:d7:
                    be:f4:ac:8d:58:c6:15:66:81:24:37:68:70:1b:64:
                    85:47:de:ca:cc:63:fa:0e:53:74:b2:24:45:59:45:
                    f3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:06:33:06:86:25:F4:9D:C9:31:00:4F:6E:18:51:4B:02:5C:3F:EB
            X509v3 Authority Key Identifier:
                keyid:81:E4:2B:1C:BE:56:2A:D0:45:0D:7F:0F:66:93:1E:D9:51:75:2E:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5KmGb7ewX6qGJx4DVsub4UA5MPzhnKCzZwRAJcHQXtWh/0/81E42B1CBE562AD0450D7F0F66931ED951752ECD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81E42B1CBE562AD0450D7F0F66931ED951752ECD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5KmGb7ewX6qGJx4DVsub4UA5MPzhnKCzZwRAJcHQXtWh/0/323830343a336365303a3a2f33322d3438203d3e20323636323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:07:1a:2b:f0:e8:67:26:94:ab:75:b1:f9:59:f9:e9:28:9c:
         71:45:a5:cf:e7:d1:81:4b:a3:bf:5d:09:16:31:8d:cf:62:be:
         18:70:95:45:37:e6:47:be:db:f3:a2:9e:d5:40:fd:24:30:08:
         5f:fd:7b:41:c1:27:18:2e:1f:af:c7:80:25:14:88:05:00:d7:
         08:6a:85:69:89:2e:e0:03:8e:56:e6:c8:bf:8c:1e:76:21:bc:
         28:09:30:ff:f5:b2:d5:3e:c8:8e:27:1b:de:db:2e:d3:f0:d3:
         c7:11:68:68:a6:34:2f:49:c6:9a:6f:73:ca:59:25:68:9c:ed:
         1a:56:e6:27:14:55:e8:2f:7b:ec:b3:e6:08:70:1b:ef:d4:69:
         94:c8:c1:1b:e3:c7:df:67:23:f5:d0:33:19:b9:7d:8e:35:4a:
         68:21:30:47:07:58:29:1c:7b:9e:5b:46:bc:f1:91:27:5d:65:
         4f:ab:d4:00:45:eb:94:4d:9f:4e:b3:d6:1b:62:64:6f:53:eb:
         5f:7c:cb:99:ce:ed:77:e7:2b:18:4f:87:5d:ac:de:4e:a6:4c:
         76:67:95:ad:78:d1:a8:82:2b:61:78:d2:cc:d3:7f:72:08:9c:
         6b:4d:37:28:e2:38:e5:ea:3c:f6:b2:4d:b3:c9:c3:38:51:eb:
         1c:6e:e9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org