Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/0/323830343a343733383a3a2f33322d3334203d3e20323637303339.roa
File:                     323830343a343733383a3a2f33322d3334203d3e20323637303339.roa (raw, json)
Hash identifier:          N1suCj+HhSSkdciX0pZvvEHQj/94hkigQdnskgO8MAw=
Subject key identifier:   84:DB:88:8F:9C:E2:DD:7E:B9:EB:BB:D5:57:F0:C2:78:0B:A0:0A:51
Certificate issuer:       /CN=8A5CAC0220F1C0DF5BC8EF97E5534FF358717618
Certificate serial:       3216FEF58C6E09F07573A06A8B81B9CF1731AA42
Authority key identifier: 8A:5C:AC:02:20:F1:C0:DF:5B:C8:EF:97:E5:53:4F:F3:58:71:76:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5CAC0220F1C0DF5BC8EF97E5534FF358717618.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/0/323830343a343733383a3a2f33322d3334203d3e20323637303339.roa
Signing time:             Tue 20 Feb 2024 21:00:00 +0000
ROA not before:           Tue 20 Feb 2024 20:55:00 +0000
ROA not after:            Tue 18 Feb 2025 21:00:00 +0000
asID:                     267039
IP address blocks:        2804:4738::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:16:fe:f5:8c:6e:09:f0:75:73:a0:6a:8b:81:b9:cf:17:31:aa:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A5CAC0220F1C0DF5BC8EF97E5534FF358717618
        Validity
            Not Before: Feb 20 20:55:00 2024 GMT
            Not After : Feb 18 21:00:00 2025 GMT
        Subject: CN=84DB888F9CE2DD7EB9EBBBD557F0C2780BA00A51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:71:1e:ac:a0:6c:c6:1e:dc:fa:1a:1c:d9:7e:
                    ca:d1:fe:4b:36:1d:6f:50:95:61:08:66:c2:16:fb:
                    ca:ef:65:cc:11:15:8c:19:db:e3:15:09:1f:83:b0:
                    9d:3a:20:56:69:6c:2a:af:0e:26:87:ce:d3:df:fd:
                    cb:2a:81:b4:de:a1:4e:9d:63:27:5f:96:a4:3a:98:
                    76:a7:08:9b:90:e5:82:67:4d:5a:dc:d1:bb:10:91:
                    8a:79:84:4c:49:a3:af:b5:d0:fa:d0:90:06:46:8d:
                    8d:04:0c:0b:37:88:c0:c6:84:fa:b8:f8:71:be:fc:
                    ac:51:b1:bc:ce:05:31:57:ca:5b:a7:98:0f:ca:03:
                    a1:20:bc:a8:36:75:1c:fd:d9:1f:22:f9:f5:9e:7f:
                    74:12:5f:a1:7a:25:10:17:2e:d2:cb:33:45:99:2d:
                    dd:8b:e3:ff:10:3c:24:5a:2d:b3:59:f0:80:7b:71:
                    d5:be:0f:33:8e:24:1f:50:85:1a:07:91:95:78:6e:
                    f0:3f:7a:22:cc:40:dd:6d:e4:93:e0:f4:c0:0b:09:
                    db:5f:d6:f4:04:fc:a4:85:dc:be:85:03:c3:ae:71:
                    4e:1d:64:3e:a6:02:4f:c3:38:3d:38:49:ab:58:8e:
                    44:dc:0d:52:f7:b0:74:a7:52:5d:93:31:94:2e:db:
                    a1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:DB:88:8F:9C:E2:DD:7E:B9:EB:BB:D5:57:F0:C2:78:0B:A0:0A:51
            X509v3 Authority Key Identifier:
                keyid:8A:5C:AC:02:20:F1:C0:DF:5B:C8:EF:97:E5:53:4F:F3:58:71:76:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/0/8A5CAC0220F1C0DF5BC8EF97E5534FF358717618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5CAC0220F1C0DF5BC8EF97E5534FF358717618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/0/323830343a343733383a3a2f33322d3334203d3e20323637303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4738::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:1e:34:10:99:40:23:07:82:6c:fe:14:ce:d9:7c:cb:28:c3:
         ca:01:c4:49:19:09:57:94:05:e7:27:a4:34:f8:3a:46:4d:97:
         21:2d:8b:f0:a6:d6:b1:d0:fa:09:eb:84:8d:91:cd:67:be:a0:
         3d:39:f5:06:15:e9:64:f7:f2:b7:57:e9:8a:b9:45:38:b3:ed:
         7a:ff:b7:5e:73:d1:c1:db:5f:39:4e:19:42:71:2b:9c:c9:06:
         77:aa:07:55:a2:4c:1c:48:ac:28:f5:e3:7f:e1:be:50:a2:26:
         72:1b:c7:a7:5d:c1:9f:06:2c:04:f0:ee:e4:cf:aa:49:29:c2:
         ec:6c:46:7e:62:34:4f:7f:66:8f:54:4f:cb:ed:cb:55:9a:ba:
         e0:a2:cd:6d:b7:16:b5:40:c1:e2:25:63:cc:db:97:59:91:1e:
         d6:9a:0b:d1:50:05:32:62:0e:98:30:ae:46:41:b4:28:ed:1d:
         3f:63:52:25:b8:60:39:73:38:c9:5f:40:c7:a5:10:74:b6:d8:
         c1:ba:40:3d:a2:ed:5c:44:9a:3a:b6:ad:83:d6:87:58:47:d6:
         7c:3e:2b:6f:d4:5f:59:0d:e9:66:b5:c4:bf:22:a4:06:51:35:
         c4:81:4e:8c:5a:a3:a3:fa:fa:d2:c8:b4:65:87:9a:c0:8f:c4:
         03:f4:e7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:11 2024 by rpki-client on console-ams.rpki-client.org