Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/652VfG9jGRLVrMoaiKmMwhcVK1sRzZxnMBknfL5jPF2k/0/323830343a313565343a3a2f33322d3438203d3e203533303031.roa
File:                     323830343a313565343a3a2f33322d3438203d3e203533303031.roa (raw, json)
Hash identifier:          t8CEkx2npbTUPT3pMz56BAh0/WCJ5LPMZHehyF1ou9w=
Subject key identifier:   CF:2A:3E:16:7D:2C:31:26:8F:B8:5B:30:EF:66:4E:2F:D8:EE:6F:DE
Certificate issuer:       /CN=739B24C63577F08B1F33A7F6F36AE3ACB7D0C5D2
Certificate serial:       5120A433394A6134887A5AB4B85D3DEFFF62883B
Authority key identifier: 73:9B:24:C6:35:77:F0:8B:1F:33:A7:F6:F3:6A:E3:AC:B7:D0:C5:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/739B24C63577F08B1F33A7F6F36AE3ACB7D0C5D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/652VfG9jGRLVrMoaiKmMwhcVK1sRzZxnMBknfL5jPF2k/0/323830343a313565343a3a2f33322d3438203d3e203533303031.roa
Signing time:             Fri 09 Feb 2024 16:00:00 +0000
ROA not before:           Fri 09 Feb 2024 15:55:00 +0000
ROA not after:            Fri 07 Feb 2025 16:00:00 +0000
asID:                     53001
IP address blocks:        2804:15e4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:20:a4:33:39:4a:61:34:88:7a:5a:b4:b8:5d:3d:ef:ff:62:88:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=739B24C63577F08B1F33A7F6F36AE3ACB7D0C5D2
        Validity
            Not Before: Feb  9 15:55:00 2024 GMT
            Not After : Feb  7 16:00:00 2025 GMT
        Subject: CN=CF2A3E167D2C31268FB85B30EF664E2FD8EE6FDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:09:e7:2c:17:b8:87:be:42:c7:e6:ba:06:8f:
                    a6:60:03:4e:35:cf:83:4e:38:1b:1d:f3:f1:89:aa:
                    3a:60:ab:98:21:e8:3d:cb:39:90:28:45:88:f4:9a:
                    40:f6:af:9f:f9:d4:dd:d3:b6:58:6e:3e:7f:45:2d:
                    64:b0:60:e9:11:e5:e4:31:62:30:a6:d7:66:14:a4:
                    37:52:c1:d4:e8:30:b9:5a:a9:60:53:1a:03:58:42:
                    1f:a9:7d:94:f3:a3:fa:e0:b9:b9:df:21:9a:46:32:
                    5e:dc:10:ed:fd:a5:68:f6:38:fa:f3:42:fe:d9:7b:
                    5d:0c:a2:ff:e2:33:eb:b4:75:f3:12:93:57:b8:a5:
                    cc:8e:e9:7f:77:68:70:0a:b7:a4:e4:af:27:77:94:
                    b5:b4:54:ac:c4:0e:ab:e5:15:b8:58:2d:45:1b:2b:
                    91:24:9a:f2:10:43:cd:c1:a2:39:f4:46:f1:78:55:
                    a4:14:ef:5c:dd:4a:f0:bc:06:db:ff:24:d6:6a:c0:
                    4c:d3:77:0b:38:bc:6e:2a:8b:ec:31:fb:99:0c:da:
                    9b:4d:11:d5:f7:19:92:ed:1b:d2:20:0d:5b:45:36:
                    d3:ec:02:ac:f5:64:7a:29:1c:e0:8a:10:a1:75:d4:
                    35:51:2f:3c:8c:90:52:fe:bc:c9:d8:90:43:a8:0b:
                    88:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2A:3E:16:7D:2C:31:26:8F:B8:5B:30:EF:66:4E:2F:D8:EE:6F:DE
            X509v3 Authority Key Identifier:
                keyid:73:9B:24:C6:35:77:F0:8B:1F:33:A7:F6:F3:6A:E3:AC:B7:D0:C5:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/652VfG9jGRLVrMoaiKmMwhcVK1sRzZxnMBknfL5jPF2k/0/739B24C63577F08B1F33A7F6F36AE3ACB7D0C5D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/739B24C63577F08B1F33A7F6F36AE3ACB7D0C5D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/652VfG9jGRLVrMoaiKmMwhcVK1sRzZxnMBknfL5jPF2k/0/323830343a313565343a3a2f33322d3438203d3e203533303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:15e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:06:21:fe:3e:19:b2:46:12:65:7e:b9:a1:a5:96:d0:65:de:
         51:d7:bc:0c:ce:9a:40:bd:b1:1f:ba:6e:ff:95:a9:ec:00:c3:
         76:1c:5a:ba:5b:14:ac:5f:3f:df:af:7c:d1:17:33:f0:e9:71:
         1e:ff:e4:50:23:28:2f:d0:77:a5:c4:23:af:b8:4b:8c:c9:4d:
         25:eb:59:6d:0b:09:d4:6b:cc:e8:f6:44:fd:94:cf:dd:ec:b6:
         72:44:f1:69:de:14:7c:07:f9:96:65:8e:12:58:d5:77:0c:25:
         72:c9:5f:9d:6c:4c:22:06:f0:9a:b1:72:16:91:38:1f:f3:cd:
         53:80:1a:19:05:33:ba:33:56:71:ba:43:33:32:f2:7a:c8:db:
         70:6a:a2:b4:b1:35:72:e2:e0:de:08:db:60:eb:34:bc:16:22:
         2c:b5:ab:17:97:34:74:1a:e3:00:aa:cf:0a:a8:32:86:d8:8f:
         1e:21:05:e1:43:3c:99:33:8e:97:f0:32:8f:28:fa:a0:8f:ea:
         ca:92:39:99:c2:36:07:c4:c8:7a:e0:e8:e6:dc:5a:18:0b:f7:
         8a:e7:f0:9a:4e:5f:66:06:b9:63:5d:98:6c:da:2a:22:71:95:
         ad:b4:6a:18:97:6e:d0:85:11:3c:af:f7:28:b4:60:43:30:0e:
         52:c3:ef:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:13 2024 by rpki-client on console-ams.rpki-client.org