Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/323830343a373265343a333030303a3a2f34382d3438203d3e20323730383832.roa
File:                     323830343a373265343a333030303a3a2f34382d3438203d3e20323730383832.roa (raw, json)
Hash identifier:          INO7thyA3HG0cC8TRAodI61QITrYmyysfflgMs+gjRc=
Subject key identifier:   37:C1:76:C0:BD:BB:60:F7:05:7E:6A:75:3A:46:CC:D0:39:6E:C6:3D
Certificate issuer:       /CN=E3A3DABAD8DB57D603296A5C29D3D0FE0F517336
Certificate serial:       65A5056409B0A729698A2BB45D46711BAE3FDEF8
Authority key identifier: E3:A3:DA:BA:D8:DB:57:D6:03:29:6A:5C:29:D3:D0:FE:0F:51:73:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A3DABAD8DB57D603296A5C29D3D0FE0F517336.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/323830343a373265343a333030303a3a2f34382d3438203d3e20323730383832.roa
Signing time:             Mon 15 Apr 2024 11:56:32 +0000
ROA not before:           Mon 15 Apr 2024 11:51:32 +0000
ROA not after:            Mon 14 Apr 2025 11:56:32 +0000
asID:                     270882
IP address blocks:        2804:72e4:3000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a5:05:64:09:b0:a7:29:69:8a:2b:b4:5d:46:71:1b:ae:3f:de:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A3DABAD8DB57D603296A5C29D3D0FE0F517336
        Validity
            Not Before: Apr 15 11:51:32 2024 GMT
            Not After : Apr 14 11:56:32 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0f:86:e1:d1:53:9d:5e:85:92:19:aa:91:51:
                    89:d9:21:c7:0f:24:4e:8e:ff:ab:3b:ce:47:ab:14:
                    cc:61:4c:00:2b:39:94:91:b3:4f:d2:d2:16:16:57:
                    39:bd:b1:96:ac:bd:a4:95:94:e6:60:51:32:3d:f2:
                    15:bf:cd:2a:6a:32:6a:e7:6e:31:d3:3b:c1:09:0c:
                    9c:24:ac:9c:32:95:63:7c:55:41:74:64:24:bb:9a:
                    68:ec:ef:93:66:e3:5a:e7:4e:21:58:b2:9a:11:c6:
                    a6:97:a3:30:79:5a:e3:20:c1:08:e8:1c:82:72:ef:
                    e7:9b:25:77:ee:fd:d7:0b:5b:80:e8:92:96:11:05:
                    2d:7f:53:a0:a5:03:1c:2c:7e:8a:cd:8f:85:bc:f5:
                    48:23:21:57:d5:c4:12:f2:bd:57:cc:5f:79:d0:09:
                    f1:e4:88:81:68:19:38:97:b8:e6:e9:af:be:65:63:
                    76:7b:cc:7a:13:75:d6:e2:86:e0:7d:bb:79:5d:44:
                    b2:2d:6e:d7:dc:e8:56:eb:47:bf:87:c5:ac:20:48:
                    20:9a:19:a1:04:f4:49:bf:cb:d9:6a:a8:5f:3b:fa:
                    2b:6c:2a:6a:53:9e:02:45:ab:4d:43:29:f6:4f:c9:
                    9c:45:7c:1e:d0:7d:e9:a0:d6:7c:ff:0f:7f:9a:5f:
                    a2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C1:76:C0:BD:BB:60:F7:05:7E:6A:75:3A:46:CC:D0:39:6E:C6:3D
            X509v3 Authority Key Identifier:
                keyid:E3:A3:DA:BA:D8:DB:57:D6:03:29:6A:5C:29:D3:D0:FE:0F:51:73:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/E3A3DABAD8DB57D603296A5C29D3D0FE0F517336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A3DABAD8DB57D603296A5C29D3D0FE0F517336.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/323830343a373265343a333030303a3a2f34382d3438203d3e20323730383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72e4:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:64:d5:2f:53:5a:9a:c1:24:cf:93:4e:c3:c8:93:c5:b0:c4:
         ee:ba:18:1e:a4:1f:06:39:43:21:fe:fd:66:ce:03:e7:d0:1f:
         5c:57:e2:86:90:73:74:5b:6f:65:22:76:12:aa:e1:33:29:e7:
         a5:46:6f:37:fb:30:29:eb:66:1e:53:6c:7e:1b:8f:d6:53:ac:
         d8:39:dd:f7:48:46:bd:4c:ea:f3:8c:de:c6:1c:00:f9:4e:2d:
         1d:b7:f4:e9:8e:a1:50:65:f1:62:f4:d0:45:ca:ab:c7:ad:bf:
         58:13:bc:4b:25:5a:be:92:50:db:72:0b:c7:c0:e0:29:68:23:
         a9:8c:87:8e:eb:e6:1e:fd:bd:a0:7f:f2:10:31:12:8a:eb:8d:
         0b:12:49:9a:dd:af:d7:81:ba:30:05:aa:29:43:d9:a2:b0:57:
         bf:d1:5c:34:ae:b6:e6:33:67:89:65:1e:24:41:7a:8f:4e:c0:
         db:c1:68:89:e8:62:ad:ba:e1:4c:de:87:fe:b8:82:70:1c:52:
         9c:01:fc:9f:84:ab:82:b4:f1:5e:66:44:9a:f3:57:35:84:5c:
         9b:38:f9:d3:01:92:46:8e:14:ca:27:af:c3:3f:a6:cb:f6:95:
         74:9b:90:c1:87:38:48:ce:44:71:4e:c8:a0:fe:39:3b:f1:28:
         7c:1b:b6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org