Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PRKEPB49LFReckQ4H9mccGzhZgGB5rAvVyrL46WYfQh/0/323830343a356264633a333a3a2f34382d3438203d3e20323638383733.roa
File:                     323830343a356264633a333a3a2f34382d3438203d3e20323638383733.roa (raw, json)
Hash identifier:          IU0LRApvnNX9SzTiVPbGFtNzEBujhMr1YQxXh/NdqdM=
Subject key identifier:   99:D2:14:56:EA:0F:A4:96:95:22:B0:B2:A0:9E:61:47:0E:0B:05:39
Certificate issuer:       /CN=47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2
Certificate serial:       2AFF4497225883E192D798762C744EB23D07833B
Authority key identifier: 47:B9:F8:F7:8E:D6:BC:66:09:A0:FD:18:94:8F:DA:84:FF:69:7C:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PRKEPB49LFReckQ4H9mccGzhZgGB5rAvVyrL46WYfQh/0/323830343a356264633a333a3a2f34382d3438203d3e20323638383733.roa
Signing time:             Tue 17 Jan 2023 12:23:33 +0000
ROA not before:           Tue 17 Jan 2023 12:18:33 +0000
ROA not after:            Tue 16 Jan 2024 12:23:33 +0000
asID:                     268873
IP address blocks:        2804:5bdc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ff:44:97:22:58:83:e1:92:d7:98:76:2c:74:4e:b2:3d:07:83:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2
        Validity
            Not Before: Jan 17 12:18:33 2023 GMT
            Not After : Jan 16 12:23:33 2024 GMT
        Subject: CN=99D21456EA0FA4969522B0B2A09E61470E0B0539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:94:96:08:f0:c0:ed:34:fa:e7:42:ad:39:a0:
                    c3:01:a4:59:e9:37:09:a6:7e:e7:b3:6e:c0:01:ea:
                    26:33:27:93:fd:4b:af:9a:f5:a5:d2:b1:86:85:67:
                    0a:d3:25:10:e1:56:60:87:83:0e:40:c4:b3:87:03:
                    b4:ed:d9:a6:8f:5d:16:aa:1a:57:d8:09:8e:8f:af:
                    f4:8d:0f:e8:c6:f6:32:32:9e:15:07:cc:8e:4f:19:
                    1a:a5:db:0a:3b:ae:58:e7:c5:b8:e7:42:61:86:10:
                    0f:46:fc:49:25:16:dd:90:c8:ad:ae:96:58:9b:35:
                    76:10:57:b9:dd:b5:0d:10:f1:0d:ce:7e:42:c6:10:
                    75:f6:95:80:34:9a:5a:d4:7d:a9:03:02:09:2b:a5:
                    de:7f:21:1e:bd:8f:66:79:0b:dd:10:bf:23:5d:09:
                    73:55:6a:f6:7c:b0:68:1a:0d:ab:b0:5d:21:17:bc:
                    a9:35:6c:b2:62:a7:ef:f8:31:38:87:cd:0a:00:d2:
                    ed:b9:73:88:cb:a5:42:fa:cb:d5:35:cd:6d:85:6f:
                    d7:34:a3:7a:0b:31:f7:73:26:0b:07:6c:35:ba:4b:
                    f3:b9:0e:07:91:5b:a9:c0:74:4a:4d:33:36:ea:12:
                    32:71:14:96:86:95:e2:b8:e2:68:72:31:df:17:c1:
                    f0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D2:14:56:EA:0F:A4:96:95:22:B0:B2:A0:9E:61:47:0E:0B:05:39
            X509v3 Authority Key Identifier:
                keyid:47:B9:F8:F7:8E:D6:BC:66:09:A0:FD:18:94:8F:DA:84:FF:69:7C:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PRKEPB49LFReckQ4H9mccGzhZgGB5rAvVyrL46WYfQh/0/47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PRKEPB49LFReckQ4H9mccGzhZgGB5rAvVyrL46WYfQh/0/323830343a356264633a333a3a2f34382d3438203d3e20323638383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bdc:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:bf:3b:84:60:0c:ef:2b:58:77:ab:1c:33:32:4b:a0:7c:79:
         81:0e:bb:d3:a7:24:79:2e:1e:a3:4d:75:64:a8:79:22:f3:41:
         e9:42:08:37:b2:0a:07:47:34:a8:58:aa:58:1c:22:59:01:09:
         e4:a6:6c:3f:4c:9c:4f:2d:39:df:7f:6a:43:fe:d9:63:9d:39:
         32:92:2b:43:a5:dc:a4:4e:8c:fa:52:73:ac:3d:cd:9a:8f:a5:
         71:c5:f8:4c:73:2d:98:f5:58:c6:0d:da:9e:1f:a1:5e:1b:3e:
         9f:76:c9:2c:fd:ec:7b:20:59:52:c0:2a:2e:ba:d8:a8:d1:09:
         73:84:b8:c0:2f:71:d1:6d:bc:52:36:50:f8:ea:b0:3f:b0:31:
         e9:c1:e7:6f:bd:cf:80:bb:19:9a:9c:15:08:74:47:f0:07:c3:
         bc:52:7a:93:85:a8:02:12:81:ab:65:c1:ab:8f:f4:9d:a4:1b:
         b5:47:86:89:77:02:7d:62:38:b6:cd:e8:0f:d0:bb:6e:c6:a9:
         b1:7c:2b:50:90:25:99:bf:75:fe:a6:b2:8f:f7:29:92:ce:c2:
         2f:12:5c:42:8d:1c:aa:45:46:7f:f6:1f:ca:84:c4:c6:3a:56:
         7e:cb:34:f6:40:71:eb:3f:11:6f:af:d4:d0:fd:fd:e1:30:b7:
         23:a3:f5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org