Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/323830343a363738303a3a2f33322d3332203d3e20323639363332.roa
File:                     323830343a363738303a3a2f33322d3332203d3e20323639363332.roa (raw, json)
Hash identifier:          msnF5Cnla44LPWkDQ7v6aiqlwgrhALiasmrz9YPbev8=
Subject key identifier:   5F:40:13:94:10:07:1F:91:B5:64:89:84:29:B8:69:A8:70:BB:25:31
Certificate issuer:       /CN=C9B2C49F87C474742D6F0F7C7A3D1DCC8419346A
Certificate serial:       18BECCEB4F78F9E26DC1662FD099FF7D7BA785DE
Authority key identifier: C9:B2:C4:9F:87:C4:74:74:2D:6F:0F:7C:7A:3D:1D:CC:84:19:34:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9B2C49F87C474742D6F0F7C7A3D1DCC8419346A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/323830343a363738303a3a2f33322d3332203d3e20323639363332.roa
Signing time:             Fri 01 Mar 2024 21:54:53 +0000
ROA not before:           Fri 01 Mar 2024 21:49:53 +0000
ROA not after:            Fri 28 Feb 2025 21:54:53 +0000
asID:                     269632
IP address blocks:        2804:6780::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:be:cc:eb:4f:78:f9:e2:6d:c1:66:2f:d0:99:ff:7d:7b:a7:85:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9B2C49F87C474742D6F0F7C7A3D1DCC8419346A
        Validity
            Not Before: Mar  1 21:49:53 2024 GMT
            Not After : Feb 28 21:54:53 2025 GMT
        Subject: CN=5F40139410071F91B564898429B869A870BB2531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:45:74:da:fd:8a:f0:04:04:9f:95:4a:83:7f:
                    a8:87:81:aa:f6:b5:92:4b:15:75:5e:ad:04:fc:a4:
                    d6:c3:5e:bc:9f:6f:33:95:00:e1:f2:9e:b3:dd:8b:
                    63:e7:ed:8f:17:cb:67:e8:42:54:ea:e1:94:62:56:
                    fa:4c:21:b2:70:5d:24:80:b6:30:87:ea:88:bc:90:
                    7a:a5:19:52:08:0f:44:e6:dd:ea:fc:45:8e:85:07:
                    22:8c:4f:89:63:42:04:5f:6c:90:bd:05:7e:24:fd:
                    fa:4a:ec:8d:c5:75:19:eb:bd:f6:30:f8:e3:e3:62:
                    ea:5c:09:49:5c:a0:46:d5:7b:43:26:b6:90:f8:c2:
                    14:d1:c7:8d:f8:7c:19:32:2e:fa:58:fa:d5:b1:e9:
                    0e:8e:e8:cc:2d:4f:e6:e1:92:60:a1:bd:43:98:74:
                    38:55:d4:a2:1d:4b:11:dd:49:29:33:f0:6d:a9:ec:
                    27:42:40:e8:70:77:8f:33:4c:28:3e:c7:c1:3d:b4:
                    02:16:c0:2a:ff:64:4c:c2:78:1f:be:87:1f:cd:8c:
                    07:0e:6a:fd:8e:9a:a9:b6:07:d8:f1:19:74:c0:52:
                    f8:01:3f:34:59:6e:06:3f:d7:a2:c5:39:93:1f:35:
                    c9:3a:02:aa:83:d8:b3:f2:60:1b:13:7b:60:32:67:
                    71:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:40:13:94:10:07:1F:91:B5:64:89:84:29:B8:69:A8:70:BB:25:31
            X509v3 Authority Key Identifier:
                keyid:C9:B2:C4:9F:87:C4:74:74:2D:6F:0F:7C:7A:3D:1D:CC:84:19:34:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/C9B2C49F87C474742D6F0F7C7A3D1DCC8419346A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9B2C49F87C474742D6F0F7C7A3D1DCC8419346A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/323830343a363738303a3a2f33322d3332203d3e20323639363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6780::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:76:d9:77:25:cb:b9:ef:5a:c9:64:aa:a3:8c:af:82:87:25:
         a6:07:bc:33:0f:89:f1:8c:35:f0:80:74:74:97:21:f1:c1:c7:
         46:c3:b3:5c:5c:8d:d2:84:57:be:3f:38:9a:fd:55:b2:52:cd:
         cf:0c:65:b3:74:87:18:dd:11:13:39:1b:0d:fd:91:88:2d:6f:
         45:57:5c:61:7a:1c:7b:c1:7c:44:5f:2e:57:d3:0b:d4:27:45:
         26:0b:6d:0b:34:64:70:5c:dc:05:4c:7b:36:0c:84:c4:46:c0:
         27:3f:36:ab:bd:0a:b1:25:69:a3:12:0b:34:c7:01:bd:f9:1e:
         d6:4e:a2:ed:2a:a5:c6:c7:03:10:f0:8b:e8:fd:2f:80:00:56:
         66:0a:7e:89:cd:9a:f1:48:5b:3f:87:d3:35:24:9d:3a:02:7a:
         e2:69:86:78:62:3b:68:78:f6:59:0f:2c:21:1c:96:1e:b0:53:
         30:81:a7:a9:96:c0:b5:1b:2a:86:88:67:f3:f8:c5:39:3d:af:
         ec:7b:a6:64:3a:d2:6f:af:24:d8:f8:0d:00:52:b2:8d:d4:9e:
         91:b5:19:eb:4f:f5:3c:5c:e2:80:16:81:6d:9f:72:02:8e:68:
         f6:6b:b8:3f:24:22:8b:08:1c:41:e7:58:5a:8c:a9:51:56:b8:
         f6:f3:de:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org