Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/0/323830343a383833633a313330303a3a2f34302d3430203d3e20323732373538.roa
File:                     323830343a383833633a313330303a3a2f34302d3430203d3e20323732373538.roa (raw, json)
Hash identifier:          pVw7MN2JBiNc1gSN+NOaZ9RmUz1326nM1Zi4oPsVWc0=
Subject key identifier:   CC:53:7F:9C:1D:F8:6B:28:BD:B1:4C:70:DB:E2:45:B8:7E:1E:87:1F
Certificate issuer:       /CN=E9CFECE0D0D2F478E74F51A1BAEA88E2F24B3631
Certificate serial:       3E61811146155E52C21B2F06A357A27DEFFAFDBA
Authority key identifier: E9:CF:EC:E0:D0:D2:F4:78:E7:4F:51:A1:BA:EA:88:E2:F2:4B:36:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9CFECE0D0D2F478E74F51A1BAEA88E2F24B3631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/0/323830343a383833633a313330303a3a2f34302d3430203d3e20323732373538.roa
Signing time:             Tue 15 Aug 2023 20:12:16 +0000
ROA not before:           Tue 15 Aug 2023 20:07:16 +0000
ROA not after:            Tue 13 Aug 2024 20:12:16 +0000
asID:                     272758
IP address blocks:        2804:883c:1300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:61:81:11:46:15:5e:52:c2:1b:2f:06:a3:57:a2:7d:ef:fa:fd:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9CFECE0D0D2F478E74F51A1BAEA88E2F24B3631
        Validity
            Not Before: Aug 15 20:07:16 2023 GMT
            Not After : Aug 13 20:12:16 2024 GMT
        Subject: CN=CC537F9C1DF86B28BDB14C70DBE245B87E1E871F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:1f:3a:ba:00:ba:9b:bc:80:41:d1:a6:bf:ec:
                    36:95:e9:0c:0c:aa:00:ba:60:ee:43:05:f7:e8:69:
                    0b:e2:54:25:59:06:0b:d3:dc:ed:95:8c:4c:74:89:
                    f7:cb:5f:ff:26:96:5d:e3:af:12:82:30:9a:cf:31:
                    0b:62:bc:dc:16:d2:50:aa:85:6d:22:94:f3:0c:cf:
                    d6:ae:9c:cd:0f:89:51:9a:a9:8c:07:bc:10:ef:07:
                    a7:45:d7:27:7a:3d:21:f4:b7:85:c4:55:37:44:38:
                    4a:82:dd:02:37:db:d1:7b:71:b6:55:a5:ab:5b:9f:
                    df:e1:fa:a5:7a:29:b1:d6:ad:19:3e:07:30:ec:7a:
                    64:47:e4:e2:75:09:4f:ce:1c:10:58:61:95:7f:7e:
                    93:f5:d7:9d:4a:ea:98:7e:ee:ab:0c:58:f8:1f:4d:
                    d6:22:0a:75:2a:f1:9a:5a:70:f2:30:9f:e2:fc:82:
                    83:fd:e1:86:a8:8d:5e:5b:bf:54:58:eb:26:b2:00:
                    21:bc:4e:fc:76:cf:5a:9c:0b:a7:66:68:92:d5:0b:
                    a4:99:38:7b:86:4e:b7:0c:e5:6e:08:db:b8:a1:c4:
                    78:c4:96:40:41:a5:be:15:ed:f9:82:c7:b6:fd:ae:
                    71:cd:6c:af:3a:28:ec:38:cd:90:66:0a:73:b1:c2:
                    eb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:53:7F:9C:1D:F8:6B:28:BD:B1:4C:70:DB:E2:45:B8:7E:1E:87:1F
            X509v3 Authority Key Identifier:
                keyid:E9:CF:EC:E0:D0:D2:F4:78:E7:4F:51:A1:BA:EA:88:E2:F2:4B:36:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/0/E9CFECE0D0D2F478E74F51A1BAEA88E2F24B3631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9CFECE0D0D2F478E74F51A1BAEA88E2F24B3631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/0/323830343a383833633a313330303a3a2f34302d3430203d3e20323732373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:883c:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         a0:11:43:7a:b6:c9:fb:ef:1a:a1:0b:88:c1:d8:bb:7d:37:2e:
         e6:7e:8f:8e:85:c1:b8:cb:45:4a:77:9f:0c:8d:44:2a:d7:9e:
         e8:73:d1:bd:5f:81:16:ba:92:a8:7b:69:51:83:08:90:eb:b6:
         ba:cd:4f:8e:b1:0e:a4:ae:ec:d4:24:5f:f8:c8:c8:5b:10:cc:
         d3:51:69:a9:3c:d5:4c:40:b5:83:99:dc:2a:05:dc:27:b2:45:
         b0:65:17:6f:51:01:94:6f:ea:50:8c:88:10:83:eb:e7:c9:59:
         6d:d7:cb:7a:4c:b1:55:89:b5:a2:64:5a:c5:5e:9e:30:c4:1f:
         5d:e2:42:e2:0a:e7:39:53:6c:a1:dd:81:13:85:37:4e:60:1e:
         32:94:86:95:d6:7e:3e:57:b0:33:15:87:c8:dd:71:f7:58:7d:
         d3:15:6c:00:9a:ac:d1:44:4c:cf:ce:9f:e9:f6:fa:1a:5c:32:
         c9:9e:76:45:16:00:c0:33:8b:7b:61:1c:82:aa:ce:ba:3f:69:
         0e:5e:bb:f7:35:e8:80:6a:91:a5:0a:3d:75:f9:1d:ec:60:cf:
         2c:8e:95:30:d4:9c:ed:66:d8:1f:1e:0f:c6:a1:9a:b1:0f:05:
         57:fd:40:e7:9e:16:71:d7:e7:0c:cf:1e:19:1d:6c:54:09:24:
         15:69:64:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org