Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/323830343a373265343a343030303a3a2f34382d3438203d3e20323730383832.roa
File:                     323830343a373265343a343030303a3a2f34382d3438203d3e20323730383832.roa (raw, json)
Hash identifier:          Ek7d5p36ojXI7VYkl5gbCvQyJhIhKVqPoWxSPMtefgQ=
Subject key identifier:   CA:40:7A:D0:39:F0:01:E6:F5:7A:DB:B0:DF:43:92:78:84:60:54:97
Certificate issuer:       /CN=E3A3DABAD8DB57D603296A5C29D3D0FE0F517336
Certificate serial:       0CFF8CC62E840555027C1BC044026624DC6A01EC
Authority key identifier: E3:A3:DA:BA:D8:DB:57:D6:03:29:6A:5C:29:D3:D0:FE:0F:51:73:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A3DABAD8DB57D603296A5C29D3D0FE0F517336.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/323830343a373265343a343030303a3a2f34382d3438203d3e20323730383832.roa
Signing time:             Mon 15 Apr 2024 11:56:32 +0000
ROA not before:           Mon 15 Apr 2024 11:51:32 +0000
ROA not after:            Mon 14 Apr 2025 11:56:32 +0000
asID:                     270882
IP address blocks:        2804:72e4:4000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ff:8c:c6:2e:84:05:55:02:7c:1b:c0:44:02:66:24:dc:6a:01:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A3DABAD8DB57D603296A5C29D3D0FE0F517336
        Validity
            Not Before: Apr 15 11:51:32 2024 GMT
            Not After : Apr 14 11:56:32 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3d:6f:3c:20:5f:f3:c3:3f:46:38:5f:2f:8a:
                    22:08:00:71:80:c9:c8:0d:af:02:61:12:45:d6:cd:
                    5a:2d:db:98:4b:3b:78:db:f0:0e:8a:21:f7:44:1d:
                    a0:a5:c5:90:79:4e:03:ae:18:e3:b8:37:90:58:53:
                    75:de:71:5a:49:75:72:c1:32:58:d6:3f:38:10:ca:
                    6b:73:32:19:25:c7:a2:83:40:4a:0b:01:8d:7d:7f:
                    39:23:fd:a2:06:7f:30:8f:03:94:e4:86:43:98:23:
                    8c:cf:2d:67:b1:05:28:8e:ab:b7:e8:45:27:91:d6:
                    74:f2:71:7b:72:c0:78:70:3a:75:9e:19:dc:11:1a:
                    50:5e:a3:5f:c2:61:e0:97:54:4d:e0:57:cd:39:ce:
                    c9:76:46:14:98:b8:49:6d:61:aa:3a:ca:a8:e8:8d:
                    fa:ea:bc:15:26:38:57:87:fa:6f:15:ad:14:48:bd:
                    16:92:8b:a8:44:cd:6a:92:df:bd:05:99:c1:8b:6c:
                    2d:f7:ad:71:a0:de:04:26:91:3b:fd:91:3c:9c:53:
                    68:e1:5b:3f:1a:d6:b9:89:50:df:f5:00:97:12:10:
                    6d:8e:a8:9a:b8:74:82:84:9f:88:41:88:81:55:b6:
                    a8:8c:ee:f7:15:4d:8a:d1:91:e8:5e:4e:29:49:67:
                    60:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:40:7A:D0:39:F0:01:E6:F5:7A:DB:B0:DF:43:92:78:84:60:54:97
            X509v3 Authority Key Identifier:
                keyid:E3:A3:DA:BA:D8:DB:57:D6:03:29:6A:5C:29:D3:D0:FE:0F:51:73:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/E3A3DABAD8DB57D603296A5C29D3D0FE0F517336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A3DABAD8DB57D603296A5C29D3D0FE0F517336.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/323830343a373265343a343030303a3a2f34382d3438203d3e20323730383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72e4:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:ba:90:ff:ee:bd:bb:75:82:29:43:b2:01:89:81:b3:99:76:
         d8:30:41:8a:e0:98:fc:16:a2:2f:55:6c:9e:24:ae:57:20:84:
         24:f3:b8:a5:a5:db:d5:7a:87:c0:4e:bd:5e:3b:d7:c0:12:e7:
         c8:7e:25:47:ec:d8:67:b7:16:b8:9b:77:b0:b4:c6:ff:b1:ee:
         4b:26:89:e9:c4:c8:03:69:24:59:4d:e6:3e:26:e2:da:49:cf:
         9a:b9:9d:8e:e0:52:af:d6:29:04:cd:75:46:6a:b0:70:42:9f:
         d4:0c:bb:8a:31:ca:c2:b5:91:73:1f:0a:24:0b:17:bb:20:69:
         c9:ea:92:c9:9e:00:42:ca:63:4d:f9:15:3e:00:ea:20:76:10:
         0d:1c:39:37:5e:ba:da:42:03:72:c1:be:25:06:6d:d4:dd:b7:
         a9:c9:63:11:ec:9a:b8:87:2b:fc:93:b0:07:20:c3:34:df:88:
         ec:af:86:7c:a7:6c:ac:8a:39:5b:99:41:1a:ea:09:69:3d:76:
         b9:c3:2a:6b:75:65:40:f5:05:a6:8f:1a:17:6c:63:25:3f:2c:
         e9:2b:42:fb:59:b5:66:13:b7:6f:96:64:cb:13:53:56:4b:81:
         46:34:0a:00:c3:5d:5d:3c:b4:e4:2b:8e:ff:4d:05:55:7b:92:
         c4:4a:3f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org