Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/323830343a353766343a3831303a3a2f34342d3434203d3e20323638303937.roa
File:                     323830343a353766343a3831303a3a2f34342d3434203d3e20323638303937.roa (raw, json)
Hash identifier:          nSgfQ/U6uVDru75Nnk1GnLG8yO1R2kwoAKhVFD81tJ0=
Subject key identifier:   F5:B8:38:AF:C1:2C:B6:7D:6C:5C:25:5B:1B:38:DA:80:76:40:1D:F6
Certificate issuer:       /CN=24C528B0C571137D15EAEA7A144B7B574A83ADA7
Certificate serial:       33C8F56DF671A7C3BD23565597DCE4FD138DC7CF
Authority key identifier: 24:C5:28:B0:C5:71:13:7D:15:EA:EA:7A:14:4B:7B:57:4A:83:AD:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24C528B0C571137D15EAEA7A144B7B574A83ADA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/323830343a353766343a3831303a3a2f34342d3434203d3e20323638303937.roa
Signing time:             Mon 15 Jan 2024 12:14:50 +0000
ROA not before:           Mon 15 Jan 2024 12:09:50 +0000
ROA not after:            Mon 13 Jan 2025 12:14:50 +0000
asID:                     268097
IP address blocks:        2804:57f4:810::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c8:f5:6d:f6:71:a7:c3:bd:23:56:55:97:dc:e4:fd:13:8d:c7:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24C528B0C571137D15EAEA7A144B7B574A83ADA7
        Validity
            Not Before: Jan 15 12:09:50 2024 GMT
            Not After : Jan 13 12:14:50 2025 GMT
        Subject: CN=F5B838AFC12CB67D6C5C255B1B38DA8076401DF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:89:71:39:93:69:d6:7a:ad:14:92:a6:26:25:
                    84:ad:bf:f0:5c:ca:39:84:18:2b:92:96:0e:f9:e5:
                    20:2c:c2:10:7f:7a:b9:67:d3:e7:b9:1b:50:94:1e:
                    f4:e5:31:5f:71:9f:6f:81:be:76:5a:de:d9:f3:5e:
                    1c:9d:2a:ce:d7:ce:3c:4c:b7:00:6c:40:1a:42:d7:
                    c2:0c:2b:5f:81:e4:ce:30:34:91:bf:67:09:58:c2:
                    c9:46:c8:23:29:b1:5e:4f:fc:75:bc:00:fc:b7:a5:
                    c0:3e:b1:c1:a0:0d:dc:c0:19:09:eb:f0:50:82:ff:
                    de:c1:a0:f6:f5:c0:b1:64:c5:a1:a2:c5:26:87:32:
                    b4:47:6d:6d:20:ba:76:18:f4:37:eb:6f:49:5e:d8:
                    e3:5a:72:e6:bf:ad:07:b3:54:06:06:73:41:1d:7f:
                    ec:fe:bd:eb:87:ad:39:78:37:7c:79:58:fc:04:0a:
                    a5:0d:2e:ef:5b:21:e6:ba:85:bd:a9:37:76:cb:16:
                    3b:71:e6:a5:a7:6b:23:30:52:a7:0c:78:36:86:3c:
                    9b:ea:d1:f7:56:7b:96:2f:a0:8e:ef:11:13:13:cc:
                    7b:36:83:2b:1e:d5:f8:a6:24:d5:4d:f9:9c:cb:f2:
                    8a:0f:bc:d7:c7:8b:4b:ea:2a:ce:4c:ac:40:72:52:
                    7b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B8:38:AF:C1:2C:B6:7D:6C:5C:25:5B:1B:38:DA:80:76:40:1D:F6
            X509v3 Authority Key Identifier:
                keyid:24:C5:28:B0:C5:71:13:7D:15:EA:EA:7A:14:4B:7B:57:4A:83:AD:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/24C528B0C571137D15EAEA7A144B7B574A83ADA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24C528B0C571137D15EAEA7A144B7B574A83ADA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/323830343a353766343a3831303a3a2f34342d3434203d3e20323638303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57f4:810::/44

    Signature Algorithm: sha256WithRSAEncryption
         71:75:52:cd:02:a4:b7:f6:13:1c:8a:bc:cf:20:ba:a1:48:6e:
         86:c5:05:6b:5d:50:04:81:97:ec:2b:35:df:c5:16:2d:ba:49:
         d4:62:d4:53:85:58:b5:79:07:33:62:8b:46:27:79:2d:5b:04:
         20:58:30:5a:b4:b0:41:a4:4b:78:16:d3:a0:54:c2:52:ab:a5:
         57:7c:24:30:4a:15:ef:db:2f:b4:f5:09:f4:49:cc:b0:f0:61:
         53:25:d2:70:3f:07:65:02:ee:08:0b:34:3e:4d:87:3e:94:df:
         9f:37:f9:4b:9d:f3:a7:25:a2:3d:71:51:f3:04:45:67:4c:40:
         a6:42:27:13:a7:e1:93:d9:ea:66:11:d8:9d:0a:77:d1:63:3f:
         d7:01:57:95:92:6f:77:5f:b4:13:e3:e1:93:d0:55:2d:d8:81:
         07:5b:eb:b8:52:00:6d:b3:2a:0a:ef:92:a4:e4:8b:1f:17:cb:
         00:48:70:95:b0:b9:68:23:47:b7:25:c4:9d:fe:55:ce:5b:5f:
         b5:58:b4:50:0b:98:97:93:f7:c2:55:c9:b6:bb:4b:39:15:88:
         51:81:93:07:34:05:a1:0e:b9:d3:50:2b:d1:76:96:fd:8c:01:
         0d:2f:0e:ac:be:84:6f:88:b6:4c:76:57:2e:ab:0d:c6:cd:69:
         70:e8:b7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org