Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PRKEPB49LFReckQ4H9mccGzhZgGB5rAvVyrL46WYfQh/0/323830343a356264633a383030313a3a2f34382d3438203d3e20323638383733.roa
File:                     323830343a356264633a383030313a3a2f34382d3438203d3e20323638383733.roa (raw, json)
Hash identifier:          Uf1f5msaPaMadsHdxSeQBNonwghjCqFQqOoEflVATgk=
Subject key identifier:   88:28:C5:5D:78:F0:31:55:CA:BA:3E:21:08:BC:E8:35:E8:DA:EB:83
Certificate issuer:       /CN=47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2
Certificate serial:       382461643EB0924C3F6C861307BA6DA8C09BC4E4
Authority key identifier: 47:B9:F8:F7:8E:D6:BC:66:09:A0:FD:18:94:8F:DA:84:FF:69:7C:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PRKEPB49LFReckQ4H9mccGzhZgGB5rAvVyrL46WYfQh/0/323830343a356264633a383030313a3a2f34382d3438203d3e20323638383733.roa
Signing time:             Tue 17 Jan 2023 12:23:36 +0000
ROA not before:           Tue 17 Jan 2023 12:18:36 +0000
ROA not after:            Tue 16 Jan 2024 12:23:36 +0000
asID:                     268873
IP address blocks:        2804:5bdc:8001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:24:61:64:3e:b0:92:4c:3f:6c:86:13:07:ba:6d:a8:c0:9b:c4:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2
        Validity
            Not Before: Jan 17 12:18:36 2023 GMT
            Not After : Jan 16 12:23:36 2024 GMT
        Subject: CN=8828C55D78F03155CABA3E2108BCE835E8DAEB83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a9:96:88:2b:43:89:80:1b:89:e3:3f:e1:67:
                    4c:86:37:f1:17:2b:e4:ea:eb:dc:db:3e:17:19:fb:
                    f1:8b:c3:88:d6:9a:1c:ec:1c:3d:22:1b:6a:b7:f9:
                    6d:a6:65:94:09:e5:21:57:8d:6f:5e:ce:08:34:4b:
                    53:17:ef:bc:45:3a:96:4d:87:7e:ba:b1:25:10:ee:
                    67:7f:e1:b0:40:31:09:c8:83:53:5e:e5:82:a6:d2:
                    2e:b5:33:fb:57:d1:5c:1f:82:29:04:3f:44:18:bf:
                    e9:56:e1:95:b8:5c:45:be:ac:96:34:bd:17:5c:bc:
                    b3:c6:bb:a7:5a:8d:6f:d3:ae:5b:a7:91:e2:9f:16:
                    1e:fd:ad:c8:20:88:5e:72:63:88:6f:41:8b:f3:69:
                    6d:fb:03:9f:1a:f1:23:4b:5d:82:ba:04:f5:75:69:
                    b2:23:f8:6e:ba:6c:86:01:a0:27:e6:ef:3e:88:66:
                    40:2b:d9:6a:43:9f:64:da:40:57:f2:bc:c5:2e:06:
                    35:66:bf:97:fa:d1:f2:9d:b5:1f:c0:23:d4:de:7f:
                    a1:ef:06:5c:c7:a4:56:1a:70:55:e2:09:eb:38:d6:
                    46:38:63:00:b1:fb:6b:25:ba:2c:c0:44:a7:4b:ff:
                    8c:76:f3:87:ce:9f:a6:dc:24:d1:6e:27:32:c3:79:
                    52:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:28:C5:5D:78:F0:31:55:CA:BA:3E:21:08:BC:E8:35:E8:DA:EB:83
            X509v3 Authority Key Identifier:
                keyid:47:B9:F8:F7:8E:D6:BC:66:09:A0:FD:18:94:8F:DA:84:FF:69:7C:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PRKEPB49LFReckQ4H9mccGzhZgGB5rAvVyrL46WYfQh/0/47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PRKEPB49LFReckQ4H9mccGzhZgGB5rAvVyrL46WYfQh/0/323830343a356264633a383030313a3a2f34382d3438203d3e20323638383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bdc:8001::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:74:05:ff:b3:9e:42:25:e4:21:3c:73:a0:8f:c3:3b:15:7f:
         c3:96:17:09:be:49:8e:e0:0c:9e:01:26:57:61:7c:a0:e8:41:
         5f:e1:cc:67:cc:80:54:54:89:bf:6a:98:43:78:bd:63:27:72:
         23:b8:55:1e:90:05:f9:64:a9:45:6a:79:69:6e:01:23:f7:32:
         de:06:ca:7c:cf:23:0f:4f:6f:47:28:2e:03:dc:4f:6d:d5:34:
         60:bd:60:56:af:96:a6:b7:29:20:2d:9e:54:95:89:d9:13:a2:
         42:3b:4f:17:e9:b3:72:54:f0:fd:db:b8:a3:09:d5:bd:c6:45:
         dc:c0:53:ac:9f:1d:66:26:38:e9:a2:81:57:65:81:a0:0f:1f:
         7b:1d:f3:b3:84:c3:f2:cd:f9:f8:7d:2d:a6:3c:6d:67:e5:ae:
         85:c3:d6:2b:bd:cd:65:c0:c2:8c:40:0c:7c:b2:ff:22:81:c3:
         23:06:16:e7:bd:c1:dd:7e:91:f5:bd:27:56:8b:27:07:70:16:
         b2:ad:ac:3b:96:75:ad:7c:85:b0:c6:cb:84:7e:e3:88:02:2c:
         40:1d:11:38:83:e8:d3:6e:ef:23:66:69:f7:7f:a2:46:1f:49:
         1e:6d:06:7a:d1:2b:e9:5a:cf:aa:08:50:d6:c7:53:20:05:9a:
         0f:3f:84:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org